$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: x7XixUmhJRc4XMqDRMAjduB73IQtfcF5ykREppLQOls= Subject key identifier: 2D:69:E6:72:67:4B:D7:CA:BA:1E:2E:D0:C9:38:6F:DE:0C:52:A8:FC Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 08:02:38 +0000 Manifest this update: Mon 03 Nov 2025 08:02:38 +0000 Manifest next update: Mon 10 Nov 2025 08:02:38 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: C0tYnhSMcEw1oDr1BxfSrtiZUmu6sfwjjY+gmwV1WEc=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: jehIFKXQzxSa2naNE6wehGEUSZh95Rm5N+knZ8mynTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Nov 3 08:02:38 2025 GMT Not After : Nov 10 08:02:38 2025 GMT Subject: CN=6908619e-5075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:39:f4:2c:14:67:17:b8:d6:44:13:bd:6a: 97:89:fb:ef:be:d4:87:86:5b:b2:51:ca:ad:bf:ec: a2:59:38:0d:19:2c:17:5f:ea:f9:25:37:e3:40:44: 1a:b5:9e:92:e5:28:c7:a3:c5:49:9e:fc:3e:23:80: f9:29:8e:2c:d3:ad:77:21:75:9f:0a:42:ca:7e:b0: 8a:cf:44:46:9e:38:ad:25:1d:61:4a:64:50:86:8a: ec:fd:10:a0:60:02:1b:e5:16:2a:80:c4:73:f5:4a: 59:55:c0:b1:99:d3:ab:d4:c4:60:df:68:49:a6:f8: 3e:05:e0:ea:25:55:52:95:3d:12:a6:28:7a:60:ef: bc:14:ef:5a:4d:68:4d:71:63:fb:22:93:b3:c8:5c: 91:1c:d6:ef:76:7c:2c:a1:64:01:04:bd:96:db:4d: 45:73:b3:6a:d6:9f:99:08:f9:11:ab:2f:3a:03:bb: 93:c3:41:8f:7e:01:16:ce:42:2c:b9:2a:e5:ee:6b: 08:4f:55:5d:67:f1:e5:e9:ee:43:38:ff:ff:75:2d: 46:36:e3:7f:c9:d9:9d:4d:44:cb:f7:94:11:f2:70: 9e:84:d8:e3:cb:a3:d1:47:d1:d5:43:da:d6:0f:1d: 7d:8e:89:99:c5:48:46:82:70:8c:17:54:2c:bf:0d: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:69:E6:72:67:4B:D7:CA:BA:1E:2E:D0:C9:38:6F:DE:0C:52:A8:FC X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:aa:b4:bc:78:77:3b:1e:ed:29:e3:14:d0:90:e5:79:a2:a0: 6e:2c:6a:91:d5:90:fa:9a:d8:97:fa:64:79:bc:23:2b:51:25: 5e:8a:49:45:6b:8f:03:a5:e4:14:12:51:15:89:01:16:95:06: 07:dc:f0:b0:f6:9a:ee:7e:f8:12:8f:42:0d:5d:a9:77:87:25: 14:14:e2:95:29:b0:f1:d0:bd:e9:82:87:84:c5:26:5d:d1:cd: cb:20:4c:5f:cf:fd:33:71:c2:d5:17:0b:d9:da:ad:9b:fa:23: e4:78:da:9a:83:8e:27:97:13:61:fa:28:4f:67:de:ff:04:dc: 10:09:1a:4d:87:98:44:e8:12:0b:65:98:74:19:ea:8a:10:3b: 3d:56:57:6d:44:5a:a1:53:79:4b:56:bd:b7:45:c7:fc:b5:07: 21:2b:35:8b:0c:6b:df:32:c0:60:55:a4:24:f3:f8:34:5c:0a: b0:40:e7:82:06:97:bd:b6:8d:bc:84:c9:ea:2f:7c:99:2b:2d: f0:60:ea:e6:38:54:53:dd:0a:7d:2f:2f:b5:70:22:90:a5:b4: 90:52:d5:1e:45:9f:8d:dc:ea:3a:ca:74:b5:16:65:1b:48:4f: a5:ee:14:82:3a:e9:b0:fb:cd:7a:f2:e4:c3:58:5f:2b:3f:7d: 6d:64:ba:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkE3NjExMC8GA1UEBRMoQTYyRkNENjQ1NEE2OEEwODY1RjZCOTVDQzBFODc3NDQ5 RUYzRUZBOTAeFw0yNTExMDMwODAyMzhaFw0yNTExMTAwODAyMzhaMBgxFjAUBgNV BAMTDTY5MDg2MTllLTUwNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn3Dn0LBRnF7jWRBO9apeJ++++1IeGW7JRyq2/7KJZOA0ZLBdf6vklN+NARBq1 npLlKMejxUme/D4jgPkpjizTrXchdZ8KQsp+sIrPREaeOK0lHWFKZFCGiuz9EKBg AhvlFiqAxHP1SllVwLGZ06vUxGDfaEmm+D4F4OolVVKVPRKmKHpg77wU71pNaE1x Y/sik7PIXJEc1u92fCyhZAEEvZbbTUVzs2rWn5kI+RGrLzoDu5PDQY9+ARbOQiy5 KuXuawhPVV1n8eXp7kM4//91LUY243/J2Z1NRMv3lBHycJ6E2OPLo9FH0dVD2tYP HX2OiZnFSEaCcIwXVCy/DbdVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULWnmcmdL 18q6Hi7QyThv3gxSqPwwHwYDVR0jBBgwFoAUpi/NZFSmighl9rlcwOh3RJ7z76kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQTc2LzA4N0NDN0EwQjBD MDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGlfTlpGU21pZ2hsOXJsY3dPaDNSSjd6NzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC QTc2LzA4N0NDN0EwQjBDMDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdo bDlybGN3T2gzUko3ejc2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+qtLx4dzse7SnjFNCQ5XmioG4sapHVkPqa2Jf6ZHm8IytRJV6KSUVr jwOl5BQSURWJARaVBgfc8LD2mu5++BKPQg1dqXeHJRQU4pUpsPHQvemCh4TFJl3R zcsgTF/P/TNxwtUXC9narZv6I+R42pqDjieXE2H6KE9n3v8E3BAJGk2HmEToEgtl mHQZ6ooQOz1WV21EWqFTeUtWvbdFx/y1ByErNYsMa98ywGBVpCTz+DRcCrBA54IG l722jbyEyeovfJkrLfBg6uY4VFPdCn0vL7VwIpCltJBS1R5Fn43c6jrKdLUWZRtI T6XuFII66bD7zXry5MNYXys/fW1kutI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:44 2025 by rpki-client