$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: JYrh2kiKu/6kUA7nrJzD+S5he/VpB0wizoFJbUvWGK8= Subject key identifier: 9F:81:D4:F6:DB:91:09:58:5F:EE:36:66:1E:25:B5:7A:60:17:64:8A Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A7C Signing time: Sun 02 Nov 2025 19:34:15 +0000 Manifest this update: Sun 02 Nov 2025 19:34:14 +0000 Manifest next update: Sun 09 Nov 2025 19:34:14 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: c89+j6fM08z3JiI0XST5ZNvoC87E9Lb7crD7HWLniuY=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Nov 2 19:34:14 2025 GMT Not After : Nov 9 19:34:14 2025 GMT Subject: CN=6907b237-ef11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:3c:54:f0:2a:48:04:b3:f2:0d:de:93:50: 49:44:cc:c8:0a:ac:3c:e8:40:8b:e6:02:5e:2b:3c: 94:42:f2:b9:25:40:d0:fe:e0:bf:a8:9d:23:6a:77: b3:6e:27:02:17:c9:b7:37:3b:98:8e:1d:fb:09:68: 61:b3:d2:55:3d:f8:bb:35:1c:5f:a3:e9:57:60:8f: 64:1c:80:53:9e:fd:57:2f:4e:50:17:bd:91:4f:be: 78:6f:f0:63:7d:6f:ef:3e:47:0f:0a:27:0e:3a:33: 06:82:41:9b:a6:3c:db:7f:ba:9d:4f:8d:28:ce:2e: 90:96:07:c7:4c:bb:d9:7b:41:5f:e0:ca:3a:9f:91: b3:03:eb:9a:c4:b9:39:4d:bd:8b:82:b9:f6:50:7e: 8b:55:e5:18:34:ab:8b:c0:a8:82:ca:71:cb:97:9c: 1d:b9:19:2a:9a:a0:56:60:ab:4f:d3:4b:e5:8c:ac: bb:87:55:e8:bf:6b:de:68:08:67:dd:ae:8e:e9:1d: 10:90:56:50:26:96:a3:e3:97:7d:31:52:08:5b:a7: c9:f0:64:29:a7:58:e0:46:2d:ef:c1:58:27:12:cb: 82:56:7e:73:ac:74:cf:54:a4:5e:66:4c:94:ed:8a: 1d:c2:52:09:e3:66:8b:30:fc:c5:9d:39:f3:9f:70: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:81:D4:F6:DB:91:09:58:5F:EE:36:66:1E:25:B5:7A:60:17:64:8A X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:cf:08:49:1f:f4:db:63:f3:82:f4:60:89:c2:30:96:99: c6:33:a6:75:1c:72:ec:ed:16:09:e9:b1:bc:cf:73:e4:65:64: b1:71:38:fb:b2:cb:25:80:b9:e8:1d:d5:1e:f9:23:b6:9a:2a: 5f:db:d0:53:95:9c:d3:f4:a1:05:8e:d0:b7:87:92:4d:a9:77: 6c:52:93:2d:57:82:21:86:2f:7b:4d:ba:cf:69:21:f0:d5:02: af:60:12:43:ab:75:90:01:d2:d6:10:e1:68:b3:f9:bf:4d:3d: 62:a6:49:a5:e5:07:a8:23:56:e5:07:01:ba:6f:dd:d1:18:19: 3f:35:eb:6e:cf:29:2c:d9:c6:9f:50:9e:e7:09:d8:f4:04:27: b2:74:f7:57:d9:39:7d:b2:67:87:c1:6c:3d:20:17:63:01:48: 49:6e:14:9a:09:18:3a:33:1c:fe:6b:bf:45:37:87:3d:2f:cf: 17:0e:6d:98:9a:fe:44:87:5a:6b:2f:70:e4:01:ac:2c:0b:50: 99:ab:13:eb:84:69:e5:4d:fd:94:b0:8f:45:2f:d3:8e:15:b1: cf:54:0e:6c:5e:89:2e:4c:fc:0a:57:25:4a:5f:b1:f0:05:c6: f6:06:dc:06:ce:f7:4a:c3:b7:22:ba:6d:8d:a9:6c:a1:78:f4: 9b:0c:f3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUxMTAyMTkzNDE0WhcNMjUxMTA5MTkzNDE0WjAYMRYwFAYD VQQDEw02OTA3YjIzNy1lZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucQ8VPAqSASz8g3ek1BJRMzICqw86ECL5gJeKzyUQvK5JUDQ/uC/qJ0janez bicCF8m3NzuYjh37CWhhs9JVPfi7NRxfo+lXYI9kHIBTnv1XL05QF72RT754b/Bj fW/vPkcPCicOOjMGgkGbpjzbf7qdT40ozi6QlgfHTLvZe0Ff4Mo6n5GzA+uaxLk5 Tb2Lgrn2UH6LVeUYNKuLwKiCynHLl5wduRkqmqBWYKtP00vljKy7h1Xov2veaAhn 3a6O6R0QkFZQJpaj45d9MVIIW6fJ8GQpp1jgRi3vwVgnEsuCVn5zrHTPVKReZkyU 7YodwlIJ42aLMPzFnTnzn3DwyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+B1Pbb kQlYX+42Zh4ltXpgF2SKMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJvM8ISR/022PzgvRgicIwlpnGM6Z1HHLs7RYJ6bG8z3PkZWSxcTj7 ssslgLnoHdUe+SO2mipf29BTlZzT9KEFjtC3h5JNqXdsUpMtV4Ihhi97TbrPaSHw 1QKvYBJDq3WQAdLWEOFos/m/TT1ipkml5QeoI1blBwG6b93RGBk/Netuzyks2caf UJ7nCdj0BCeydPdX2Tl9smeHwWw9IBdjAUhJbhSaCRg6Mxz+a79FN4c9L88XDm2Y mv5Eh1prL3DkAawsC1CZqxPrhGnlTf2UsI9FL9OOFbHPVA5sXokuTPwKVyVKX7Hw Bcb2BtwGzvdKw7cium2NqWyhePSbDPPy -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:23 2025 by rpki-client