$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: rRTAzrxLLytzS2QMbP7Bj7K/VJM2uKXrpcQe8i/GlL0= Subject key identifier: D1:A4:11:3B:F3:97:AF:42:40:C3:D0:C6:6E:A4:F5:6A:63:F9:B3:23 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A58 Signing time: Sun 24 Aug 2025 19:41:22 +0000 Manifest this update: Sun 24 Aug 2025 19:41:21 +0000 Manifest next update: Sun 31 Aug 2025 19:41:21 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: VULobyymx4DfxeOYQZeETjqRBHVfIpXe041Pry26oYw=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Aug 24 19:41:21 2025 GMT Not After : Aug 31 19:41:21 2025 GMT Subject: CN=68ab6ae1-7c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:46:67:de:0f:57:94:0d:d9:48:0e:dd:b5: 87:36:4a:28:b3:8b:9b:a7:a7:96:5f:91:17:92:c5: c8:7a:28:7b:8e:20:c0:2a:19:28:81:16:65:a3:43: 49:ab:18:bc:9b:d4:19:ef:ca:a0:6f:58:fa:c2:20: 8b:68:b0:9f:fa:db:77:eb:52:5b:07:5d:1f:08:2e: b2:8e:10:7c:80:a2:83:89:7b:aa:9c:e9:76:a5:dd: 55:9e:f0:9c:ea:49:fd:7b:7d:5c:0c:56:f3:2b:ee: 14:10:d6:31:39:38:46:b8:7f:93:c2:76:52:49:48: 46:2a:37:1b:45:c7:44:85:0a:1e:2b:5b:ae:6b:f7: e2:0e:3e:19:e1:af:ec:a1:87:6d:26:58:82:e0:86: 95:a2:61:10:a0:2a:85:8c:f0:7c:e6:0d:cc:4f:4e: a1:a5:5a:76:88:53:74:4f:a9:c8:00:21:85:6c:5b: a3:eb:cd:62:cc:03:eb:1b:21:31:52:9f:9e:a5:ae: c8:df:01:40:ca:74:9e:bd:29:f2:c5:b7:90:a8:0d: e4:6f:37:71:69:ee:ab:0b:ac:67:52:46:32:7f:12: 7f:c7:a5:bf:d2:18:6a:5b:cf:c9:79:e1:13:5b:d6: 6d:b2:59:ed:d2:e4:e6:4e:f1:39:f6:57:fb:2d:80: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A4:11:3B:F3:97:AF:42:40:C3:D0:C6:6E:A4:F5:6A:63:F9:B3:23 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:45:a2:36:4a:79:39:12:7e:fa:f4:68:63:ce:6f:92:32:a9: 94:0b:17:6e:ce:87:71:46:f4:ef:49:76:ef:88:19:d7:4a:a0: f2:73:21:75:81:bd:8c:0f:e9:7d:de:c5:98:02:9b:70:31:ca: cd:9a:6d:f8:41:3e:fa:e6:d8:c8:79:47:ba:b7:5a:7f:f9:d6: 5b:e8:92:d7:6f:32:4e:7f:43:51:01:d4:46:e9:a6:ed:4d:7c: dd:23:41:e2:d4:f6:d5:98:dc:f4:2c:c1:6f:fd:83:0a:6d:92: ba:93:f2:ab:43:db:b7:fa:d2:54:c1:41:3a:27:da:ea:80:7b: c4:78:8e:a4:e9:ce:62:f8:ed:17:34:ce:fa:90:d4:53:a0:87: 9b:79:83:47:33:fd:41:f2:00:22:1f:12:bf:b9:f4:0f:57:74: c8:02:e7:70:f9:14:44:c5:99:c0:31:c9:a8:67:85:a1:c4:3e: 00:22:d0:36:20:d2:9a:d9:93:c7:a8:1d:f0:5a:f7:9d:0a:ac: 99:a4:ed:1a:ce:0a:a2:76:8e:64:0f:56:25:71:5b:d8:8f:76: 18:52:87:3c:be:31:0a:38:4c:2d:7c:6a:f2:e8:dd:9f:d0:7a: e8:9d:bf:bb:66:cc:b3:0c:c1:5e:8b:e2:10:d0:a8:8d:f7:0a: 4f:6e:f8:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwODI0MTk0MTIxWhcNMjUwODMxMTk0MTIxWjAYMRYwFAYD VQQDEw02OGFiNmFlMS03Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUFGZ94PV5QN2UgO3bWHNkoos4ubp6eWX5EXksXIeih7jiDAKhkogRZlo0NJ qxi8m9QZ78qgb1j6wiCLaLCf+tt361JbB10fCC6yjhB8gKKDiXuqnOl2pd1VnvCc 6kn9e31cDFbzK+4UENYxOThGuH+TwnZSSUhGKjcbRcdEhQoeK1uua/fiDj4Z4a/s oYdtJliC4IaVomEQoCqFjPB85g3MT06hpVp2iFN0T6nIACGFbFuj681izAPrGyEx Up+epa7I3wFAynSevSnyxbeQqA3kbzdxae6rC6xnUkYyfxJ/x6W/0hhqW8/JeeET W9Ztslnt0uTmTvE59lf7LYB3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGkETvz l69CQMPQxm6k9Wpj+bMjMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMRaI2Snk5En769Ghjzm+SMqmUCxduzodxRvTvSXbviBnXSqDycyF1 gb2MD+l93sWYAptwMcrNmm34QT765tjIeUe6t1p/+dZb6JLXbzJOf0NRAdRG6abt TXzdI0Hi1PbVmNz0LMFv/YMKbZK6k/KrQ9u3+tJUwUE6J9rqgHvEeI6k6c5i+O0X NM76kNRToIebeYNHM/1B8gAiHxK/ufQPV3TIAudw+RRExZnAMcmoZ4WhxD4AItA2 INKa2ZPHqB3wWvedCqyZpO0azgqido5kD1YlcVvYj3YYUoc8vjEKOEwtfGry6N2f 0Hronb+7ZsyzDMFei+IQ0KiN9wpPbvie -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:15 2025 by rpki-client