$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft File: Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json) Hash identifier: jLjGxJejc+i1OSG9p38xzabUj6mGAjm9AB+mquplnlQ= Subject key identifier: 36:3B:67:45:DF:FD:50:1C:D9:6C:01:FA:EE:48:2E:84:86:F9:79:DD Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 Certificate issuer: /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft Manifest number: 019A Signing time: Mon 03 Nov 2025 03:20:46 +0000 Manifest this update: Mon 03 Nov 2025 03:20:46 +0000 Manifest next update: Mon 10 Nov 2025 03:20:46 +0000 Files and hashes: 1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: Wn025p1lUoebC5aYMKLW7BG3YMYCmRztl4dvf4qPnkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Validity Not Before: Nov 3 03:20:46 2025 GMT Not After : Nov 10 03:20:46 2025 GMT Subject: CN=69081f8e-ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:a4:fd:15:e6:ef:e8:d0:c1:ac:1d:1a:25: 9f:f3:76:97:32:eb:7e:2a:ce:91:84:14:28:4f:7f: b7:85:8f:9f:e5:9d:29:a9:d3:fd:ea:20:e2:03:f2: c0:a3:de:21:05:fc:93:fc:e3:82:df:44:73:39:5b: 5a:19:a5:29:b1:28:52:41:01:4c:50:a3:b9:34:6e: 6c:b0:ac:7d:41:a2:f6:a7:bd:d0:47:d1:07:07:cf: 10:7f:3c:a7:29:2d:7d:20:d5:f6:5e:ca:7f:25:80: a7:34:c9:80:cc:62:c3:68:82:c1:da:b1:94:b4:f9: 50:f1:d5:69:e1:ee:b0:fe:4f:55:b3:86:de:5c:6e: 0f:e5:b9:6e:5e:3d:13:06:de:a2:86:e1:12:78:4e: 33:d1:4a:d0:3f:9d:56:61:98:8c:4c:b9:03:26:73: 86:28:c4:7b:79:4e:7f:ed:7b:5b:62:88:3b:26:e2: 5c:ce:be:cf:90:9f:17:04:70:8b:24:6e:e8:ab:5f: 93:bd:bf:f5:1a:8e:db:22:72:20:82:01:af:81:5e: d6:00:17:9f:67:74:f8:16:cf:24:ee:13:62:73:78: 26:dd:ad:bf:b9:39:c8:20:a8:c5:fe:f5:84:66:4f: e3:d4:fa:f2:65:45:2d:9b:64:f8:f5:64:5b:c6:d9: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:67:45:DF:FD:50:1C:D9:6C:01:FA:EE:48:2E:84:86:F9:79:DD X509v3 Authority Key Identifier: keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:17:6b:71:14:22:0c:54:a9:2c:56:8e:da:9f:ed:7f:d0: 5a:68:6d:11:0b:8f:11:5a:b0:a1:6d:f1:4e:58:d2:9c:3a:d6: 55:3e:a8:68:d0:1d:2e:e6:1f:14:c6:83:af:e3:d9:30:ce:0b: c2:2b:fe:96:95:09:e8:b3:f0:03:9d:60:2f:c5:24:95:e8:07: 27:19:58:1a:d9:b4:4b:ca:41:0c:b6:89:23:6f:1e:35:c0:da: 5d:40:e2:b4:33:b2:97:46:6b:8e:76:64:d1:b5:4a:a4:92:88: f3:b3:b9:3a:0c:55:44:bb:3c:80:76:14:70:70:d1:9d:88:54: 1b:c9:d0:4d:d3:2a:24:ea:a0:4b:9c:15:67:55:a4:cf:a1:d5: ed:89:83:a5:18:7d:ee:55:2f:73:9f:5e:66:1e:f9:17:e5:71: d1:03:7c:4f:4b:37:5b:fb:0f:e9:a0:22:ba:6c:cf:db:54:f3: 64:9d:84:2d:78:88:88:d0:23:5c:0a:34:47:bb:e1:b7:41:68: 04:24:ca:e5:b1:08:ff:52:87:87:22:e4:4c:44:9f:eb:47:32: 3f:2a:23:48:39:2f:c4:cd:a3:51:c2:7f:d1:c3:d2:50:74:32: fb:fe:d1:05:8d:40:08:f0:fe:80:b9:d6:a1:d3:9d:fb:36:c3: 43:65:f8:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M2MzYxMTAvBgNVBAUTKDM2RjdGNURCNzAzNUI5MEZEQjI5Mjg1OEUyRkNGOEU2 Qjk5MTgxNzgwHhcNMjUxMTAzMDMyMDQ2WhcNMjUxMTEwMDMyMDQ2WjAYMRYwFAYD VQQDEw02OTA4MWY4ZS1mZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb+k/RXm7+jQwawdGiWf83aXMut+Ks6RhBQoT3+3hY+f5Z0pqdP96iDiA/LA o94hBfyT/OOC30RzOVtaGaUpsShSQQFMUKO5NG5ssKx9QaL2p73QR9EHB88Qfzyn KS19INX2Xsp/JYCnNMmAzGLDaILB2rGUtPlQ8dVp4e6w/k9Vs4beXG4P5bluXj0T Bt6ihuESeE4z0UrQP51WYZiMTLkDJnOGKMR7eU5/7XtbYog7JuJczr7PkJ8XBHCL JG7oq1+Tvb/1Go7bInIgggGvgV7WABefZ3T4Fs8k7hNic3gm3a2/uTnIIKjF/vWE Zk/j1PryZUUtm2T49WRbxtn+YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY7Z0Xf /VAc2WwB+u5ILoSG+XndMB8GA1UdIwQYMBaAFDb39dtwNbkP2ykoWOL8+Oa5kYF4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzYzNi81NEQyN0UyMDQy MzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVRX2JLU2hZNHZ6NDVybVJn WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052ZjEyM0ExdVFfYktTaFk0dno0NXJtUmdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzYzNi81NEQyN0UyMDQyMzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVR X2JLU2hZNHZ6NDVybVJnWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5yxdrcRQiDFSpLFaO2p/tf9BaaG0RC48RWrChbfFOWNKcOtZVPqho 0B0u5h8UxoOv49kwzgvCK/6WlQnos/ADnWAvxSSV6AcnGVga2bRLykEMtokjbx41 wNpdQOK0M7KXRmuOdmTRtUqkkojzs7k6DFVEuzyAdhRwcNGdiFQbydBN0yok6qBL nBVnVaTPodXtiYOlGH3uVS9zn15mHvkX5XHRA3xPSzdb+w/poCK6bM/bVPNknYQt eIiI0CNcCjRHu+G3QWgEJMrlsQj/UoeHIuRMRJ/rRzI/KiNIOS/EzaNRwn/Rw9JQ dDL7/tEFjUAI8P6Audah0537NsNDZfgg -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:38 2025 by rpki-client