$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: 8mj+toBkrhzPvfg401K3Tvssg1VZmz0s9A1cJIKBnMU= Subject key identifier: B8:EA:A7:B6:39:B8:40:7E:C2:EF:72:15:63:4A:40:E5:25:FA:24:7C Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: 0115 Signing time: Wed 17 Sep 2025 05:38:27 +0000 Manifest this update: Wed 17 Sep 2025 05:38:26 +0000 Manifest next update: Wed 24 Sep 2025 05:38:26 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: 0Frm7FBMwYKgYRMhvmseUnNG0Ri45EVBOrXpN7SnrK4=) 2: 700507423B1911F0B0CC573EC4F9AE02.roa (hash: AV4YuqjXHIHY0tlOsCZLj4LTNDb16CChILsrplVqN1g=) 3: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (hash: MnkfQi0xhlMTp/0+4JCoCNDm+E8fulnfgi8FXE93WdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Sep 17 05:38:26 2025 GMT Not After : Sep 24 05:38:26 2025 GMT Subject: CN=68ca4952-9f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:1c:1a:f9:dc:8a:40:7c:8d:e4:98:71:78: e3:c2:19:c3:f6:18:9c:ae:a0:70:c4:3b:db:4b:c8: 47:93:27:7b:f9:31:07:15:04:96:f7:58:92:e3:a1: 44:81:0a:67:d2:e6:91:0b:f0:79:6d:9d:8b:e1:df: 72:eb:69:b7:1c:76:74:93:0d:1e:93:89:66:7e:a6: b5:4d:96:ac:15:02:fe:4a:da:2d:1f:93:29:ed:b2: a7:27:9f:d4:46:b4:4b:6e:f3:2e:40:47:69:77:30: 57:78:a9:cb:9f:b1:85:b7:5d:b6:ba:1c:99:57:d0: a7:0b:72:c4:39:06:0d:04:9f:27:30:4b:7c:ff:40: 98:2e:37:0e:91:44:a6:5d:98:3c:48:99:91:78:a1: 0d:d5:ea:e6:ad:8b:e4:e8:67:bf:d7:73:eb:da:1e: 11:b2:f4:76:08:bd:f4:b2:a3:35:9d:84:e9:60:24: 0b:25:f4:3a:5d:73:74:30:8f:48:71:6b:65:da:7b: 9a:bd:a9:4f:64:31:f8:33:8b:ff:00:ae:7b:a2:6f: 87:46:5d:ae:96:73:ee:eb:41:d2:69:0d:0c:59:81: d1:85:36:13:d5:f6:29:09:e5:68:20:62:aa:f8:60: ca:40:32:92:00:3a:82:d0:fa:d8:7a:ee:63:7a:eb: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:A7:B6:39:B8:40:7E:C2:EF:72:15:63:4A:40:E5:25:FA:24:7C X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8b:47:4c:38:1f:72:8e:89:77:e8:2d:7e:42:da:c5:02:fa: 36:8c:b8:e3:e5:5f:46:7c:dc:42:ce:b8:31:8d:a5:a2:b9:a7: a0:50:22:7c:30:ec:fd:e1:68:c3:22:42:ba:8c:7e:58:56:aa: 5f:25:0b:16:0f:ca:25:ed:c2:d0:88:5c:e7:23:3e:aa:ee:1d: aa:21:f6:a1:c4:9f:4d:a2:22:37:6a:f8:31:8b:5a:aa:d3:7b: 0f:44:ae:d2:4b:7e:de:4f:2a:e4:39:bf:22:be:3e:37:12:60: ca:17:e5:a5:5c:59:03:38:44:54:2e:52:7e:4f:a9:1e:6e:52: d9:5b:40:23:66:f7:ef:ea:e6:7d:46:e5:f0:3d:e0:1f:55:80: 90:7d:00:a8:96:db:02:7f:f6:b6:92:4e:91:ac:84:82:e5:ed: ee:f3:c4:53:c6:ad:de:c7:86:02:40:3e:75:e3:dc:f1:ea:95: 5e:14:08:61:e0:16:28:fd:88:e6:6c:b6:eb:29:f3:6c:4e:c1: 19:4d:f7:09:25:cc:64:8b:76:8f:e5:30:5d:f8:f6:fe:71:8b: 34:cd:b1:77:04:dd:8e:a1:6d:96:d0:81:49:e4:04:70:55:06: db:16:bd:90:16:dd:19:dc:e5:08:9e:6e:ab:40:89:d2:c0:df: 50:36:70:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUwOTE3MDUzODI2WhcNMjUwOTI0MDUzODI2WjAYMRYwFAYD VQQDEw02OGNhNDk1Mi05ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdYcGvncikB8jeSYcXjjwhnD9hicrqBwxDvbS8hHkyd7+TEHFQSW91iS46FE gQpn0uaRC/B5bZ2L4d9y62m3HHZ0kw0ek4lmfqa1TZasFQL+StotH5Mp7bKnJ5/U RrRLbvMuQEdpdzBXeKnLn7GFt122uhyZV9CnC3LEOQYNBJ8nMEt8/0CYLjcOkUSm XZg8SJmReKEN1ermrYvk6Ge/13Pr2h4RsvR2CL30sqM1nYTpYCQLJfQ6XXN0MI9I cWtl2nuavalPZDH4M4v/AK57om+HRl2ulnPu60HSaQ0MWYHRhTYT1fYpCeVoIGKq +GDKQDKSADqC0PrYeu5jeutPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjqp7Y5 uEB+wu9yFWNKQOUl+iR8MB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCii0dMOB9yjol36C1+QtrFAvo2jLjj5V9GfNxCzrgxjaWiuaegUCJ8 MOz94WjDIkK6jH5YVqpfJQsWD8ol7cLQiFznIz6q7h2qIfahxJ9NoiI3avgxi1qq 03sPRK7SS37eTyrkOb8ivj43EmDKF+WlXFkDOERULlJ+T6keblLZW0AjZvfv6uZ9 RuXwPeAfVYCQfQColtsCf/a2kk6RrISC5e3u88RTxq3ex4YCQD5149zx6pVeFAhh 4BYo/YjmbLbrKfNsTsEZTfcJJcxki3aP5TBd+Pb+cYs0zbF3BN2OoW2W0IFJ5ARw VQbbFr2QFt0Z3OUInm6rQInSwN9QNnBj -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:36 2025 by rpki-client