$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: yp3OxAvFXizBygC2hu5CQKzpGMSEn6kd+VKZnAbX6Lc= Subject key identifier: 76:C5:2A:F3:F9:01:9E:41:CB:1D:67:9E:FD:76:FD:8F:7E:0F:B3:4C Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A74 Signing time: Sat 18 Oct 2025 20:35:43 +0000 Manifest this update: Sat 18 Oct 2025 20:35:42 +0000 Manifest next update: Sat 25 Oct 2025 20:35:42 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: o1F3jK1FpxOMiSY85tka4uRsdPx0TQJ4EB+BbEJJ110=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2683 (0xa7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Oct 18 20:35:42 2025 GMT Not After : Oct 25 20:35:42 2025 GMT Subject: CN=68f3fa1f-dd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:d3:2c:95:2d:c8:2d:39:c5:fa:16:4c:a9: f5:ea:53:59:b4:e3:5e:fa:a5:12:18:c5:9f:4e:91: aa:b8:fa:c4:07:fe:07:d5:f8:72:ff:c0:bf:73:45: cf:df:71:80:e6:e7:4f:06:69:be:d8:91:d7:5f:c4: a9:49:ea:26:07:3c:18:36:7e:04:88:ea:95:2e:ac: 5b:63:fc:95:94:ec:e6:4c:de:8e:e2:2a:ad:ca:f1: 1d:21:f7:f5:0a:da:06:a4:24:0e:a2:df:f7:8d:b6: bc:67:32:19:cf:3c:d0:dd:0a:ae:97:16:06:fa:fa: ea:58:04:a9:b6:ef:96:bd:04:56:1b:12:1c:24:18: a1:e0:50:98:a6:29:00:0b:85:06:2a:60:70:c3:36: 05:78:92:eb:ea:19:eb:db:2b:04:b7:98:7a:88:c8: f8:6b:6d:71:29:43:3d:ee:55:db:02:08:29:48:fa: 96:b9:c2:8c:d2:ec:18:e3:38:a0:d1:e2:a6:57:71: f1:fd:f3:41:07:ab:53:f8:4f:53:28:86:01:cf:69: 96:41:6c:92:ce:23:72:08:08:23:e0:11:ac:25:98: c7:a7:dc:30:12:47:b6:f2:53:64:6d:22:35:4b:6e: a2:51:9e:fb:83:2e:27:ac:af:5f:e4:6b:3f:13:67: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C5:2A:F3:F9:01:9E:41:CB:1D:67:9E:FD:76:FD:8F:7E:0F:B3:4C X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:7d:7f:75:f3:f8:ab:cf:a9:5e:bc:f4:49:1a:04:76:3a:cf: 70:41:75:23:69:88:c5:42:6f:28:68:67:15:4e:8a:fe:6f:c1: e6:21:9d:7a:c8:9e:f6:2e:84:55:96:38:5b:8c:b4:ca:23:3d: fe:c0:d8:95:f4:4b:ed:7b:2b:b4:de:1c:80:91:46:85:45:5b: f9:c3:7b:4c:1c:1e:a8:cd:af:b5:6e:0b:36:66:6e:60:9d:33: 5c:bb:6f:3c:56:e3:db:50:55:af:bb:7f:87:3d:ac:cf:f4:74: dd:d1:37:8d:88:f1:92:fb:f8:4d:18:03:e3:2a:ec:55:cb:88: d2:86:16:d9:99:81:92:5d:10:c7:7c:49:1f:e0:63:27:72:3b: bb:48:f2:df:4e:ff:3d:98:57:83:b1:f2:7f:b3:53:d8:f2:e2: f4:e6:cd:47:dc:f4:34:26:13:38:f8:52:c0:8a:49:1d:e0:c7: 58:0e:71:5f:4d:e1:de:62:9d:1b:f6:4b:50:eb:5d:80:f9:54: 2f:75:df:46:7f:5b:cd:26:40:9c:41:b7:01:d0:83:98:6f:dc: 7a:e9:d5:72:53:b4:bf:a5:59:d3:62:0c:57:ad:c1:03:9e:a2: ce:fd:39:9a:38:10:5d:71:a7:89:e2:0c:bc:97:87:0a:a4:cc: e4:39:02:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUxMDE4MjAzNTQyWhcNMjUxMDI1MjAzNTQyWjAYMRYwFAYD VQQDEw02OGYzZmExZi1kZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIfTLJUtyC05xfoWTKn16lNZtONe+qUSGMWfTpGquPrEB/4H1fhy/8C/c0XP 33GA5udPBmm+2JHXX8SpSeomBzwYNn4EiOqVLqxbY/yVlOzmTN6O4iqtyvEdIff1 CtoGpCQOot/3jba8ZzIZzzzQ3QqulxYG+vrqWASptu+WvQRWGxIcJBih4FCYpikA C4UGKmBwwzYFeJLr6hnr2ysEt5h6iMj4a21xKUM97lXbAggpSPqWucKM0uwY4zig 0eKmV3Hx/fNBB6tT+E9TKIYBz2mWQWySziNyCAgj4BGsJZjHp9wwEke28lNkbSI1 S26iUZ77gy4nrK9f5Gs/E2fMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbFKvP5 AZ5Byx1nnv12/Y9+D7NMMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnfX918/irz6levPRJGgR2Os9wQXUjaYjFQm8oaGcVTor+b8HmIZ16 yJ72LoRVljhbjLTKIz3+wNiV9Evteyu03hyAkUaFRVv5w3tMHB6oza+1bgs2Zm5g nTNcu288VuPbUFWvu3+HPazP9HTd0TeNiPGS+/hNGAPjKuxVy4jShhbZmYGSXRDH fEkf4GMncju7SPLfTv89mFeDsfJ/s1PY8uL05s1H3PQ0JhM4+FLAikkd4MdYDnFf TeHeYp0b9ktQ612A+VQvdd9Gf1vNJkCcQbcB0IOYb9x66dVyU7S/pVnTYgxXrcED nqLO/TmaOBBdcaeJ4gy8l4cKpMzkOQKQ -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:04 2025 by rpki-client