$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: AsHjIqs4EKRSOdwFnTUvrTboISxgPsZsPGx9a+ERbOE= Subject key identifier: 8A:28:A5:1F:74:7E:C3:9D:92:9B:D5:CD:B5:92:4E:95:BE:20:C9:A3 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A57 Signing time: Fri 22 Aug 2025 19:49:08 +0000 Manifest this update: Fri 22 Aug 2025 19:49:07 +0000 Manifest next update: Fri 29 Aug 2025 19:49:07 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: pfTjXbFTqu6IBl7niRM2AOsrd8CRXqh3UlILe0p2jCk=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Aug 22 19:49:07 2025 GMT Not After : Aug 29 19:49:07 2025 GMT Subject: CN=68a8c9b4-8098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:54:70:56:4d:9a:47:53:b6:12:a6:64:e4: 5f:e4:65:18:ec:39:f7:48:de:6f:00:d9:02:3c:45: 28:b5:f3:79:e6:86:4c:f5:6c:9f:55:4f:38:37:e8: 67:a9:aa:e3:f7:fc:d1:0a:18:bd:87:33:33:65:14: 6f:12:ac:c2:20:5d:84:98:85:34:e0:f5:35:27:e8: 1f:c0:27:a3:b1:ad:c0:ec:56:2d:1f:c0:9b:58:d5: 0f:f7:de:a3:41:d4:38:8a:3c:ae:f6:ea:f0:28:b6: 75:ee:36:56:21:3c:16:2e:a3:5b:df:5a:b7:df:2f: 76:a6:b9:a7:c7:27:12:90:64:53:fb:23:da:f7:59: 69:7c:53:76:05:58:85:6b:fa:c6:af:b4:89:49:73: a0:58:ed:f9:bc:db:5d:09:3f:a6:e9:ee:90:37:d0: 2c:10:98:08:76:7e:2f:9b:dd:6c:e8:cc:e4:16:02: 40:3a:04:19:c9:87:8b:4d:2b:ac:5a:76:0f:9f:7e: 48:c6:0d:9e:26:1e:0b:63:37:be:65:7e:08:96:47: d9:39:f0:68:96:77:10:b0:9e:9d:20:b6:6e:e3:ba: 0e:08:36:5c:8d:5b:7d:0b:08:79:f9:23:8e:34:17: 30:ee:64:76:db:98:54:b3:44:e5:45:50:13:77:55: 48:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:A5:1F:74:7E:C3:9D:92:9B:D5:CD:B5:92:4E:95:BE:20:C9:A3 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:61:ea:50:ec:1b:93:a0:3e:3e:0d:d9:4d:c7:bd:14:46:b2: 9b:22:5a:10:a8:ee:42:d9:d1:a1:ff:37:af:75:eb:d0:32:35: 94:fd:82:45:2b:32:42:86:a2:11:30:e7:d0:4c:3c:90:ec:56: 13:f0:5f:57:c3:54:25:d8:b6:1e:46:59:4a:8b:9a:b6:65:10: 0d:80:b3:54:37:ba:4e:aa:57:a7:25:93:4c:75:a5:2d:2a:a4: 27:89:9a:fb:34:cb:26:63:45:a6:14:08:e5:33:8a:05:12:8c: d8:a3:94:32:65:cc:0e:a0:9f:f3:ef:75:19:09:9e:7d:c2:6e: f4:82:98:6c:28:8a:d4:fb:03:b4:18:0c:2e:8b:79:1f:52:76: 5d:5a:a5:58:96:ee:bb:ac:33:f3:7f:21:8f:43:35:d8:41:d2: 02:36:9d:96:11:11:d9:f8:41:31:fc:b5:15:eb:7b:f5:a3:c5: b4:d9:a8:17:02:79:5c:c7:8e:af:b2:e7:63:ac:b3:a5:9b:fc: bb:00:08:3f:c8:7b:10:7d:03:d7:93:db:dd:b9:8a:60:39:77: ba:df:30:e4:0d:f4:ca:ec:14:a6:93:93:03:e1:e7:df:80:34: d8:e0:44:6d:4b:0f:9a:d9:a4:09:df:9c:a6:f3:e4:ca:73:d9: ef:45:7f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwODIyMTk0OTA3WhcNMjUwODI5MTk0OTA3WjAYMRYwFAYD VQQDEw02OGE4YzliNC04MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt39UcFZNmkdTthKmZORf5GUY7Dn3SN5vANkCPEUotfN55oZM9WyfVU84N+hn qarj9/zRChi9hzMzZRRvEqzCIF2EmIU04PU1J+gfwCejsa3A7FYtH8CbWNUP996j QdQ4ijyu9urwKLZ17jZWITwWLqNb31q33y92prmnxycSkGRT+yPa91lpfFN2BViF a/rGr7SJSXOgWO35vNtdCT+m6e6QN9AsEJgIdn4vm91s6MzkFgJAOgQZyYeLTSus WnYPn35Ixg2eJh4LYze+ZX4IlkfZOfBolncQsJ6dILZu47oOCDZcjVt9Cwh5+SOO NBcw7mR225hUs0TlRVATd1VIjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoopR90 fsOdkpvVzbWSTpW+IMmjMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLYepQ7BuToD4+DdlNx70URrKbIloQqO5C2dGh/zevdevQMjWU/YJF KzJChqIRMOfQTDyQ7FYT8F9Xw1Ql2LYeRllKi5q2ZRANgLNUN7pOqlenJZNMdaUt KqQniZr7NMsmY0WmFAjlM4oFEozYo5QyZcwOoJ/z73UZCZ59wm70gphsKIrU+wO0 GAwui3kfUnZdWqVYlu67rDPzfyGPQzXYQdICNp2WERHZ+EEx/LUV63v1o8W02agX Anlcx46vsudjrLOlm/y7AAg/yHsQfQPXk9vduYpgOXe63zDkDfTK7BSmk5MD4eff gDTY4ERtSw+a2aQJ35ym8+TKc9nvRX9l -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:43 2025 by rpki-client