$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: tTsWuOMAmERd/FEhLq2UINWyLDtcpSfpXpKbfKthZuk= Subject key identifier: 8B:AD:C8:F2:50:B6:19:2B:D7:E8:85:DE:E5:34:A5:31:DF:E8:0A:94 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: 012A Signing time: Sun 19 Oct 2025 07:42:58 +0000 Manifest this update: Sun 19 Oct 2025 07:42:57 +0000 Manifest next update: Sun 26 Oct 2025 07:42:57 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: p6gk0TethYZa4jRU18z0z6OHPehbVxlYUmkV9IwgAUQ=) 2: F54804E6AB7F11F0B2EF8142C4F9AE02.roa (hash: NPhAmWHU5O43Kq855O647EcbzZVgTafr5vhWlb7SK88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Oct 19 07:42:57 2025 GMT Not After : Oct 26 07:42:57 2025 GMT Subject: CN=68f49681-2d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:0a:4e:bb:92:f1:9a:27:8c:ef:5f:ee:49: 72:d0:08:9e:f5:90:0b:20:52:5b:57:48:58:18:25: a2:48:d4:d1:80:b7:53:f5:ca:02:f0:37:d3:fe:b7: d0:6b:8f:98:e4:f5:b7:47:b5:bb:a7:5a:59:c4:81: 8a:99:a8:2c:75:0f:74:b3:d0:19:64:94:5b:40:c1: ec:40:84:b3:a3:3f:a1:22:72:ec:61:77:3b:2c:9c: 22:9d:2d:3e:9c:74:0b:66:96:88:d3:4a:ad:94:59: 18:84:54:f9:ab:1b:de:fa:82:3b:6c:2e:40:50:23: 7c:d4:2f:cf:e2:8e:f1:49:22:36:f2:75:c8:a0:2a: 66:06:29:c1:9c:13:57:d6:8d:6b:85:b7:08:9c:8f: ee:f6:e9:84:d9:5e:cf:7e:5f:54:7a:41:0b:df:40: 5f:9d:a0:4c:87:5e:bd:b6:d7:e7:c8:16:c3:af:b0: 7e:43:87:07:90:df:5e:5f:fb:a4:31:07:20:5a:58: df:69:cb:60:aa:fc:7c:43:23:85:ab:66:6a:8a:58: 7e:c2:8e:de:6d:4b:17:eb:e8:06:f7:aa:c4:9f:6f: 7b:da:1b:09:05:15:cc:24:6a:eb:99:78:52:0f:d9: 47:db:4e:d0:69:cf:34:9b:d4:ce:e1:35:fa:a1:8f: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AD:C8:F2:50:B6:19:2B:D7:E8:85:DE:E5:34:A5:31:DF:E8:0A:94 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d9:9e:bb:cc:79:04:16:76:0e:9e:32:0b:92:a4:08:a6:34: cd:62:08:07:95:76:75:b2:2e:1a:c3:80:04:1e:12:8c:af:3e: fc:cd:e0:2f:6e:20:a2:d6:bc:d8:3c:d6:e3:6a:4a:d7:a3:0c: 3f:5a:cb:c0:a0:10:89:52:59:d5:4f:5d:0b:e9:01:d7:73:f6: 49:f4:68:61:1d:bc:99:0d:14:2a:73:2a:57:9f:c1:d1:3e:f0: 8a:c7:74:d4:9a:4c:03:95:94:6a:cf:2f:67:46:b4:3e:89:98: 47:d9:f9:9e:01:08:49:3e:6b:08:b3:c0:2a:77:ea:13:43:d2: 20:8d:33:73:3e:53:35:1d:d4:a3:93:db:3d:f9:45:2d:84:34: 5f:fc:9a:f7:2b:20:7e:0b:13:5f:12:98:8a:d6:b9:07:48:98: 34:a2:c6:90:32:be:7b:6a:74:97:39:f7:e1:d4:ea:f1:36:a4: 10:30:94:b1:34:39:e9:b5:dc:bd:2f:ab:a2:0b:76:0a:0d:c5: 4c:01:6f:46:26:6a:43:80:8c:fd:02:e0:a4:b9:60:64:85:e7: 17:52:fb:d1:49:83:94:63:08:4c:f7:5c:d1:87:8e:89:00:11: 3d:d7:37:10:ae:ba:0a:49:76:b3:85:e0:44:a4:04:9b:32:d2: 3d:d4:f6:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUxMDE5MDc0MjU3WhcNMjUxMDI2MDc0MjU3WjAYMRYwFAYD VQQDEw02OGY0OTY4MS0yZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5kKTruS8ZonjO9f7kly0Aie9ZALIFJbV0hYGCWiSNTRgLdT9coC8DfT/rfQ a4+Y5PW3R7W7p1pZxIGKmagsdQ90s9AZZJRbQMHsQISzoz+hInLsYXc7LJwinS0+ nHQLZpaI00qtlFkYhFT5qxve+oI7bC5AUCN81C/P4o7xSSI28nXIoCpmBinBnBNX 1o1rhbcInI/u9umE2V7Pfl9UekEL30BfnaBMh169ttfnyBbDr7B+Q4cHkN9eX/uk MQcgWljfactgqvx8QyOFq2Zqilh+wo7ebUsX6+gG96rEn2972hsJBRXMJGrrmXhS D9lH207Qac80m9TO4TX6oY9JhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIutyPJQ thkr1+iF3uU0pTHf6AqUMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjAwMi9FMjRGODIzNDAyMkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xP OUwzZU45eW9rTkJGR1dldXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62Z67zHkEFnYOnjILkqQIpjTNYggHlXZ1si4aw4AEHhKMrz78zeAv biCi1rzYPNbjakrXoww/WsvAoBCJUlnVT10L6QHXc/ZJ9GhhHbyZDRQqcypXn8HR PvCKx3TUmkwDlZRqzy9nRrQ+iZhH2fmeAQhJPmsIs8Aqd+oTQ9IgjTNzPlM1HdSj k9s9+UUthDRf/Jr3KyB+CxNfEpiK1rkHSJg0osaQMr57anSXOffh1OrxNqQQMJSx NDnptdy9L6uiC3YKDcVMAW9GJmpDgIz9AuCkuWBkhecXUvvRSYOUYwhM91zRh46J ABE91zcQrroKSXazheBEpASbMtI91Pa1 -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:18 2025 by rpki-client