$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: YXozZ/MJmg3SuQGpFizuWzQ1x9ODQUWqdo20GdMEFcU= Subject key identifier: 3C:3D:FB:F7:29:B0:87:92:2E:61:8A:51:65:9B:C0:CF:8F:D3:82:F0 Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 23 Signing time: Fri 11 Apr 2025 07:02:47 +0000 Manifest this update: Fri 11 Apr 2025 07:02:47 +0000 Manifest next update: Fri 18 Apr 2025 07:02:47 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: sl+Seltjm1ojLf562JutpA2r5PYDiJnqj9f1bdkNAIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB Validity Not Before: Apr 11 07:02:47 2025 GMT Not After : Apr 18 07:02:47 2025 GMT Subject: CN=67f8be97-c1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:59:72:a3:d2:f6:4d:67:c0:ec:29:9b:35: 08:39:c5:f7:01:f3:9b:e3:ff:0e:e6:7c:83:7c:97: 24:9e:ca:b8:1d:3f:47:bc:68:50:08:e8:44:b5:49: f1:d8:2e:9b:91:f4:26:74:cc:53:cb:56:fd:63:e5: 0f:3e:79:2d:a2:01:0e:45:af:bd:bd:cd:06:33:50: 7c:3f:dd:13:4c:0b:b2:eb:b5:c0:da:f2:bc:34:4e: 4b:04:d9:67:f0:1d:79:c4:22:83:95:80:57:54:68: 60:f2:8f:53:54:e7:04:74:1e:be:f3:09:cc:6d:0f: 1c:b9:c6:d7:54:59:15:23:a7:59:64:c9:a3:97:e8: 3b:39:91:a4:8d:86:a3:fb:6b:93:a6:80:9e:dd:4e: 5c:a2:38:7b:9a:be:15:da:8e:4c:56:13:73:16:7d: d4:39:68:71:12:c6:f8:df:e6:72:b7:f9:fa:37:ab: 6f:10:2b:f3:c2:a0:03:67:21:4e:2c:37:47:72:c0: 15:66:f1:71:76:d8:48:94:ee:51:d3:8c:9e:a9:a6: 77:ab:89:62:28:29:f3:2d:03:0b:ee:d8:eb:45:6d: 71:ac:2d:dd:68:b5:2a:09:83:e4:3b:73:db:03:89: 3d:08:bf:92:a5:86:b2:cd:23:79:ff:ef:83:56:a9: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3D:FB:F7:29:B0:87:92:2E:61:8A:51:65:9B:C0:CF:8F:D3:82:F0 X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ec:19:e8:89:21:2e:5e:7b:97:e4:6f:2f:62:bf:d4:35:35: 5f:30:a1:59:14:28:7b:59:b5:03:62:9e:cb:d0:b2:48:2f:87: 46:a2:84:44:ce:25:18:8d:e3:58:29:a7:7e:a9:b7:10:a5:f6: da:81:4b:5e:b4:d6:f3:e7:2c:54:73:92:28:ed:1e:a7:71:ad: c4:f5:87:ad:11:63:a4:08:a4:c2:00:91:8f:74:60:bf:b0:36: 28:32:1d:44:36:90:04:58:8f:9e:9a:28:01:a6:c8:8d:4c:82: 1f:6c:27:d9:6d:4f:63:88:d1:6f:05:c8:5b:cc:09:b0:52:a3: 3d:3c:a9:8c:14:01:94:03:ce:a3:9d:6c:6f:fe:f5:bf:5d:f8: f9:9e:13:e2:e1:ef:f3:7b:25:f4:07:21:d4:86:e7:5b:28:1c: d2:73:87:8e:d1:3a:ec:e0:4a:eb:f0:40:76:ec:42:67:7a:f6: 2f:12:92:ad:4c:a7:47:47:d3:84:20:09:7c:56:13:80:e8:29: ab:25:c5:74:0a:79:b1:09:d1:5e:e2:31:df:a8:d6:20:54:d5: 93:45:20:d4:29:3a:f5:d9:e3:73:ab:51:16:04:ac:52:c3:72: cd:c3:be:29:ee:a1:d8:ee:fb:91:fb:5a:17:6c:0d:b7:c9:2a: cc:e0:8f:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoMzQxN0VCQkQ3ODJENjVGMjlDNDRGQzBCREU1ODFBNEQx QjJERUJBNDAeFw0yNTA0MTEwNzAyNDdaFw0yNTA0MTgwNzAyNDdaMBgxFjAUBgNV BAMTDTY3ZjhiZTk3LWMxZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCi1lyo9L2TWfA7CmbNQg5xfcB85vj/w7mfIN8lySeyrgdP0e8aFAI6ES1SfHY LpuR9CZ0zFPLVv1j5Q8+eS2iAQ5Fr729zQYzUHw/3RNMC7LrtcDa8rw0TksE2Wfw HXnEIoOVgFdUaGDyj1NU5wR0Hr7zCcxtDxy5xtdUWRUjp1lkyaOX6Ds5kaSNhqP7 a5OmgJ7dTlyiOHuavhXajkxWE3MWfdQ5aHESxvjf5nK3+fo3q28QK/PCoANnIU4s N0dywBVm8XF22EiU7lHTjJ6ppneriWIoKfMtAwvu2OtFbXGsLd1otSoJg+Q7c9sD iT0Iv5KlhrLNI3n/74NWqTZTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPD379ymw h5IuYYpRZZvAz4/TgvAwHwYDVR0jBBgwFoAUNBfrvXgtZfKcRPwL3lgaTRst66Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzU5QUZDMjBBRTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkJmcnZYZ3RaZktjUlB3TDNsZ2FUUnN0NjZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzU5QUZDMjBBRTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZL Y1JQd0wzbGdhVFJzdDY2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALXsGeiJIS5ee5fkby9iv9Q1NV8woVkUKHtZtQNinsvQskgvh0aihETO JRiN41gpp36ptxCl9tqBS1601vPnLFRzkijtHqdxrcT1h60RY6QIpMIAkY90YL+w NigyHUQ2kARYj56aKAGmyI1Mgh9sJ9ltT2OI0W8FyFvMCbBSoz08qYwUAZQDzqOd bG/+9b9d+PmeE+Lh7/N7JfQHIdSG51soHNJzh47ROuzgSuvwQHbsQmd69i8Skq1M p0dH04QgCXxWE4DoKaslxXQKebEJ0V7iMd+o1iBU1ZNFINQpOvXZ43OrURYErFLD cs3Dvinuodju+5H7WhdsDbfJKszgjy0= -----END CERTIFICATE-----Generated at Sat Apr 12 01:28:47 2025 by rpki-client