$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: na1q4pPzcdzgmGAEA+oEIiKDB0vgYKD0cdfraACWvzw= Subject key identifier: 19:A1:75:4D:EC:11:6F:F2:F3:55:9F:46:D2:F4:16:43:D3:BC:E8:CE Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 73 Signing time: Wed 17 Sep 2025 07:33:13 +0000 Manifest this update: Wed 17 Sep 2025 07:33:13 +0000 Manifest next update: Wed 24 Sep 2025 07:33:13 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: 6S30g0fpSFpSlbAWyQJy8VJA3kgz1F8AdvtyRmKtaZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Sep 17 07:33:13 2025 GMT Not After : Sep 24 07:33:13 2025 GMT Subject: CN=68ca6439-c2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:57:0b:da:2d:4b:13:f7:ae:fd:7a:aa:c0: d6:c3:8a:1e:d9:13:5a:71:33:9a:37:e1:d3:50:19: 51:af:97:ea:38:6e:1d:a6:ad:b9:26:14:b7:9d:72: 10:59:1d:45:62:5b:22:13:fd:ad:45:97:ed:63:dd: 81:53:15:eb:20:ec:2e:eb:e1:72:33:49:ed:f5:90: 3c:40:25:f1:8b:3a:0d:bf:b3:53:69:fb:a6:c3:fe: 78:2c:96:5a:77:e3:34:d9:4f:32:10:8d:d4:56:42: de:55:6c:55:5f:1c:2c:db:af:9c:bd:7c:cf:2c:15: 41:2a:c3:47:ef:ae:22:95:fe:82:34:1d:07:aa:b2: ba:29:b1:66:2b:c2:5c:9e:05:7b:c4:dc:3f:85:21: f7:cc:e2:2b:bd:28:83:4e:97:b6:26:b8:ca:e1:53: 3c:8f:05:65:9d:8b:e7:11:3d:92:61:fd:f4:d1:1f: a3:58:8d:09:1c:77:53:79:81:37:e0:07:a7:82:2e: 85:72:6f:f3:bb:84:5f:c6:99:52:5c:3f:7c:a8:e7: 42:58:58:8f:9a:f1:24:b8:e6:2f:9e:7f:56:9b:40: fe:1f:ab:1f:ea:f2:e9:49:f0:20:01:cc:bf:33:bd: 70:b6:70:80:49:9b:dd:06:f3:9c:d3:b7:ca:d2:0e: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:75:4D:EC:11:6F:F2:F3:55:9F:46:D2:F4:16:43:D3:BC:E8:CE X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:dd:8d:35:71:1f:6a:cf:e4:de:c5:b6:4e:d2:7f:87:e7:56: a6:b7:85:bf:31:cc:cd:78:40:fb:c2:f2:50:70:d5:78:6c:79: 4d:6d:eb:20:8a:40:09:59:7d:e6:65:0c:13:b0:40:a9:1a:48: 97:cd:1d:56:9c:fd:99:25:47:c9:65:db:12:4c:3b:d3:05:78: 6f:fb:02:e9:10:29:83:c6:95:f2:a1:ef:2b:c3:bc:15:cc:c9: 1f:7d:a9:fa:4e:de:17:0b:36:6a:3a:76:14:2a:fe:91:ac:f8: 9b:2d:d0:88:d0:80:05:c9:bd:3b:f6:69:f7:12:2e:91:bd:f5: a5:d4:c9:69:db:e5:fc:97:af:23:23:b8:e6:af:92:b6:9d:84: 96:1c:c7:90:d6:c6:94:00:2e:cb:1a:69:93:e0:db:b7:eb:4e: 4f:bb:22:7f:0f:57:65:7b:64:50:62:61:22:40:46:ce:dd:99: 2c:44:65:ba:46:ca:13:b2:d2:ec:db:44:89:c3:8d:f1:80:be: 0f:8a:a2:28:56:59:0f:85:db:a0:17:e9:65:0a:fa:01:01:65: 56:38:bf:62:34:b6:1f:ae:8d:10:bb:e0:42:f8:05:43:54:88: 21:13:47:fa:66:49:30:d2:e0:2b:e1:aa:26:ea:79:34:ff:c9: a3:6c:92:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoMzQxN0VCQkQ3ODJENjVGMjlDNDRGQzBCREU1ODFBNEQx QjJERUJBNDAeFw0yNTA5MTcwNzMzMTNaFw0yNTA5MjQwNzMzMTNaMBgxFjAUBgNV BAMTDTY4Y2E2NDM5LWMyZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZDVcL2i1LE/eu/XqqwNbDih7ZE1pxM5o34dNQGVGvl+o4bh2mrbkmFLedchBZ HUViWyIT/a1Fl+1j3YFTFesg7C7r4XIzSe31kDxAJfGLOg2/s1Np+6bD/ngsllp3 4zTZTzIQjdRWQt5VbFVfHCzbr5y9fM8sFUEqw0fvriKV/oI0HQeqsropsWYrwlye BXvE3D+FIffM4iu9KINOl7YmuMrhUzyPBWWdi+cRPZJh/fTRH6NYjQkcd1N5gTfg B6eCLoVyb/O7hF/GmVJcP3yo50JYWI+a8SS45i+ef1abQP4fqx/q8ulJ8CABzL8z vXC2cIBJm90G85zTt8rSDloDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGaF1TewR b/LzVZ9G0vQWQ9O86M4wHwYDVR0jBBgwFoAUNBfrvXgtZfKcRPwL3lgaTRst66Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzU5QUZDMjBBRTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkJmcnZYZ3RaZktjUlB3TDNsZ2FUUnN0NjZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzU5QUZDMjBBRTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZL Y1JQd0wzbGdhVFJzdDY2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALfdjTVxH2rP5N7Ftk7Sf4fnVqa3hb8xzM14QPvC8lBw1XhseU1t6yCK QAlZfeZlDBOwQKkaSJfNHVac/ZklR8ll2xJMO9MFeG/7AukQKYPGlfKh7yvDvBXM yR99qfpO3hcLNmo6dhQq/pGs+Jst0IjQgAXJvTv2afcSLpG99aXUyWnb5fyXryMj uOavkradhJYcx5DWxpQALssaaZPg27frTk+7In8PV2V7ZFBiYSJARs7dmSxEZbpG yhOy0uzbRInDjfGAvg+KoihWWQ+F26AX6WUK+gEBZVY4v2I0th+ujRC74EL4BUNU iCETR/pmSTDS4CvhqibqeTT/yaNskkg= -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:14 2025 by rpki-client