$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: Y1sV2FydRlyJVXGDT6HRkmTnevbTaJJ/bDnludI+kfA= Subject key identifier: C7:AE:57:35:54:00:46:1E:B1:4C:E5:6F:55:AA:9D:F6:6A:3F:DF:4C Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 3B Signing time: Sat 31 May 2025 07:05:24 +0000 Manifest this update: Sat 31 May 2025 07:05:23 +0000 Manifest next update: Sat 07 Jun 2025 07:05:23 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: 5d7yh86wEiJp4MlBorpJ3RkurYqf9bLTiRt+djyx93Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: May 31 07:05:23 2025 GMT Not After : Jun 7 07:05:23 2025 GMT Subject: CN=683aaa34-2e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:1c:0c:a7:6a:01:50:5d:af:35:ce:5c:61: 37:9c:78:6b:ed:ac:37:67:23:c6:35:33:eb:16:1f: fe:92:af:f3:2b:a2:6d:b5:d4:04:70:da:29:c2:72: 66:79:df:89:2d:e2:1f:90:3c:3d:9d:33:21:2e:04: 5f:49:17:3c:ad:8e:15:6c:ea:0f:94:01:33:e5:0c: 02:ad:8c:b6:2e:3f:e2:bb:21:0b:c4:1f:3d:51:90: c2:5c:95:e6:96:f6:25:97:c9:8a:ec:83:76:50:0e: 72:2f:fb:0d:3d:b6:ac:58:ed:09:d8:d5:e0:bc:ab: a6:99:70:b9:76:0f:0b:2a:03:e9:e6:0c:63:3f:83: 36:1f:67:6a:b7:5b:a0:a1:c4:4f:5d:9e:07:c5:c6: f9:77:30:08:49:a3:0d:d8:be:ce:b3:f4:2a:8a:c2: 6d:b6:1c:7d:b5:61:1c:ac:3e:1e:9f:c8:70:02:89: 76:02:d8:85:b9:19:16:1c:f8:ea:e3:fc:1b:72:a6: 31:74:2e:e0:10:81:e7:46:33:b3:96:f3:cd:27:c5: 02:0c:c7:5b:3d:0f:38:c7:7d:f1:48:1b:37:a7:ec: c8:58:10:3d:57:9c:fd:55:f1:14:a7:dc:f2:a0:be: 90:37:62:4e:5c:7f:94:5e:66:b4:e3:9b:bb:44:18: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:57:35:54:00:46:1E:B1:4C:E5:6F:55:AA:9D:F6:6A:3F:DF:4C X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:45:3c:21:57:b2:26:68:30:f3:5f:e5:72:63:6a:82:5f:2e: ec:03:ec:c9:08:59:32:29:ef:34:af:85:8b:69:eb:85:5a:e7: 64:ff:84:b4:06:a6:1a:c4:5f:ce:1c:e5:1b:4f:04:93:b3:5e: fc:e5:75:8f:82:c2:f2:b4:b5:4d:bc:f3:52:34:7b:f1:5c:5f: 55:84:b2:ed:40:b9:59:7c:1e:ec:f4:2f:fe:c7:d4:f8:3a:92: 22:db:69:10:7c:c1:da:5b:6d:73:fd:51:61:90:0c:72:66:4b: 6d:bd:10:f3:08:ee:f1:ed:eb:b2:1c:5f:a6:c4:db:50:f8:7b: 35:63:bc:e5:98:ad:a2:6c:d4:62:61:af:70:ec:49:33:fb:c0: d4:94:30:8c:72:b9:00:b7:d5:46:50:46:d4:00:a9:b9:5e:8d: d0:18:d5:52:f3:dd:66:20:68:72:b6:30:29:3f:e6:52:de:06: a7:0b:a8:bd:22:4e:ce:5a:41:44:97:94:d0:56:d9:47:29:67: 16:67:01:27:d6:89:55:dc:a5:64:ab:2e:db:9f:b4:59:57:8a: 6a:9d:c9:cd:20:ec:d1:3c:e9:7b:5f:27:a6:e1:62:c5:27:2c: 26:79:3b:54:15:df:94:a3:b3:98:a5:2e:cd:0b:26:c7:73:c1: 5f:40:f8:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoMzQxN0VCQkQ3ODJENjVGMjlDNDRGQzBCREU1ODFBNEQx QjJERUJBNDAeFw0yNTA1MzEwNzA1MjNaFw0yNTA2MDcwNzA1MjNaMBgxFjAUBgNV BAMTDTY4M2FhYTM0LTJlNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNYhwMp2oBUF2vNc5cYTeceGvtrDdnI8Y1M+sWH/6Sr/Mrom211ARw2inCcmZ5 34kt4h+QPD2dMyEuBF9JFzytjhVs6g+UATPlDAKtjLYuP+K7IQvEHz1RkMJcleaW 9iWXyYrsg3ZQDnIv+w09tqxY7QnY1eC8q6aZcLl2DwsqA+nmDGM/gzYfZ2q3W6Ch xE9dngfFxvl3MAhJow3Yvs6z9CqKwm22HH21YRysPh6fyHACiXYC2IW5GRYc+Orj /BtypjF0LuAQgedGM7OW880nxQIMx1s9DzjHffFIGzen7MhYED1XnP1V8RSn3PKg vpA3Yk5cf5ReZrTjm7tEGGPNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx65XNVQA Rh6xTOVvVaqd9mo/30wwHwYDVR0jBBgwFoAUNBfrvXgtZfKcRPwL3lgaTRst66Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzU5QUZDMjBBRTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkJmcnZYZ3RaZktjUlB3TDNsZ2FUUnN0NjZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzU5QUZDMjBBRTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZL Y1JQd0wzbGdhVFJzdDY2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL9FPCFXsiZoMPNf5XJjaoJfLuwD7MkIWTIp7zSvhYtp64Va52T/hLQG phrEX84c5RtPBJOzXvzldY+CwvK0tU2881I0e/FcX1WEsu1AuVl8Huz0L/7H1Pg6 kiLbaRB8wdpbbXP9UWGQDHJmS229EPMI7vHt67IcX6bE21D4ezVjvOWYraJs1GJh r3DsSTP7wNSUMIxyuQC31UZQRtQAqblejdAY1VLz3WYgaHK2MCk/5lLeBqcLqL0i Ts5aQUSXlNBW2UcpZxZnASfWiVXcpWSrLtuftFlXimqdyc0g7NE86XtfJ6bhYsUn LCZ5O1QV35Sjs5ilLs0LJsdzwV9A+OU= -----END CERTIFICATE-----Generated at Sat May 31 17:42:35 2025 by rpki-client