$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: qiKRttCgeQ7srvnfpakTXDO1/vfLbxJU18dbYQ2BkiI= Subject key identifier: 4F:7D:38:D2:51:44:9C:50:C2:56:5A:B9:64:88:F0:2B:3E:92:CB:C1 Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 8A Signing time: Mon 03 Nov 2025 06:33:50 +0000 Manifest this update: Mon 03 Nov 2025 06:33:49 +0000 Manifest next update: Mon 10 Nov 2025 06:33:49 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: hO6+yC4xMiLM+kiVDKSTldJpoCRBJbl+bMXvgBVy+IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Nov 3 06:33:49 2025 GMT Not After : Nov 10 06:33:49 2025 GMT Subject: CN=69084cce-8e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:94:d8:ad:db:f4:db:f9:9e:0f:15:f4:41: 50:bf:ba:62:96:ff:82:6e:d7:46:c5:19:bd:77:4b: c3:51:56:12:8c:b5:67:c4:0a:3c:56:04:f1:d5:ee: d9:f6:5f:57:dd:d4:9e:2f:2b:2e:b4:e1:cf:15:25: 96:a4:a2:a7:cf:19:82:48:d5:d2:a4:e6:66:bc:9f: 56:01:e9:e6:00:c3:64:7b:3a:1e:ab:c9:71:68:67: 46:0c:9b:cf:6c:6a:22:91:fc:ec:00:cf:a3:c5:22: 1c:53:de:f5:3b:e1:ad:63:8c:9a:ad:4c:ee:95:31: d2:e0:83:1b:89:9e:f3:1b:a5:22:ad:24:67:5a:36: f4:35:41:cd:97:cf:5e:4c:d4:82:2b:b3:ff:ab:93: 88:61:8e:f9:a6:e1:4e:bd:c4:42:bc:14:45:c6:f6: 11:2c:ee:f9:b0:35:53:fa:af:b1:e9:c6:ea:ba:01: 9f:e7:6b:7c:80:f7:fa:5c:10:4e:a8:55:ab:eb:73: c9:ca:d5:8a:70:9a:5b:da:aa:e5:67:fc:7b:7f:c8: e6:83:6a:2f:42:6f:aa:2b:1b:ab:09:80:d2:fc:4c: ff:0f:a0:78:fb:6c:b8:fd:6a:5c:16:a8:df:c6:38: 16:c8:a3:2a:be:1b:49:62:cb:57:0e:70:37:49:db: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7D:38:D2:51:44:9C:50:C2:56:5A:B9:64:88:F0:2B:3E:92:CB:C1 X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:8b:11:dc:d2:c2:27:49:8d:01:2e:d4:39:68:52:e6:ca: b4:b1:ec:16:8b:7b:5e:d7:fd:71:75:65:d3:81:18:49:0c:02: 1d:cf:c8:c6:bc:c5:ab:7f:74:a8:c1:05:04:c7:fd:f5:3d:bb: f1:c4:50:fb:e1:c1:c0:aa:33:ef:3b:d6:35:31:e5:dd:f6:b4: d2:9b:03:c1:36:ea:f5:0d:c7:40:8b:34:17:f1:e4:0b:f6:91: 55:6c:13:f6:5d:e7:1f:bd:da:90:0e:e1:5a:95:7d:a1:96:d8: 33:f8:e7:0e:4e:e0:85:73:eb:6a:ff:0d:e9:34:e7:4d:b6:e4: f0:55:ad:e6:0b:5e:c2:06:ad:76:00:c8:81:0c:f6:cd:68:a0: e2:3a:3a:9c:02:eb:8d:db:17:47:fc:da:97:fa:ab:bb:09:59: ba:f5:20:49:a7:c9:af:9a:21:1b:5a:e0:20:74:1c:90:6c:88: 10:43:c7:d9:2c:ee:c4:d7:77:08:1b:c4:03:a3:d5:52:fc:f8: 91:96:55:c7:de:e8:e0:b2:de:50:15:c7:c0:39:76:e0:aa:e4: 39:c3:3e:92:bc:1e:f9:1d:00:d9:75:0d:d1:cd:81:85:e9:b0: 74:af:4c:78:ad:bf:18:4d:68:5e:16:05:bb:28:95:8d:e3:9b: b8:84:13:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2REIxMTAvBgNVBAUTKDM0MTdFQkJENzgyRDY1RjI5QzQ0RkMwQkRFNTgxQTRE MUIyREVCQTQwHhcNMjUxMTAzMDYzMzQ5WhcNMjUxMTEwMDYzMzQ5WjAYMRYwFAYD VQQDEw02OTA4NGNjZS04ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte6U2K3b9Nv5ng8V9EFQv7pilv+CbtdGxRm9d0vDUVYSjLVnxAo8VgTx1e7Z 9l9X3dSeLysutOHPFSWWpKKnzxmCSNXSpOZmvJ9WAenmAMNkezoeq8lxaGdGDJvP bGoikfzsAM+jxSIcU971O+GtY4yarUzulTHS4IMbiZ7zG6UirSRnWjb0NUHNl89e TNSCK7P/q5OIYY75puFOvcRCvBRFxvYRLO75sDVT+q+x6cbqugGf52t8gPf6XBBO qFWr63PJytWKcJpb2qrlZ/x7f8jmg2ovQm+qKxurCYDS/Ez/D6B4+2y4/WpcFqjf xjgWyKMqvhtJYstXDnA3SduffQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE99ONJR RJxQwlZauWSI8Cs+ksvBMB8GA1UdIwQYMBaAFDQX6714LWXynET8C95YGk0bLeuk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81OUFGQzIwQUU0 NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpmS2NSUHdMM2xnYVRSc3Q2 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81OUFGQzIwQUU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpm S2NSUHdMM2xnYVRSc3Q2NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4cYsR3NLCJ0mNAS7UOWhS5sq0sewWi3te1/1xdWXTgRhJDAIdz8jG vMWrf3SowQUEx/31PbvxxFD74cHAqjPvO9Y1MeXd9rTSmwPBNur1DcdAizQX8eQL 9pFVbBP2XecfvdqQDuFalX2hltgz+OcOTuCFc+tq/w3pNOdNtuTwVa3mC17CBq12 AMiBDPbNaKDiOjqcAuuN2xdH/NqX+qu7CVm69SBJp8mvmiEbWuAgdByQbIgQQ8fZ LO7E13cIG8QDo9VS/PiRllXH3ujgst5QFcfAOXbgquQ5wz6SvB75HQDZdQ3RzYGF 6bB0r0x4rb8YTWheFgW7KJWN45u4hBMH -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:29 2025 by rpki-client