$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: 2FltZPjdtSzY9ems5RnoTaOXKq1tTAoecypZ0hbCu34= Subject key identifier: 09:5A:AB:01:66:27:49:39:D4:E9:23:6E:44:64:74:67:8B:DC:79:C4 Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 5F Signing time: Sat 09 Aug 2025 07:34:16 +0000 Manifest this update: Sat 09 Aug 2025 07:34:15 +0000 Manifest next update: Sat 16 Aug 2025 07:34:15 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: 7uy8ltZok1y8u8tPD2tyMw56438DOEEERW9DZnM39sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Aug 9 07:34:15 2025 GMT Not After : Aug 16 07:34:15 2025 GMT Subject: CN=6896f9f7-d759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:1c:9f:05:1e:68:a1:50:b0:a8:1b:b2:16: b5:7d:50:b5:4c:fb:a8:40:be:98:a9:db:45:24:84: 92:96:bf:33:3a:64:6f:a1:ba:b0:c1:84:86:04:32: 46:93:05:2b:2e:b2:06:2a:28:e6:97:10:06:47:ea: f9:3c:62:93:63:54:06:86:8a:76:5a:0c:78:2f:43: dd:c0:65:52:f3:2f:25:95:40:07:bc:07:c1:6b:af: c1:0b:8b:7c:e1:ae:67:74:b1:7b:4f:e6:ae:e1:66: 5d:ad:04:01:9b:4b:5b:47:9e:01:40:46:b5:bd:8f: 61:b4:e7:79:3c:7c:15:9d:5e:f3:bc:f2:3f:09:d5: aa:31:85:57:e7:1f:2b:3f:8c:95:b1:56:d2:36:c2: 2f:a5:0f:28:b8:45:ed:59:52:1e:80:7b:af:7b:ca: 13:48:15:b8:0c:34:2f:aa:86:36:3f:60:f6:7f:4b: 41:5a:70:69:27:7b:b5:1e:e6:1a:ed:b9:bb:d1:48: cc:58:a0:81:c8:e8:b7:1f:a6:c3:c4:69:a8:b7:a9: 47:09:d2:47:3b:75:76:a4:3d:08:7d:54:9d:84:1d: 76:1f:82:db:21:43:11:08:cb:24:59:30:e4:2d:ad: 8c:38:01:61:27:a6:85:5c:aa:4e:70:44:c8:ae:48: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5A:AB:01:66:27:49:39:D4:E9:23:6E:44:64:74:67:8B:DC:79:C4 X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a6:19:b3:e0:71:ca:07:60:20:32:bb:75:17:55:2c:f5:96: e9:46:90:d1:03:35:3e:21:af:e1:4a:43:74:a8:af:4c:6a:74: 6d:01:0c:f3:fd:2d:5e:e5:e2:6c:19:ec:e8:4c:cc:8d:ba:f4: da:27:f8:7b:a3:48:cb:c1:53:21:45:55:66:8c:af:bc:3f:cc: 35:97:bd:ba:f6:e1:55:a3:1c:e8:d3:1e:f4:a4:45:9f:3b:2e: 18:51:8c:7b:ab:e6:92:00:ef:5b:93:a4:0b:29:a1:b5:72:3b: 6d:79:38:4d:84:bf:b3:c2:3d:40:0f:00:48:c7:73:dd:f3:b6: e6:08:ca:66:c7:1f:39:84:0a:a5:35:a0:98:96:81:51:0a:d4: a9:da:c8:03:7e:e8:82:93:b8:30:16:f7:79:db:bb:d3:9d:a6: 6f:68:4e:41:0d:65:14:f5:6c:40:10:23:f5:17:dd:58:e9:af: d5:57:46:71:db:0d:d5:f1:03:ad:d2:b7:00:87:9e:41:bb:10: 61:ec:2d:eb:17:ac:80:1b:48:70:94:c6:a5:24:45:29:91:ac: b0:82:15:15:fb:89:d3:97:50:2e:aa:3a:eb:bd:f3:34:61:2f: 26:42:11:94:35:d7:0d:3d:13:3f:1d:8f:59:0c:98:52:ed:5f: 61:fa:2d:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoMzQxN0VCQkQ3ODJENjVGMjlDNDRGQzBCREU1ODFBNEQx QjJERUJBNDAeFw0yNTA4MDkwNzM0MTVaFw0yNTA4MTYwNzM0MTVaMBgxFjAUBgNV BAMTDTY4OTZmOWY3LWQ3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzqByfBR5ooVCwqBuyFrV9ULVM+6hAvpip20UkhJKWvzM6ZG+hurDBhIYEMkaT BSsusgYqKOaXEAZH6vk8YpNjVAaGinZaDHgvQ93AZVLzLyWVQAe8B8Frr8ELi3zh rmd0sXtP5q7hZl2tBAGbS1tHngFARrW9j2G053k8fBWdXvO88j8J1aoxhVfnHys/ jJWxVtI2wi+lDyi4Re1ZUh6Ae697yhNIFbgMNC+qhjY/YPZ/S0FacGkne7Ue5hrt ubvRSMxYoIHI6LcfpsPEaai3qUcJ0kc7dXakPQh9VJ2EHXYfgtshQxEIyyRZMOQt rYw4AWEnpoVcqk5wRMiuSK8BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCVqrAWYn STnU6SNuRGR0Z4vcecQwHwYDVR0jBBgwFoAUNBfrvXgtZfKcRPwL3lgaTRst66Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzU5QUZDMjBBRTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkJmcnZYZ3RaZktjUlB3TDNsZ2FUUnN0NjZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzU5QUZDMjBBRTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZL Y1JQd0wzbGdhVFJzdDY2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHymGbPgccoHYCAyu3UXVSz1lulGkNEDNT4hr+FKQ3Sor0xqdG0BDPP9 LV7l4mwZ7OhMzI269Non+HujSMvBUyFFVWaMr7w/zDWXvbr24VWjHOjTHvSkRZ87 LhhRjHur5pIA71uTpAspobVyO215OE2Ev7PCPUAPAEjHc93ztuYIymbHHzmECqU1 oJiWgVEK1KnayAN+6IKTuDAW93nbu9Odpm9oTkENZRT1bEAQI/UX3Vjpr9VXRnHb DdXxA63StwCHnkG7EGHsLesXrIAbSHCUxqUkRSmRrLCCFRX7idOXUC6qOuu98zRh LyZCEZQ11w09Ez8dj1kMmFLtX2H6LYk= -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:45 2025 by rpki-client