$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: XukXxAGZEKrfAHRZgqZGp5ngnIJxNcAlCGaK+XmFzfM= Subject key identifier: 66:03:B5:DD:A7:70:4F:E1:A3:87:07:55:12:E3:2B:B6:08:7A:1F:40 Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: 42 Signing time: Fri 13 Jun 2025 06:20:53 +0000 Manifest this update: Fri 13 Jun 2025 06:20:52 +0000 Manifest next update: Fri 20 Jun 2025 06:20:52 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: i5Xi5bI3MRul7GZoIBlkG90AX2H5nxnJPe9cpzDlQPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Jun 13 06:20:52 2025 GMT Not After : Jun 20 06:20:52 2025 GMT Subject: CN=684bc344-d251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:ee:bb:d2:cd:5e:63:7d:8a:16:ca:3d:ff: c5:79:34:73:55:66:d9:57:4d:4d:2c:fb:5e:59:ef: d9:84:e2:da:5b:35:c2:ce:19:b7:95:41:9b:b0:8c: 6b:11:0a:d8:2f:09:d7:29:04:9c:2a:3b:48:6c:c5: c3:2f:51:eb:e6:a3:f0:7a:d1:23:05:e6:5c:ea:9c: 43:57:68:5e:e9:c0:3c:c8:08:9d:11:06:8c:30:b2: e3:ce:12:09:87:ff:74:34:36:02:e9:95:14:86:0f: 14:38:83:5f:b2:63:71:6c:12:8c:9b:9f:6a:18:16: 1d:d5:ca:f4:0d:62:a2:32:3e:2d:92:8d:4e:72:44: c1:42:c8:22:db:ba:5e:eb:ef:21:23:02:23:4e:28: a8:1c:62:ed:b0:f5:e7:2d:61:f9:a0:ea:5a:b6:c2: 39:9a:c5:65:f4:3b:be:bf:44:00:98:32:ee:4e:fd: ff:86:83:87:c3:68:a0:46:48:1a:d5:81:52:29:f4: 9a:5a:84:d9:ce:1e:11:b6:7a:3a:88:15:18:88:dc: ef:4a:c3:cf:75:30:66:9f:1c:21:ad:93:5f:3d:a0: d6:4c:02:dd:80:15:be:57:38:0a:b8:c1:f5:ea:ce: 29:b8:4a:1d:4a:ac:35:2b:6d:83:44:5d:d3:37:64: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:03:B5:DD:A7:70:4F:E1:A3:87:07:55:12:E3:2B:B6:08:7A:1F:40 X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:06:ec:2f:83:df:b9:10:77:81:91:53:5c:3e:b9:79:e3:93: ad:4e:04:54:f3:53:62:07:6f:fe:61:b9:3d:05:40:e4:02:d9: 00:3e:39:05:1f:3b:d2:bb:71:42:43:61:5e:bb:a5:78:f8:1e: 5a:21:7b:2e:79:66:fa:2a:ee:c1:c2:07:f3:5a:7f:c7:ad:70: 0f:88:62:13:aa:53:a8:f8:c1:29:c4:91:a9:a3:c9:32:0e:49: 45:0d:9d:dd:b5:b2:f9:81:3b:b4:1b:af:ff:5c:e4:f9:b7:5c: 87:01:75:46:7f:7f:be:db:54:08:07:c7:21:de:50:c9:49:13: 36:d2:c6:61:7e:35:12:24:78:91:2b:4c:1f:bc:89:d1:fd:e2: 3a:ec:54:6a:90:b7:5e:d9:15:7c:54:8e:69:1b:48:f0:c1:d3: c6:9d:02:32:97:be:a5:3d:21:e3:5a:b7:26:b0:c6:1c:b6:5c: 75:b8:87:99:9d:85:78:1c:54:8a:ba:5a:86:ff:c8:4a:85:6a: 4a:30:f7:5f:17:0c:d3:9f:21:54:a8:25:29:ab:4e:0c:25:ab: b9:fc:f1:28:d7:a2:e8:eb:9c:07:9e:cb:2c:42:db:9b:3e:e8: 4c:cf:25:34:92:6c:25:c3:3a:e3:e1:c8:e9:e8:3b:9d:70:2e: 80:a5:21:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoMzQxN0VCQkQ3ODJENjVGMjlDNDRGQzBCREU1ODFBNEQx QjJERUJBNDAeFw0yNTA2MTMwNjIwNTJaFw0yNTA2MjAwNjIwNTJaMBgxFjAUBgNV BAMTDTY4NGJjMzQ0LWQyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT9O670s1eY32KFso9/8V5NHNVZtlXTU0s+15Z79mE4tpbNcLOGbeVQZuwjGsR CtgvCdcpBJwqO0hsxcMvUevmo/B60SMF5lzqnENXaF7pwDzICJ0RBowwsuPOEgmH /3Q0NgLplRSGDxQ4g1+yY3FsEoybn2oYFh3VyvQNYqIyPi2SjU5yRMFCyCLbul7r 7yEjAiNOKKgcYu2w9ectYfmg6lq2wjmaxWX0O76/RACYMu5O/f+Gg4fDaKBGSBrV gVIp9JpahNnOHhG2ejqIFRiI3O9Kw891MGafHCGtk189oNZMAt2AFb5XOAq4wfXq zim4Sh1KrDUrbYNEXdM3ZIRpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZgO13adw T+GjhwdVEuMrtgh6H0AwHwYDVR0jBBgwFoAUNBfrvXgtZfKcRPwL3lgaTRst66Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzU5QUZDMjBBRTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkJmcnZYZ3RaZktjUlB3TDNsZ2FUUnN0NjZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzU5QUZDMjBBRTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL05CZnJ2WGd0WmZL Y1JQd0wzbGdhVFJzdDY2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAcG7C+D37kQd4GRU1w+uXnjk61OBFTzU2IHb/5huT0FQOQC2QA+OQUf O9K7cUJDYV67pXj4Hlohey55Zvoq7sHCB/Naf8etcA+IYhOqU6j4wSnEkamjyTIO SUUNnd21svmBO7Qbr/9c5Pm3XIcBdUZ/f77bVAgHxyHeUMlJEzbSxmF+NRIkeJEr TB+8idH94jrsVGqQt17ZFXxUjmkbSPDB08adAjKXvqU9IeNatyawxhy2XHW4h5md hXgcVIq6Wob/yEqFakow918XDNOfIVSoJSmrTgwlq7n88SjXoujrnAeeyyxC25s+ 6EzPJTSSbCXDOuPhyOnoO51wLoClIdQ= -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:57 2025 by rpki-client