$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: NGrQmpr5/aD0DdcdK768pfsl0XC4+EB/KVWkoVCQqRg= Subject key identifier: 79:EF:DA:A5:CB:3F:9F:B2:F4:0F:5D:7E:02:44:2E:FE:13:0E:49:F0 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 0A39 Signing time: Sat 28 Jun 2025 19:26:17 +0000 Manifest this update: Sat 28 Jun 2025 19:26:17 +0000 Manifest next update: Sat 05 Jul 2025 19:26:17 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: fu9aqSzjUPhAHtQQtRWTJC5mFlP2JmvtfcVJx71DWho=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: mC34LETxTxdV/sN58o4zkKL+jE9k7zziD5QSKranJMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Jun 28 19:26:17 2025 GMT Not After : Jul 5 19:26:17 2025 GMT Subject: CN=686041d9-01a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:7b:e5:f7:a3:98:86:a8:06:fb:80:5a:80: 80:17:96:cf:7c:94:00:bd:80:33:46:6c:f9:fa:44: a5:f2:7c:08:1b:02:90:34:46:75:0c:83:b8:dc:95: e0:ee:52:98:41:96:95:39:74:c2:53:69:81:11:a7: 44:7a:e4:cb:a5:10:43:f7:94:97:3e:ec:40:2b:b1: 27:ae:c3:d6:09:c8:ff:0d:98:58:bc:49:91:31:b7: f7:36:18:24:c0:ec:e2:a5:a1:fc:cd:1a:3b:49:62: b7:ea:28:20:19:99:60:af:a2:9f:40:fc:57:54:bb: ab:07:16:57:45:eb:e6:df:de:4b:ba:6a:3e:c6:82: e8:14:21:0e:6b:66:b0:e0:e3:06:28:8d:44:a6:07: 07:15:96:35:a9:7a:b3:9e:9e:f2:76:4e:7c:6a:f3: 4d:62:79:fa:0c:ef:77:37:56:33:18:8f:15:0f:58: e4:f1:b6:e8:54:0a:70:99:e0:2b:55:f5:83:2d:9f: be:f8:de:9a:b4:3b:ee:67:05:6c:1a:93:f3:d6:47: f3:d3:22:17:15:fd:13:7f:6c:da:81:27:3c:7e:ea: 7f:7f:fb:c9:6e:89:8a:60:01:5d:8a:a9:9a:77:66: 6a:38:c0:e7:23:20:5e:25:8d:36:4a:c3:bf:0d:b3: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:DA:A5:CB:3F:9F:B2:F4:0F:5D:7E:02:44:2E:FE:13:0E:49:F0 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:4c:fd:b0:21:d2:cd:b0:24:1f:25:1b:17:7f:a4:86:dd: 66:a9:29:1e:5d:53:c5:ec:7a:97:34:87:ec:d2:28:aa:23:30: f6:b6:c1:2b:2a:de:91:fc:ba:e6:3a:4a:4f:d3:cc:ea:c1:5d: f5:b5:59:59:43:f9:d7:46:d9:45:63:53:14:41:2f:e0:18:d1: 2c:e6:b6:ce:7f:99:16:eb:78:c9:9c:43:1e:62:14:74:7c:7c: 44:86:e0:2e:a3:08:6e:69:f4:70:96:25:84:ac:a8:41:2f:8d: b5:36:19:3a:21:46:b7:4a:95:01:89:2d:85:91:50:a4:4c:8b: a7:e5:6c:e7:51:6d:63:4c:3d:56:b2:79:31:bc:97:0a:ed:a9: a8:45:50:19:e4:8d:5f:70:95:0d:24:af:8c:77:e3:b5:94:ef: 5d:3c:79:2d:8b:95:f4:28:e9:06:1c:5e:e3:47:61:19:3f:e3: ba:93:7f:a6:20:9a:5b:8f:b2:57:d8:f5:56:4a:99:6b:76:a9: 11:24:39:e0:f1:1d:60:38:b0:24:62:57:49:d8:38:66:3f:91: 9e:90:2b:80:7c:93:69:96:cb:e5:8e:d2:6f:d3:ae:9f:16:b3: f8:ad:06:d0:63:75:58:ae:6c:58:92:d9:18:5d:4f:8d:03:79: bb:76:2d:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwNjI4MTkyNjE3WhcNMjUwNzA1MTkyNjE3WjAYMRYwFAYD VQQDEw02ODYwNDFkOS0wMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiZ75fejmIaoBvuAWoCAF5bPfJQAvYAzRmz5+kSl8nwIGwKQNEZ1DIO43JXg 7lKYQZaVOXTCU2mBEadEeuTLpRBD95SXPuxAK7EnrsPWCcj/DZhYvEmRMbf3Nhgk wOzipaH8zRo7SWK36iggGZlgr6KfQPxXVLurBxZXRevm395Lumo+xoLoFCEOa2aw 4OMGKI1EpgcHFZY1qXqznp7ydk58avNNYnn6DO93N1YzGI8VD1jk8bboVApwmeAr VfWDLZ+++N6atDvuZwVsGpPz1kfz0yIXFf0Tf2zagSc8fup/f/vJbomKYAFdiqma d2ZqOMDnIyBeJY02SsO/DbNVKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnv2qXL P5+y9A9dfgJELv4TDknwMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5cEz9sCHSzbAkHyUbF3+kht1mqSkeXVPF7HqXNIfs0iiqIzD2tsEr Kt6R/LrmOkpP08zqwV31tVlZQ/nXRtlFY1MUQS/gGNEs5rbOf5kW63jJnEMeYhR0 fHxEhuAuowhuafRwliWErKhBL421Nhk6IUa3SpUBiS2FkVCkTIun5WznUW1jTD1W snkxvJcK7amoRVAZ5I1fcJUNJK+Md+O1lO9dPHkti5X0KOkGHF7jR2EZP+O6k3+m IJpbj7JX2PVWSplrdqkRJDng8R1gOLAkYldJ2DhmP5GekCuAfJNplsvljtJv066f FrP4rQbQY3VYrmxYktkYXU+NA3m7di27 -----END CERTIFICATE-----Generated at Mon Jun 30 03:31:47 2025 by rpki-client