$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json) Hash identifier: Z5v9GcSqxMwNsSX3mX+HYHNDLaCTUdCa5N1MUi9bZS4= Subject key identifier: CE:CC:55:99:2E:3A:63:7C:A2:5C:2B:A2:CB:7D:F3:07:E2:B0:F0:99 Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft Manifest number: 11 Signing time: Sun 29 Jun 2025 07:05:26 +0000 Manifest this update: Sun 29 Jun 2025 07:05:26 +0000 Manifest next update: Sun 06 Jul 2025 07:05:26 +0000 Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: V+JdAZgWQ+YrLwOakP2gcG17sWgMhXmvKu6me/iACdo=) 2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: zzVlxhn6+jvA03mHN2RlJJu0S5vEXRz/2+gZ9LS069Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Validity Not Before: Jun 29 07:05:26 2025 GMT Not After : Jul 6 07:05:26 2025 GMT Subject: CN=6860e5b6-5b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:10:7c:c1:a7:25:ba:98:16:5c:e9:71:c9:3d: f0:c6:d2:09:db:0a:ab:02:44:11:08:9c:29:df:fd: 14:47:fb:f3:c3:28:90:3d:95:b9:53:4e:5c:38:cd: f0:85:bf:87:f2:55:56:2a:9c:89:d3:d0:6c:2d:98: 75:b6:6d:2a:b1:16:c8:ee:76:1a:75:28:96:2c:48: b1:59:92:4d:36:c9:54:51:50:5d:cd:1d:14:aa:d8: 78:2a:45:d1:e9:0d:75:3a:4f:d3:3e:bb:1f:75:0f: dd:44:b2:ff:e0:95:36:98:7f:45:e4:3d:17:33:99: 97:7e:1d:2a:00:b0:f5:e4:ed:c3:85:b1:ee:94:f3: 01:cd:54:68:1b:51:d4:5d:f8:45:dc:fa:68:5b:0d: dd:d4:23:8c:19:ef:77:f6:97:51:5a:7e:c2:a1:f2: eb:5b:88:be:1f:cd:72:3f:58:c4:de:aa:94:f5:f4: 7d:e3:45:1f:61:49:19:4d:b8:05:91:b7:05:93:9b: 28:ee:38:86:ae:16:d4:d6:f6:dd:9f:b5:0e:93:a9: 17:41:be:4f:e7:ad:d3:b2:18:b7:f5:ea:bc:47:4f: 3d:c8:72:47:ea:9e:2f:ce:fe:38:ca:0d:44:cc:da: 2f:2e:fd:77:5c:6d:be:75:3d:83:33:d5:05:2f:6c: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CC:55:99:2E:3A:63:7C:A2:5C:2B:A2:CB:7D:F3:07:E2:B0:F0:99 X509v3 Authority Key Identifier: keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ef:ff:42:43:f1:67:ef:fd:47:7d:68:1f:21:87:cc:90:27: 61:74:57:82:d9:26:b9:bc:4b:d1:f7:7d:14:79:e8:01:82:2c: 82:0a:c6:10:9a:69:d9:94:84:cb:5d:88:09:18:43:53:02:06: 76:3f:37:d4:08:0f:a4:3c:6b:54:c6:36:f6:43:4d:a6:fe:06: 98:7e:5b:7b:98:d5:ab:80:43:ee:56:5b:72:48:19:82:5c:55: 68:41:7b:cf:29:27:ba:5a:7f:3c:6b:dd:2e:70:34:a8:45:25: 6b:cd:59:d2:d0:43:da:29:20:ab:72:f0:09:83:a7:0d:14:1d: 4d:f6:45:b1:43:e6:4c:db:ef:52:46:e8:73:6d:83:f2:23:9b: 93:51:4d:4c:02:09:51:51:fc:c2:16:33:f4:28:a3:02:8d:61: 93:62:02:8b:2b:ba:3c:26:28:03:a0:4e:11:3c:7e:af:46:20: b5:06:f6:77:98:72:0d:52:46:d0:42:86:cf:0c:6f:1a:85:af: 71:b1:de:1a:b4:0f:32:f6:84:8d:5f:ad:17:40:50:02:d5:e1: 59:72:5a:cd:51:03:fe:9d:21:16:e2:17:3f:64:c9:63:fb:53: 9e:66:b0:9a:c7:af:bf:62:07:3c:55:50:0e:53:48:a1:f0:79: 61:f8:83:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMzRGMEY4Q0Q4N0I4OEM0RjUyMEU0NkZCOTVEMkRCODRG QTA0MzM2MjAeFw0yNTA2MjkwNzA1MjZaFw0yNTA3MDYwNzA1MjZaMBgxFjAUBgNV BAMTDTY4NjBlNWI2LTViMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmEHzBpyW6mBZc6XHJPfDG0gnbCqsCRBEInCnf/RRH+/PDKJA9lblTTlw4zfCF v4fyVVYqnInT0GwtmHW2bSqxFsjudhp1KJYsSLFZkk02yVRRUF3NHRSq2HgqRdHp DXU6T9M+ux91D91Esv/glTaYf0XkPRczmZd+HSoAsPXk7cOFse6U8wHNVGgbUdRd +EXc+mhbDd3UI4wZ73f2l1FafsKh8utbiL4fzXI/WMTeqpT19H3jRR9hSRlNuAWR twWTmyjuOIauFtTW9t2ftQ6TqRdBvk/nrdOyGLf16rxHTz3Ickfqni/O/jjKDUTM 2i8u/Xdcbb51PYMz1QUvbLYtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzsxVmS46 Y3yiXCuiy33zB+Kw8JkwHwYDVR0jBBgwFoAUNPD4zYe4jE9SDkb7ldLbhPoEM2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzcyRTZGQTI2NDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0y SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBENHpZZTRqRTlTRGtiN2xkTGJoUG9FTTJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzcyRTZGQTI2NDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL05QRDR6WWU0akU5 U0RrYjdsZExiaFBvRU0ySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfv/0JD8Wfv/Ud9aB8hh8yQJ2F0V4LZJrm8S9H3fRR56AGCLIIKxhCa admUhMtdiAkYQ1MCBnY/N9QID6Q8a1TGNvZDTab+Bph+W3uY1auAQ+5WW3JIGYJc VWhBe88pJ7pafzxr3S5wNKhFJWvNWdLQQ9opIKty8AmDpw0UHU32RbFD5kzb71JG 6HNtg/Ijm5NRTUwCCVFR/MIWM/QoowKNYZNiAosrujwmKAOgThE8fq9GILUG9neY cg1SRtBChs8MbxqFr3Gx3hq0DzL2hI1frRdAUALV4VlyWs1RA/6dIRbiFz9kyWP7 U55msJrHr79iBzxVUA5TSKHweWH4g98= -----END CERTIFICATE-----Generated at Mon Jun 30 16:11:45 2025 by rpki-client