$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: 0VriLd5oxes7P68wRvdbi10iI+Xf66PjE8ZxBPQoPdw= Subject key identifier: 6C:27:E4:CA:8D:A1:C0:4F:C3:90:BC:D3:BE:C1:6E:00:6F:A3:5D:0A Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 05B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 05AC Signing time: Fri 22 Aug 2025 23:19:46 +0000 Manifest this update: Fri 22 Aug 2025 23:19:45 +0000 Manifest next update: Fri 29 Aug 2025 23:19:45 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: xiNNsaYwJgVZNKPffNGiGUU+Bi9cvGJ77syJt+r/pYk=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1457 (0x5b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Aug 22 23:19:45 2025 GMT Not After : Aug 29 23:19:45 2025 GMT Subject: CN=68a8fb11-46d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:65:86:fc:4a:e3:42:6f:87:75:89:76:82: 6e:47:f0:c4:b7:d3:0a:d8:b3:34:09:77:32:fb:29: 0a:df:97:2c:8e:41:86:6b:46:11:d6:e2:b8:5d:8e: 4c:7e:07:05:7c:4c:b9:fb:0c:b8:23:bd:d6:f6:c3: cd:20:51:fb:99:ae:0a:ad:5d:c0:70:48:e2:e3:b3: 75:fc:06:30:d7:fa:6e:1f:fe:45:80:31:74:f7:1f: 53:11:7e:48:20:53:ea:a5:08:63:d6:13:fe:13:ad: 99:2f:22:0e:fe:af:47:60:04:73:28:c6:08:fe:3f: 5e:e6:48:56:5c:f4:fb:3d:1d:bd:86:3a:00:fe:7c: 30:d1:a0:04:a1:69:f6:93:b1:8d:81:64:fc:65:21: 1b:9d:78:e4:68:89:49:ff:1d:ee:1c:05:51:d1:3c: 29:37:77:13:87:43:ad:33:e5:6b:c7:66:ad:c0:a1: a7:23:d0:b1:52:58:08:2e:8f:10:ff:bc:16:d0:83: 5d:aa:bc:38:f6:8f:35:32:82:80:ad:7c:67:02:04: 85:f4:16:be:80:52:5d:37:9b:fc:a8:bf:74:87:60: 6f:9e:a9:2c:a0:3f:8b:06:5f:ff:0f:38:54:9c:1d: f2:2a:1a:99:d6:b4:dd:0a:74:aa:2d:1a:69:1a:b1: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:E4:CA:8D:A1:C0:4F:C3:90:BC:D3:BE:C1:6E:00:6F:A3:5D:0A X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9d:dc:4d:07:f2:82:ec:bf:83:8d:fc:48:cc:22:a3:e1:8a: a3:68:7e:16:a7:72:de:16:3b:4d:95:35:2d:c6:cb:43:3f:b0: 5d:04:92:bd:81:9b:66:71:a6:7a:8f:41:96:76:4c:44:59:1a: 03:ea:0e:38:97:6b:a6:9b:42:aa:6e:e7:ee:f6:ba:a5:80:fd: fd:39:5e:e5:30:9e:ff:b9:49:06:db:dc:bf:f6:bb:0b:71:b0: ae:f8:ed:20:0e:91:8a:63:b9:a8:d8:f3:5a:47:4b:3d:eb:76: cb:a8:88:8e:71:f4:d8:a0:6f:ef:a9:cc:81:10:20:40:c6:9a: db:7b:11:fa:74:10:04:8a:66:52:94:9b:76:35:7b:b1:2a:6c: a1:b1:e2:9c:98:c1:0b:44:fb:17:58:e9:30:7b:1e:4b:10:74: 7e:c8:68:ef:4c:b3:cd:08:f3:9b:f6:9f:02:7e:40:ea:32:a4: ba:d0:39:71:9f:58:a3:25:a0:db:98:a2:ac:46:af:5e:22:4b: 3b:a0:01:b1:84:30:59:0a:e2:cb:54:96:65:49:2c:e6:46:8a: 75:c6:66:d3:78:6a:3e:0d:a1:68:2d:61:8d:55:38:8e:ac:f9: ad:4c:3c:60:dd:9b:bb:7b:5d:0e:66:bf:41:bf:3b:12:6a:f4: 64:4f:3d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwODIyMjMxOTQ1WhcNMjUwODI5MjMxOTQ1WjAYMRYwFAYD VQQDEw02OGE4ZmIxMS00NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdxlhvxK40Jvh3WJdoJuR/DEt9MK2LM0CXcy+ykK35csjkGGa0YR1uK4XY5M fgcFfEy5+wy4I73W9sPNIFH7ma4KrV3AcEji47N1/AYw1/puH/5FgDF09x9TEX5I IFPqpQhj1hP+E62ZLyIO/q9HYARzKMYI/j9e5khWXPT7PR29hjoA/nww0aAEoWn2 k7GNgWT8ZSEbnXjkaIlJ/x3uHAVR0TwpN3cTh0OtM+Vrx2atwKGnI9CxUlgILo8Q /7wW0INdqrw49o81MoKArXxnAgSF9Ba+gFJdN5v8qL90h2BvnqksoD+LBl//DzhU nB3yKhqZ1rTdCnSqLRppGrG2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwn5MqN ocBPw5C8077BbgBvo10KMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMndxNB/KC7L+DjfxIzCKj4YqjaH4Wp3LeFjtNlTUtxstDP7BdBJK9 gZtmcaZ6j0GWdkxEWRoD6g44l2umm0Kqbufu9rqlgP39OV7lMJ7/uUkG29y/9rsL cbCu+O0gDpGKY7mo2PNaR0s963bLqIiOcfTYoG/vqcyBECBAxprbexH6dBAEimZS lJt2NXuxKmyhseKcmMELRPsXWOkwex5LEHR+yGjvTLPNCPOb9p8CfkDqMqS60Dlx n1ijJaDbmKKsRq9eIks7oAGxhDBZCuLLVJZlSSzmRop1xmbTeGo+DaFoLWGNVTiO rPmtTDxg3Zu7e10OZr9BvzsSavRkTz0f -----END CERTIFICATE-----Generated at Sun Aug 24 04:46:39 2025 by rpki-client