$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: RPkAvpVsTY8aMBQmos546+CGM6EXyQaLF1Vwsg7wVgs= Subject key identifier: C1:A2:6D:05:44:5A:F1:3E:4F:21:A4:94:95:BD:FB:C0:F3:3B:B8:AF Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 0590 Signing time: Wed 02 Jul 2025 23:32:00 +0000 Manifest this update: Wed 02 Jul 2025 23:31:59 +0000 Manifest next update: Wed 09 Jul 2025 23:31:59 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: +OzfuTPUslFcgTWTLrzQ8xGllH9phE5HUwSwYWKhymU=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Jul 2 23:31:59 2025 GMT Not After : Jul 9 23:31:59 2025 GMT Subject: CN=6865c16f-c8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:8e:9e:42:70:eb:e4:51:1d:d6:f7:db:bc: b9:c3:63:7d:50:3e:e3:a5:c8:13:e2:0b:50:07:5d: ac:86:42:6e:56:24:ad:01:2a:58:0a:ed:31:45:a8: 02:f3:be:60:1b:3c:1c:67:d0:e2:2b:ef:4b:ec:ad: 2c:ee:7b:41:c8:94:07:5f:89:7c:8b:ec:c8:8f:e8: 6e:59:be:49:8e:fd:6c:bb:58:d1:94:cd:f2:79:ee: ff:1d:b5:28:10:db:66:99:2b:d0:aa:1f:87:05:e9: 04:ad:08:e5:21:d6:d2:65:ac:d8:f9:03:e7:e4:94: 7f:a4:56:08:3b:f4:a8:3e:de:05:4f:17:39:22:53: b2:0c:48:8d:4a:22:ea:c7:72:d2:1a:64:01:4a:c7: c1:20:7b:5f:d6:0f:aa:67:d2:96:6d:ad:ba:b2:69: 49:38:77:7d:40:17:3d:40:b0:4c:b9:d1:85:1d:d4: 15:32:91:c3:a5:63:b1:01:78:ed:d1:77:84:5e:50: c9:7a:cd:ff:48:89:ba:ce:af:17:50:3c:a8:31:f5: 21:8b:8c:b3:dc:2a:b2:22:49:42:9a:9e:94:40:39: fb:03:77:6a:f2:b5:09:7a:93:b0:2e:e5:29:cd:82: 96:ad:85:e0:03:81:ff:32:20:34:3b:fc:db:0f:b9: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A2:6D:05:44:5A:F1:3E:4F:21:A4:94:95:BD:FB:C0:F3:3B:B8:AF X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4c:26:f6:66:af:6f:b6:58:8e:27:3c:ee:99:ea:a3:ca:0b: 9b:d1:55:26:50:29:9d:f4:ff:cc:50:14:b2:82:ce:aa:0b:90: 67:6c:55:04:ac:84:45:f8:81:51:ac:77:1e:00:8c:9f:f1:28: e7:76:91:89:ee:3a:b8:37:e0:93:60:62:84:7d:67:31:a9:8e: 04:45:ee:3d:6f:15:3e:18:a1:22:79:4c:2b:e8:3e:bd:0d:1a: 9e:b9:be:a6:31:31:48:65:4f:93:08:56:7c:91:eb:53:4e:d7: 73:d3:5b:e3:c1:c3:9a:09:c6:fd:17:ce:be:f6:a2:0f:e9:c8: a0:cf:2b:42:c5:dd:d3:55:1b:20:ed:f8:e1:d9:a3:e8:36:7f: 22:2e:18:ca:bd:e4:05:87:3a:5e:61:49:3b:ca:87:2e:7a:86: e2:46:ee:97:7d:40:d5:fb:73:9d:c6:11:b9:3e:8b:3f:9a:77: 43:23:45:8b:8f:67:f4:b3:c5:33:72:1e:88:b4:71:1f:3f:a1: a3:e6:8e:6e:ab:45:e2:31:9e:42:48:d6:88:17:cc:39:af:0f: de:3a:ba:e5:ae:2e:d2:b1:37:4d:94:ed:93:1f:06:ab:9c:22: ff:01:0f:79:bf:ec:29:31:73:60:67:0d:53:05:d9:25:29:ce: 19:a9:47:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwNzAyMjMzMTU5WhcNMjUwNzA5MjMzMTU5WjAYMRYwFAYD VQQDEw02ODY1YzE2Zi1jOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eaOnkJw6+RRHdb327y5w2N9UD7jpcgT4gtQB12shkJuViStASpYCu0xRagC 875gGzwcZ9DiK+9L7K0s7ntByJQHX4l8i+zIj+huWb5Jjv1su1jRlM3yee7/HbUo ENtmmSvQqh+HBekErQjlIdbSZazY+QPn5JR/pFYIO/SoPt4FTxc5IlOyDEiNSiLq x3LSGmQBSsfBIHtf1g+qZ9KWba26smlJOHd9QBc9QLBMudGFHdQVMpHDpWOxAXjt 0XeEXlDJes3/SIm6zq8XUDyoMfUhi4yz3CqyIklCmp6UQDn7A3dq8rUJepOwLuUp zYKWrYXgA4H/MiA0O/zbD7kEJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGibQVE WvE+TyGklJW9+8DzO7ivMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABTCb2Zq9vtliOJzzumeqjygub0VUmUCmd9P/MUBSygs6qC5BnbFUE rIRF+IFRrHceAIyf8SjndpGJ7jq4N+CTYGKEfWcxqY4ERe49bxU+GKEieUwr6D69 DRqeub6mMTFIZU+TCFZ8ketTTtdz01vjwcOaCcb9F86+9qIP6cigzytCxd3TVRsg 7fjh2aPoNn8iLhjKveQFhzpeYUk7yocueobiRu6XfUDV+3OdxhG5Pos/mndDI0WL j2f0s8Uzch6ItHEfP6Gj5o5uq0XiMZ5CSNaIF8w5rw/eOrrlri7SsTdNlO2THwar nCL/AQ95v+wpMXNgZw1TBdklKc4ZqUdi -----END CERTIFICATE-----Generated at Fri Jul 4 00:09:03 2025 by rpki-client