$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: B2GVoK26wW5wuOu6FN4lp0e19laTGfOefrNlElC9LGI= Subject key identifier: 44:02:4B:D5:C4:6D:64:8B:09:15:04:05:52:4B:D5:12:E8:DE:4C:B5 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 0578 Signing time: Wed 14 May 2025 23:20:40 +0000 Manifest this update: Wed 14 May 2025 23:20:40 +0000 Manifest next update: Wed 21 May 2025 23:20:40 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: mHAp6UuFl950Igga71O2pI92jfuUezZ+cvE4SeeVlg4=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: May 14 23:20:40 2025 GMT Not After : May 21 23:20:40 2025 GMT Subject: CN=68252548-f798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:50:b8:85:9b:f6:d0:8a:f7:c7:4c:81:3d: 68:9a:59:59:c1:1a:ce:69:7d:39:0e:bd:5f:39:a7: 27:65:a1:40:a7:83:79:9e:32:e4:89:47:6d:f3:d8: c9:48:7b:c6:72:e5:d7:68:b6:11:1f:9d:85:54:b7: a8:8f:2f:4e:6b:69:3e:9a:2a:4f:8a:e2:cb:0e:24: cd:b7:3b:3a:4d:91:5d:58:21:59:a2:0f:92:c9:43: 62:a7:ad:7e:f6:ab:d5:0c:6d:03:af:7f:b1:d6:53: c2:15:f1:1b:2f:58:f2:0e:4e:a2:1c:3f:b9:19:85: 2d:56:51:97:0e:38:5d:36:a2:48:39:86:7a:3b:e2: be:0f:27:13:4b:5c:7d:e6:ea:c8:01:d6:f8:7e:b8: 09:45:c1:93:b2:21:34:fe:82:e8:cc:84:39:8e:60: f0:91:cc:9e:85:0e:41:30:0b:2d:8b:58:39:ee:6f: a0:2c:cc:c9:ac:08:0a:69:2e:11:98:62:30:9c:71: 67:fa:1d:69:f2:bb:3b:cd:e6:9c:5c:01:c6:2d:f6: e8:88:d3:46:06:98:ba:cc:4d:02:48:46:45:f5:ee: 82:2f:e2:97:99:d5:e6:dd:c3:f8:88:86:cf:c4:0a: e0:5d:12:97:40:de:5b:a7:40:24:ef:46:fc:3a:e6: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:02:4B:D5:C4:6D:64:8B:09:15:04:05:52:4B:D5:12:E8:DE:4C:B5 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e5:0a:c3:5e:19:f6:aa:9c:a7:46:c6:20:88:c4:a2:0c:9b: 10:63:93:75:17:91:80:39:8d:18:db:fd:b8:b5:01:f0:67:26: 2b:e1:58:f9:21:60:31:b4:5f:99:3e:42:c8:4f:1e:0d:c1:12: 5e:5b:ac:6d:7c:0d:6f:4d:59:cd:ca:b0:8d:97:80:97:21:17: 14:2d:76:b4:75:4b:47:0f:93:e2:83:bc:21:53:7a:dc:fb:02: b6:de:89:ca:a1:d2:50:a7:41:16:f3:be:7d:51:36:93:d9:56: 40:2a:95:d6:fb:f1:bc:22:b1:76:85:1f:4e:ba:38:80:58:96: e5:b3:0e:80:01:e3:f0:f1:a8:7f:b8:50:e6:80:7a:5e:8c:ad: 7f:ea:7d:ea:20:92:44:bf:72:38:33:c9:2d:98:29:23:fc:e9: 2a:61:cb:58:a2:3a:96:2a:d1:23:16:e8:62:86:a1:ed:71:8c: fc:c3:56:48:60:4c:99:05:60:34:e3:30:7d:c7:fc:d6:b8:d4: 16:30:e6:3c:e2:d3:b5:b6:07:90:80:3c:64:b8:f4:87:ef:68: de:c1:87:0f:ad:2e:c4:0e:93:60:1c:f9:2a:24:cf:47:ee:6f: c8:10:70:87:3d:d9:a2:f5:5d:0b:56:fd:db:d3:53:79:33:83: f0:1c:b9:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwNTE0MjMyMDQwWhcNMjUwNTIxMjMyMDQwWjAYMRYwFAYD VQQDEw02ODI1MjU0OC1mNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLBQuIWb9tCK98dMgT1omllZwRrOaX05Dr1fOacnZaFAp4N5njLkiUdt89jJ SHvGcuXXaLYRH52FVLeojy9Oa2k+mipPiuLLDiTNtzs6TZFdWCFZog+SyUNip61+ 9qvVDG0Dr3+x1lPCFfEbL1jyDk6iHD+5GYUtVlGXDjhdNqJIOYZ6O+K+DycTS1x9 5urIAdb4frgJRcGTsiE0/oLozIQ5jmDwkcyehQ5BMAsti1g57m+gLMzJrAgKaS4R mGIwnHFn+h1p8rs7zeacXAHGLfboiNNGBpi6zE0CSEZF9e6CL+KXmdXm3cP4iIbP xArgXRKXQN5bp0Ak70b8OuZm9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQCS9XE bWSLCRUEBVJL1RLo3ky1MB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt5QrDXhn2qpynRsYgiMSiDJsQY5N1F5GAOY0Y2/24tQHwZyYr4Vj5 IWAxtF+ZPkLITx4NwRJeW6xtfA1vTVnNyrCNl4CXIRcULXa0dUtHD5Pig7whU3rc +wK23onKodJQp0EW8759UTaT2VZAKpXW+/G8IrF2hR9OujiAWJblsw6AAePw8ah/ uFDmgHpejK1/6n3qIJJEv3I4M8ktmCkj/OkqYctYojqWKtEjFuhihqHtcYz8w1ZI YEyZBWA04zB9x/zWuNQWMOY84tO1tgeQgDxkuPSH72jewYcPrS7EDpNgHPkqJM9H 7m/IEHCHPdmi9V0LVv3b01N5M4PwHLmD -----END CERTIFICATE-----Generated at Thu May 15 16:41:56 2025 by rpki-client