$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: KZPYTI9GW/oUWZT1ij7ernfEAhEQ64AZryYuzZ4hfvk= Subject key identifier: DB:C8:14:9B:CD:1E:7A:46:10:7E:3B:91:44:CC:AC:F0:FA:BB:72:37 Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0573 Signing time: Fri 22 Aug 2025 23:29:08 +0000 Manifest this update: Fri 22 Aug 2025 23:29:07 +0000 Manifest next update: Fri 29 Aug 2025 23:29:07 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: Y1w8gErclPzUr6Xv3qdwUipGnZEFuqjQnADiSJgXUmg=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: Aug 22 23:29:07 2025 GMT Not After : Aug 29 23:29:07 2025 GMT Subject: CN=68a8fd44-dd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:4e:fe:62:8b:e5:06:f8:75:a0:63:8b:21: 4a:91:77:46:43:aa:83:59:32:cb:13:90:23:6d:43: 39:04:42:2d:fa:9a:49:e2:54:db:1a:26:36:0e:c2: 1a:e4:45:c0:29:8c:42:9f:db:d3:95:a0:e1:44:ac: 8c:72:22:43:ec:52:6e:b6:81:40:e3:71:4c:6c:e7: 48:dd:d9:83:5a:12:9e:d9:ba:12:63:2f:68:df:bb: 0e:89:4f:6b:9a:73:e4:0a:63:df:1f:10:9c:34:ba: ff:38:4a:0b:39:ab:eb:6f:42:b7:03:7c:6a:09:a9: 9d:37:13:22:71:40:f6:02:68:7a:ed:0f:aa:06:8b: 95:ef:86:97:d2:31:a5:da:2b:2b:38:dd:07:f4:ce: 94:91:23:7c:87:62:34:55:1e:4a:37:6e:cc:da:8e: 56:8b:dd:38:bf:3e:c3:a5:23:81:37:9b:5c:44:f6: c6:d8:bd:d0:89:b5:6c:81:9b:d7:9e:07:80:8d:31: b5:82:95:73:16:1a:5e:6b:03:48:a6:c3:b4:fa:d6: 34:8b:0f:82:3d:20:ec:09:01:3d:e3:81:b8:b1:78: a6:c2:56:99:75:85:b2:ec:4f:e6:01:9a:f8:01:ed: 2a:ec:d0:5f:9a:fd:bf:d7:ce:25:5b:96:27:45:f6: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C8:14:9B:CD:1E:7A:46:10:7E:3B:91:44:CC:AC:F0:FA:BB:72:37 X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a6:b8:c3:bb:64:4d:85:d2:1f:7d:03:7e:fe:3d:e8:0a:df: 97:d4:32:3f:ae:68:a3:e0:21:9d:2d:a8:ac:dc:fd:ac:fb:ff: 2c:41:51:d8:56:5d:34:2f:2f:12:b7:19:3f:d6:da:3a:27:94: 49:07:84:80:9e:40:56:36:95:2a:d6:ec:5f:ae:df:40:84:26: f6:a7:17:1f:02:43:7b:f8:27:ca:9c:2a:46:31:aa:55:2b:21: ff:5e:23:f8:93:71:72:41:36:78:63:d4:e7:61:b8:26:8c:d6: 63:15:24:0b:b7:d8:e1:05:9e:a6:64:c8:ba:a1:d3:f6:e2:d8: 0b:80:0e:b4:2e:d5:60:4a:00:17:d7:4a:9f:f0:69:8a:95:23: a3:5a:5f:b6:88:02:12:c6:0c:7b:02:42:6e:46:f3:d9:54:f8: 33:48:5a:87:3a:95:c7:66:38:98:05:17:dd:be:1d:14:e3:6f: 68:12:9b:1d:18:28:4b:d5:14:f7:62:3f:e2:4b:c7:6f:4e:1d: c6:1f:e6:37:5b:df:9a:d8:5c:ef:c1:ca:89:9a:ae:34:a0:c1: aa:2b:18:47:7d:94:69:d6:50:9a:81:4b:fd:b9:78:7a:c6:db: 4c:6c:ed:85:4d:74:2f:10:a5:b5:32:c6:e8:06:6d:d5:e4:97: b9:13:e2:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUwODIyMjMyOTA3WhcNMjUwODI5MjMyOTA3WjAYMRYwFAYD VQQDEw02OGE4ZmQ0NC1kZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX1O/mKL5Qb4daBjiyFKkXdGQ6qDWTLLE5AjbUM5BEIt+ppJ4lTbGiY2DsIa 5EXAKYxCn9vTlaDhRKyMciJD7FJutoFA43FMbOdI3dmDWhKe2boSYy9o37sOiU9r mnPkCmPfHxCcNLr/OEoLOavrb0K3A3xqCamdNxMicUD2Amh67Q+qBouV74aX0jGl 2isrON0H9M6UkSN8h2I0VR5KN27M2o5Wi904vz7DpSOBN5tcRPbG2L3QibVsgZvX ngeAjTG1gpVzFhpeawNIpsO0+tY0iw+CPSDsCQE944G4sXimwlaZdYWy7E/mAZr4 Ae0q7NBfmv2/184lW5YnRfYijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvIFJvN HnpGEH47kUTMrPD6u3I3MB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJprjDu2RNhdIffQN+/j3oCt+X1DI/rmij4CGdLais3P2s+/8sQVHY Vl00Ly8Stxk/1to6J5RJB4SAnkBWNpUq1uxfrt9AhCb2pxcfAkN7+CfKnCpGMapV KyH/XiP4k3FyQTZ4Y9TnYbgmjNZjFSQLt9jhBZ6mZMi6odP24tgLgA60LtVgSgAX 10qf8GmKlSOjWl+2iAISxgx7AkJuRvPZVPgzSFqHOpXHZjiYBRfdvh0U429oEpsd GChL1RT3Yj/iS8dvTh3GH+Y3W9+a2FzvwcqJmq40oMGqKxhHfZRp1lCagUv9uXh6 xttMbO2FTXQvEKW1MsboBm3V5Je5E+J2 -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:14 2025 by rpki-client