$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: dO0tmzRsQtq+0CToDi2m+EUFnoQ1UGV0EsNoskNbLG0= Subject key identifier: 78:1C:C1:5A:31:CB:56:FA:91:08:5A:F4:33:06:A5:1D:A4:11:44:F2 Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0556 Signing time: Mon 30 Jun 2025 23:46:57 +0000 Manifest this update: Mon 30 Jun 2025 23:46:57 +0000 Manifest next update: Mon 07 Jul 2025 23:46:57 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: OlV1MtrOOtrVEja/s63uiSJ2HAErf7uID9lddaSb/v8=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: Pfjb1wm6jDOim3eSfbu3Z5HUwd0Kah9HIhgDBWP9f4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: Jun 30 23:46:57 2025 GMT Not After : Jul 7 23:46:57 2025 GMT Subject: CN=686321f1-fcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:30:a9:8b:b4:b0:5b:87:4d:73:e7:fb:bf: 3f:20:25:86:3a:fd:35:3d:42:9a:54:61:9d:1d:e9: 1c:6a:0b:be:f6:13:be:3f:51:53:2e:1d:a8:d5:90: ff:df:f3:4a:38:0b:2a:f4:1a:9d:a5:7a:c2:ad:6c: 70:55:8c:49:7c:33:de:ba:76:4c:b6:ed:36:a4:96: 29:42:50:01:1f:3d:8d:6d:38:bb:e4:5b:a5:4f:46: 95:b8:26:a7:6e:c6:26:7b:63:e7:90:28:38:33:1a: 9b:07:95:36:9a:a3:2e:24:f7:d1:68:7f:09:77:95: 6c:d7:8b:e1:89:6d:f7:65:3f:78:75:2a:04:ce:89: 04:55:a6:f8:05:bd:ae:bb:45:b7:ae:ca:d3:20:bf: c9:f0:0e:41:43:b5:c3:61:98:d5:8b:af:f6:b0:d0: 80:9e:3c:c0:bf:52:a0:c5:c2:a3:f5:07:39:46:8e: 06:8b:43:b1:1f:01:fb:a2:8a:59:20:9f:03:58:c5: 82:9f:1c:00:52:28:fb:89:4e:6b:c8:46:92:dc:23: 9a:7d:00:47:90:b0:6e:fc:12:2d:2c:ea:87:1a:cf: ff:63:95:b5:11:8e:e3:c9:69:ef:d8:5d:db:ec:d2: 38:88:2c:2b:be:7e:b4:c0:27:f1:bc:e5:91:fc:3e: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:C1:5A:31:CB:56:FA:91:08:5A:F4:33:06:A5:1D:A4:11:44:F2 X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8a:f4:02:95:89:10:a2:cf:53:a1:3b:04:dc:14:29:d1:7b: 4d:f4:e9:75:80:bf:b2:30:94:1c:a7:1c:2f:54:35:35:3b:0e: bb:1a:e2:7f:f3:06:07:36:c5:d9:7c:3c:58:82:5b:d1:7a:2f: c5:75:71:cb:21:39:34:bf:29:12:49:e3:bd:96:54:ae:fd:62: a6:95:3d:c8:cd:ce:17:f1:a1:1b:1f:58:69:1a:57:a9:16:fe: 83:8c:a8:43:f5:49:ac:e9:e5:52:4e:fa:54:66:8a:8c:48:0d: f9:f2:e2:2d:71:16:1f:13:d5:44:81:7b:02:f4:9e:e3:5c:36: b8:c7:74:b4:05:a4:8c:bb:cb:73:9e:5a:56:60:20:72:23:92: 4c:59:bd:01:6e:4e:82:7d:88:83:d8:9b:ce:e8:94:c2:1e:f9: 31:4d:c0:e1:41:7a:0f:c1:e0:2f:9c:4d:29:ce:d0:f6:62:d1: a0:9a:a3:c5:c3:95:7e:31:a4:75:5c:30:91:ee:28:ff:88:d3: 6d:ac:a3:12:7f:b7:30:e4:81:95:ef:89:53:42:8c:5f:56:76: 72:98:05:4a:4f:88:84:9b:df:c8:24:e9:7d:d0:98:11:ff:c1: 77:cd:8c:ec:1a:ed:8a:bf:fc:ea:6c:2a:ee:a7:51:ef:ce:0f: 60:95:2c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUwNjMwMjM0NjU3WhcNMjUwNzA3MjM0NjU3WjAYMRYwFAYD VQQDEw02ODYzMjFmMS1mY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/AwqYu0sFuHTXPn+78/ICWGOv01PUKaVGGdHekcagu+9hO+P1FTLh2o1ZD/ 3/NKOAsq9BqdpXrCrWxwVYxJfDPeunZMtu02pJYpQlABHz2NbTi75FulT0aVuCan bsYme2PnkCg4MxqbB5U2mqMuJPfRaH8Jd5Vs14vhiW33ZT94dSoEzokEVab4Bb2u u0W3rsrTIL/J8A5BQ7XDYZjVi6/2sNCAnjzAv1KgxcKj9Qc5Ro4Gi0OxHwH7oopZ IJ8DWMWCnxwAUij7iU5ryEaS3COafQBHkLBu/BItLOqHGs//Y5W1EY7jyWnv2F3b 7NI4iCwrvn60wCfxvOWR/D6qKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgcwVox y1b6kQha9DMGpR2kEUTyMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxivQClYkQos9ToTsE3BQp0XtN9Ol1gL+yMJQcpxwvVDU1Ow67GuJ/ 8wYHNsXZfDxYglvRei/FdXHLITk0vykSSeO9llSu/WKmlT3Izc4X8aEbH1hpGlep Fv6DjKhD9Ums6eVSTvpUZoqMSA358uItcRYfE9VEgXsC9J7jXDa4x3S0BaSMu8tz nlpWYCByI5JMWb0Bbk6CfYiD2JvO6JTCHvkxTcDhQXoPweAvnE0pztD2YtGgmqPF w5V+MaR1XDCR7ij/iNNtrKMSf7cw5IGV74lTQoxfVnZymAVKT4iEm9/IJOl90JgR /8F3zYzsGu2Kv/zqbCrup1Hvzg9glSzI -----END CERTIFICATE-----Generated at Wed Jul 2 11:34:32 2025 by rpki-client