$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: rnGTVaZx9uxg8e/O6aAbOSal1viq4/lkM6FE47URhME= Subject key identifier: 45:DB:13:78:05:54:33:1B:F7:F7:2A:2F:29:85:A5:4E:15:40:19:90 Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 053D Signing time: Sat 10 May 2025 23:03:26 +0000 Manifest this update: Sat 10 May 2025 23:03:25 +0000 Manifest next update: Sat 17 May 2025 23:03:25 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: R2RKx2h9pL8bnj8iIddL0/W7oqp50+qjlivrbTkIpug=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: Pfjb1wm6jDOim3eSfbu3Z5HUwd0Kah9HIhgDBWP9f4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: May 10 23:03:25 2025 GMT Not After : May 17 23:03:25 2025 GMT Subject: CN=681fdb3d-4348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:3d:0a:31:1c:70:45:0e:60:e1:4a:96:31: 4c:65:97:6d:ed:7a:f2:54:e4:b3:69:fc:fc:a0:91: 55:a4:eb:4f:37:18:bc:5e:45:a4:f1:82:c0:96:82: 28:d5:f0:8d:34:62:de:56:12:ef:58:8d:40:ee:2f: 94:77:ba:bf:62:77:88:77:19:56:5c:2e:c0:89:69: c3:d0:81:70:47:73:75:96:7b:02:e3:13:e2:c6:97: cc:93:41:48:4a:29:7f:f7:61:09:66:2b:b5:8e:f7: b4:9d:1b:3e:88:d5:bd:b4:f0:a0:8d:e9:58:ac:e7: 06:13:cd:c8:67:31:4d:18:74:ca:6a:b3:1f:6e:09: 0b:4e:9c:43:7e:4d:85:99:0f:3a:0c:e4:5b:88:72: d1:5e:ac:5e:55:5e:82:f8:3b:1a:3d:f9:12:c0:86: fb:db:85:38:47:6c:79:1b:8c:30:b8:5e:f1:9c:90: f5:de:4e:8a:5d:4d:85:d2:4b:f4:ee:b9:b8:cd:8c: 6c:c5:55:9b:c2:e3:4a:c1:ca:aa:7a:e9:78:c4:05: be:c2:71:e6:97:a0:0c:9a:bc:23:8c:78:5d:1e:41: 36:bd:c5:c5:02:c2:e3:a5:07:fb:80:17:fd:bd:17: c9:19:40:a4:29:a3:64:ff:46:1c:b1:bf:04:66:d6: b3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:13:78:05:54:33:1B:F7:F7:2A:2F:29:85:A5:4E:15:40:19:90 X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:90:d8:fb:09:db:de:7f:1e:34:22:12:ed:e2:fe:c1:1e:8a: 90:6e:0d:ba:c2:b6:c4:56:c8:45:e7:c9:ab:21:01:2a:98:62: a7:66:3a:97:05:05:14:c8:bd:af:58:ba:e0:f9:18:f3:d3:c4: 8c:f1:92:5c:9a:64:53:f8:a8:6a:b7:9b:cb:e8:77:99:e4:db: 39:ea:ac:7d:e8:77:86:9f:f0:d4:58:5a:39:9c:34:9c:f1:75: 41:8a:91:54:e4:a9:d8:44:90:04:d2:31:cb:7d:81:00:f6:2a: a3:dc:47:56:c7:1f:87:6b:ee:a3:04:fc:c4:c3:60:ed:7a:3b: 7b:31:54:ea:40:be:0d:55:ac:f8:c4:e6:b1:45:e2:13:e4:6c: ec:86:5c:f7:34:b0:29:40:4d:f8:fe:d5:98:aa:6f:c5:ff:18: 20:af:8e:7e:46:78:b3:11:fc:e8:21:2c:a0:31:34:e6:ec:63: 68:3d:a6:6f:7f:ac:64:e5:fc:c9:61:e2:a8:58:fa:1b:76:38: 1c:3e:a5:80:ec:a8:6f:3a:dc:20:3e:68:cb:79:44:f8:1c:b8: d4:47:28:6b:60:4f:d7:b7:f4:9a:07:96:5d:7a:ec:11:dc:69: 10:95:92:d8:ea:4a:9f:5e:34:35:3e:66:5f:bb:5f:0e:c0:bf: ab:a9:fe:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUwNTEwMjMwMzI1WhcNMjUwNTE3MjMwMzI1WjAYMRYwFAYD VQQDEw02ODFmZGIzZC00MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUM9CjEccEUOYOFKljFMZZdt7XryVOSzafz8oJFVpOtPNxi8XkWk8YLAloIo 1fCNNGLeVhLvWI1A7i+Ud7q/YneIdxlWXC7AiWnD0IFwR3N1lnsC4xPixpfMk0FI Sil/92EJZiu1jve0nRs+iNW9tPCgjelYrOcGE83IZzFNGHTKarMfbgkLTpxDfk2F mQ86DORbiHLRXqxeVV6C+DsaPfkSwIb724U4R2x5G4wwuF7xnJD13k6KXU2F0kv0 7rm4zYxsxVWbwuNKwcqqeul4xAW+wnHml6AMmrwjjHhdHkE2vcXFAsLjpQf7gBf9 vRfJGUCkKaNk/0Ycsb8EZtaz/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXbE3gF VDMb9/cqLymFpU4VQBmQMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkNj7Cdvefx40IhLt4v7BHoqQbg26wrbEVshF58mrIQEqmGKnZjqX BQUUyL2vWLrg+Rjz08SM8ZJcmmRT+Khqt5vL6HeZ5Ns56qx96HeGn/DUWFo5nDSc 8XVBipFU5KnYRJAE0jHLfYEA9iqj3EdWxx+Ha+6jBPzEw2Dtejt7MVTqQL4NVaz4 xOaxReIT5Gzshlz3NLApQE34/tWYqm/F/xggr45+RnizEfzoISygMTTm7GNoPaZv f6xk5fzJYeKoWPobdjgcPqWA7KhvOtwgPmjLeUT4HLjURyhrYE/Xt/SaB5ZdeuwR 3GkQlZLY6kqfXjQ1PmZfu18OwL+rqf6e -----END CERTIFICATE-----Generated at Sun May 11 11:50:49 2025 by rpki-client