$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: ITobk45GTQwNd4tXl43LK3JrgcspKuB+v9xwlmWmyFc= Subject key identifier: 37:F8:55:53:54:CD:B6:71:3E:C9:C0:4A:57:A9:C8:55:0F:1A:A4:45 Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 3478 Signing time: Wed 14 May 2025 15:01:48 +0000 Manifest this update: Wed 14 May 2025 15:01:48 +0000 Manifest next update: Wed 21 May 2025 15:01:48 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: 6O/NE59xqGcGs+mf6CY59+GuiLLAL984rbREnAsomEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: May 14 15:01:48 2025 GMT Not After : May 21 15:01:48 2025 GMT Subject: CN=6824b05c-0732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:6f:84:58:10:05:39:f4:0d:ac:f2:84:2a: e2:08:75:04:ae:e9:84:0e:54:28:70:80:c1:0e:00: 11:0f:c8:aa:4f:60:cf:14:7a:a9:c0:c3:1e:39:98: a2:0e:0b:90:20:d5:31:97:ac:e5:bf:4b:ec:05:67: 51:21:99:4c:ce:f2:bc:ae:5b:1d:d7:b8:20:89:ff: e3:30:81:fa:56:7f:84:88:21:4e:c3:87:02:55:e0: f5:18:11:55:6f:40:05:47:39:c2:56:03:2d:0a:e0: 1c:3e:91:c7:81:c7:50:4a:3f:fc:4c:37:eb:e6:aa: ef:89:57:79:da:f9:5f:3b:ea:24:ba:32:95:d6:af: 51:a2:1e:e2:9a:7b:ab:31:04:5c:cb:e2:01:f4:97: 9c:33:65:f3:bd:11:2e:cf:04:e2:03:26:66:70:57: dd:c3:f5:4d:e5:43:67:b6:15:78:b7:02:bd:e4:17: 0f:ef:c1:2e:2c:ab:ae:4b:61:45:07:6b:da:e9:24: 7a:23:ec:96:72:08:6a:e3:43:52:87:9f:af:4c:a3: 91:5d:2d:aa:17:12:8a:2d:24:71:f6:c7:24:14:50: 02:08:c6:ff:8c:33:94:07:c7:55:23:69:75:41:06: e4:61:2a:78:5a:b3:1f:f3:c8:19:b9:6b:97:92:f1: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:55:53:54:CD:B6:71:3E:C9:C0:4A:57:A9:C8:55:0F:1A:A4:45 X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:50:c7:71:de:b5:9f:b3:53:11:aa:ab:21:1a:70:f1:04:8f: 6d:2e:4c:73:3f:46:2a:32:ff:91:0b:b3:8a:ac:2e:a8:07:98: ac:b4:ca:5b:d1:73:d1:a6:41:76:4b:da:53:39:73:68:61:65: a1:6a:27:3c:d2:4f:12:8e:ad:20:b8:22:13:1f:b0:f6:04:d7: fa:c7:56:5f:39:9e:56:5f:db:b1:32:e6:14:f8:d0:03:d1:b2: 85:a9:59:d6:ac:d4:04:5d:4c:d6:02:cf:eb:95:0b:21:99:7d: 71:ca:aa:c0:b5:92:ca:70:fa:e6:83:41:79:89:ec:12:2f:35: 29:69:ac:29:07:9b:31:e4:98:11:5f:43:2f:ec:d9:13:1a:19: ca:1e:d8:ef:50:9d:9d:69:35:a3:a9:47:8c:e9:b6:bd:c9:b4: f7:22:52:49:18:96:e7:7d:f1:ba:5f:84:68:5c:64:e6:3c:3e: 69:34:c7:cc:a5:44:2d:cd:fd:16:46:ba:96:58:5b:aa:55:d4: da:0a:c2:4b:64:46:7e:1f:bc:a7:dd:b3:bd:82:70:dd:03:47: e2:0d:44:33:3f:36:3b:8b:8e:c0:15:53:5c:95:59:ea:2c:4d: 5e:63:2e:5a:53:52:ca:53:f0:42:30:07:11:63:dd:e2:cf:4e: 24:5c:bb:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUwNTE0MTUwMTQ4WhcNMjUwNTIxMTUwMTQ4WjAYMRYwFAYD VQQDEw02ODI0YjA1Yy0wNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuxvhFgQBTn0DazyhCriCHUErumEDlQocIDBDgARD8iqT2DPFHqpwMMeOZii DguQINUxl6zlv0vsBWdRIZlMzvK8rlsd17ggif/jMIH6Vn+EiCFOw4cCVeD1GBFV b0AFRznCVgMtCuAcPpHHgcdQSj/8TDfr5qrviVd52vlfO+okujKV1q9Roh7imnur MQRcy+IB9JecM2XzvREuzwTiAyZmcFfdw/VN5UNnthV4twK95BcP78EuLKuuS2FF B2va6SR6I+yWcghq40NSh5+vTKORXS2qFxKKLSRx9sckFFACCMb/jDOUB8dVI2l1 QQbkYSp4WrMf88gZuWuXkvE8vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf4VVNU zbZxPsnASlepyFUPGqRFMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8UMdx3rWfs1MRqqshGnDxBI9tLkxzP0YqMv+RC7OKrC6oB5istMpb 0XPRpkF2S9pTOXNoYWWhaic80k8Sjq0guCITH7D2BNf6x1ZfOZ5WX9uxMuYU+NAD 0bKFqVnWrNQEXUzWAs/rlQshmX1xyqrAtZLKcPrmg0F5iewSLzUpaawpB5sx5JgR X0Mv7NkTGhnKHtjvUJ2daTWjqUeM6ba9ybT3IlJJGJbnffG6X4RoXGTmPD5pNMfM pUQtzf0WRrqWWFuqVdTaCsJLZEZ+H7yn3bO9gnDdA0fiDUQzPzY7i47AFVNclVnq LE1eYy5aU1LKU/BCMAcRY93iz04kXLv3 -----END CERTIFICATE-----Generated at Thu May 15 12:25:19 2025 by rpki-client