$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: ODiwRA155UAIu+luE+DC/chRf+O8zfbJIojRB0OEUd0= Subject key identifier: 08:C4:D4:80:02:65:38:A8:28:1F:00:BC:42:B8:F8:9F:B1:87:20:AE Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 3491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 3491 Signing time: Wed 02 Jul 2025 15:03:47 +0000 Manifest this update: Wed 02 Jul 2025 15:03:46 +0000 Manifest next update: Wed 09 Jul 2025 15:03:46 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: zU5p8tdlHXKxp+IS1x5j1wSkFdEUF57uSFf1aDYk0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13457 (0x3491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Jul 2 15:03:46 2025 GMT Not After : Jul 9 15:03:46 2025 GMT Subject: CN=68654a52-70d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:8f:de:84:85:e5:e9:1a:7a:5a:3c:11:13: d8:b7:c8:62:d6:4b:25:95:5c:87:dd:be:06:9a:d5: 3e:db:70:c6:ea:93:68:74:79:1a:65:55:1d:71:59: 1b:ea:ed:88:1b:25:c5:32:cb:ab:10:9b:76:9a:d2: e6:d4:35:37:3c:49:4f:07:eb:4f:9c:0e:a3:e9:e2: 17:29:34:3a:c2:14:28:85:05:b2:24:44:13:93:f9: 46:8f:7b:29:e5:da:ba:ee:b0:ac:2a:81:a1:0d:70: cb:f1:9f:26:69:20:5c:a1:e3:a5:a4:11:d2:6f:17: 71:30:b7:31:fc:7b:35:f6:46:66:09:cf:8d:fc:1c: 6c:b1:82:ef:d4:d0:45:ab:ca:33:af:f5:d0:40:5c: 82:75:2e:16:5d:fc:28:b7:67:7b:e5:ef:6a:3b:79: fb:90:2f:dd:e6:11:3f:21:49:65:b6:db:e6:03:c4: 76:7d:bd:c5:74:2c:b0:e8:b3:19:dc:2c:14:d1:dd: 9d:5c:95:43:4a:a3:11:91:17:b8:4c:87:af:f3:e8: af:48:13:ef:7e:ff:8a:06:a0:41:3f:05:11:bc:55: 83:05:06:6c:2e:a9:4c:e8:ab:9b:58:cf:69:2e:bc: 56:6e:06:9a:5a:f5:54:da:4d:fd:05:ea:d1:91:16: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C4:D4:80:02:65:38:A8:28:1F:00:BC:42:B8:F8:9F:B1:87:20:AE X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:cc:ba:c4:84:ab:aa:3f:3a:6e:e7:52:9c:fb:bb:53:3b:02: 48:e7:91:c7:14:2b:93:cb:cc:00:d9:54:2c:8d:ca:b3:c3:c9: e0:b5:b5:43:30:7f:4a:fa:fc:a8:4d:32:c2:b3:fc:16:ed:13: 2d:ba:b9:f1:67:35:74:2c:52:d0:a6:1c:91:9d:7e:e0:c5:38: b2:24:9b:a9:ef:52:77:b7:7f:63:05:4b:ca:82:09:c8:53:3d: 5a:83:63:94:85:2f:3d:c4:ad:d6:f2:7d:6e:6c:c5:a9:49:40: 3e:b6:43:01:27:d5:34:00:10:67:a4:57:77:47:c6:88:d2:7c: 45:d6:83:9d:4a:5e:41:8e:00:87:5d:3e:5a:d0:27:53:00:3e: f3:5b:f1:81:da:3f:da:8d:99:95:aa:b3:b6:c9:84:4d:84:b7: 07:59:44:08:f5:22:98:41:3b:16:d2:79:06:e3:26:67:0d:4f: ce:32:88:00:12:21:0d:58:dc:fb:78:3c:a6:11:51:83:47:e2: fa:22:ba:ce:16:6c:ed:92:4f:5f:4b:36:b3:98:3d:99:65:b2: 1a:02:be:46:7f:37:71:a5:90:41:05:d1:92:91:d2:dd:ce:04: a2:4e:dc:db:25:bc:9e:18:81:33:8a:6b:93:77:d5:f8:a0:3b: 87:ed:bb:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUwNzAyMTUwMzQ2WhcNMjUwNzA5MTUwMzQ2WjAYMRYwFAYD VQQDEw02ODY1NGE1Mi03MGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cSP3oSF5ekaelo8ERPYt8hi1ksllVyH3b4GmtU+23DG6pNodHkaZVUdcVkb 6u2IGyXFMsurEJt2mtLm1DU3PElPB+tPnA6j6eIXKTQ6whQohQWyJEQTk/lGj3sp 5dq67rCsKoGhDXDL8Z8maSBcoeOlpBHSbxdxMLcx/Hs19kZmCc+N/BxssYLv1NBF q8ozr/XQQFyCdS4WXfwot2d75e9qO3n7kC/d5hE/IUllttvmA8R2fb3FdCyw6LMZ 3CwU0d2dXJVDSqMRkRe4TIev8+ivSBPvfv+KBqBBPwURvFWDBQZsLqlM6KubWM9p LrxWbgaaWvVU2k39BerRkRYGKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjE1IAC ZTioKB8AvEK4+J+xhyCuMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDzLrEhKuqPzpu51Kc+7tTOwJI55HHFCuTy8wA2VQsjcqzw8ngtbVD MH9K+vyoTTLCs/wW7RMturnxZzV0LFLQphyRnX7gxTiyJJup71J3t39jBUvKggnI Uz1ag2OUhS89xK3W8n1ubMWpSUA+tkMBJ9U0ABBnpFd3R8aI0nxF1oOdSl5BjgCH XT5a0CdTAD7zW/GB2j/ajZmVqrO2yYRNhLcHWUQI9SKYQTsW0nkG4yZnDU/OMogA EiENWNz7eDymEVGDR+L6IrrOFmztkk9fSzazmD2ZZbIaAr5GfzdxpZBBBdGSkdLd zgSiTtzbJbyeGIEzimuTd9X4oDuH7btN -----END CERTIFICATE-----Generated at Fri Jul 4 03:20:51 2025 by rpki-client