$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: IytMHzmEShC2hEgB0KV9IU14Zk+Gr+3c5rqlwJfeunY= Subject key identifier: D1:D4:9C:B7:4D:C9:BD:72:C5:A7:E7:B3:06:2F:59:80:10:65:28:86 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 075F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0CA9 Signing time: Fri 18 Jul 2025 18:25:29 +0000 Manifest this update: Fri 18 Jul 2025 18:25:28 +0000 Manifest next update: Fri 25 Jul 2025 18:25:28 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: fpnQGJMNZXGu1psZ6Lsl8lRqxwh588gP/S06P/b0rfQ=) 2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: TNeim+c/SqFpRd1l3QdyFDanyKYRvKOEj0vZ8enHI5M=) 3: 27B9D8CE5A4911F096BE7C32C4F9AE02.roa (hash: nXEceLRdjptD3hMuu1Rrn7X5bxhPTnP5MRplqc2Qdl4=) 4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Jul 18 18:25:28 2025 GMT Not After : Jul 25 18:25:28 2025 GMT Subject: CN=687a9198-02c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:69:ee:80:37:d4:47:8c:f8:44:c9:1e:c8: 23:c5:5f:3b:00:64:d4:1a:3f:b5:c8:32:65:1b:27: 67:da:4e:f2:03:1c:4a:80:8e:81:e3:0a:39:00:a7: e8:f1:51:c7:d1:3a:e1:6a:76:c5:91:01:f3:26:7b: 6d:71:79:64:6e:d1:fe:53:b2:0b:8b:7b:8c:ed:c5: 02:0c:6f:0f:8b:16:20:b2:f2:d0:ee:b4:9c:9e:2b: 42:dc:de:58:84:e9:90:15:1a:62:ae:ff:03:78:c5: 8b:0b:49:72:1c:d0:82:50:98:79:7a:d0:e9:e2:63: b3:14:b9:d9:df:b0:e5:83:c9:c1:11:b8:7b:de:0a: 89:32:dc:0c:e7:85:67:be:c0:ee:4c:79:12:cd:bf: f2:9e:86:9e:35:7b:93:3c:34:40:84:6f:c6:dc:f7: 78:9c:57:12:af:d7:dc:38:ba:9d:7f:7e:3d:ff:64: 39:1a:04:57:3e:87:d4:20:74:34:97:63:21:6f:20: 46:cb:de:7f:e4:c5:20:89:a8:64:5c:6e:14:f5:e2: d9:fd:ed:d2:9f:9b:60:b1:e3:f9:4b:56:fc:ae:c8: 4c:5d:b8:a3:23:76:60:de:cd:ce:6c:6c:18:1d:8f: e9:53:21:ca:95:6b:36:94:3b:14:73:13:e2:4c:01: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:9C:B7:4D:C9:BD:72:C5:A7:E7:B3:06:2F:59:80:10:65:28:86 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c8:f9:4c:7f:67:43:87:b5:06:c2:0e:2a:4b:5b:71:4c:6d: 8e:00:25:52:8a:2d:b4:ce:dc:e3:f1:e4:55:ce:ca:92:56:12: a5:40:ad:40:e1:e8:70:ad:c1:ae:60:6c:9e:2e:50:88:9b:2b: f4:ab:fc:e2:da:f0:07:17:ed:a9:6f:d2:47:c1:7e:80:b2:53: ce:4f:c8:d9:4d:76:b3:6e:61:8c:19:21:16:06:08:2a:86:92: ce:38:b0:92:34:f5:3d:ed:60:91:76:cb:14:8c:8d:ef:79:1e: 59:28:f2:dc:59:c5:4f:46:62:79:3b:e2:55:c6:6f:1f:5a:1d: 3a:9e:39:d8:8d:e5:11:a5:17:9e:1c:c0:98:b7:d5:fd:11:23: 4e:f2:55:78:f4:5e:44:c6:17:25:5f:ec:c5:92:18:ae:e0:e3: 4a:99:a2:d7:e4:f6:6b:3e:85:a9:4a:8a:a1:3f:65:37:14:d9: 60:df:e4:9f:b0:b5:86:d2:10:e0:f0:35:8b:7f:31:8e:1a:06: fb:48:d5:60:5a:1a:9d:f5:68:95:c3:08:c6:ee:7d:58:7d:a9: 42:95:f2:95:79:c9:87:8c:a9:92:f2:bb:27:26:4c:7a:89:62: 61:8d:ed:02:3c:3f:a8:fc:11:21:2c:a6:c0:0c:fa:ca:ad:f0: 84:22:34:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUwNzE4MTgyNTI4WhcNMjUwNzI1MTgyNTI4WjAYMRYwFAYD VQQDEw02ODdhOTE5OC0wMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V9p7oA31EeM+ETJHsgjxV87AGTUGj+1yDJlGydn2k7yAxxKgI6B4wo5AKfo 8VHH0TrhanbFkQHzJnttcXlkbtH+U7ILi3uM7cUCDG8PixYgsvLQ7rScnitC3N5Y hOmQFRpirv8DeMWLC0lyHNCCUJh5etDp4mOzFLnZ37Dlg8nBEbh73gqJMtwM54Vn vsDuTHkSzb/ynoaeNXuTPDRAhG/G3Pd4nFcSr9fcOLqdf349/2Q5GgRXPofUIHQ0 l2MhbyBGy95/5MUgiahkXG4U9eLZ/e3Sn5tgseP5S1b8rshMXbijI3Zg3s3ObGwY HY/pUyHKlWs2lDsUcxPiTAFi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHUnLdN yb1yxafnswYvWYAQZSiGMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLyPlMf2dDh7UGwg4qS1txTG2OACVSii20ztzj8eRVzsqSVhKlQK1A 4ehwrcGuYGyeLlCImyv0q/zi2vAHF+2pb9JHwX6AslPOT8jZTXazbmGMGSEWBggq hpLOOLCSNPU97WCRdssUjI3veR5ZKPLcWcVPRmJ5O+JVxm8fWh06njnYjeURpRee HMCYt9X9ESNO8lV49F5ExhclX+zFkhiu4ONKmaLX5PZrPoWpSoqhP2U3FNlg3+Sf sLWG0hDg8DWLfzGOGgb7SNVgWhqd9WiVwwjG7n1YfalClfKVecmHjKmS8rsnJkx6 iWJhje0CPD+o/BEhLKbADPrKrfCEIjSN -----END CERTIFICATE-----Generated at Sun Jul 20 15:18:42 2025 by rpki-client