$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: laA2oNSA4/58hAfmH0Ep8IQ7kic3BSzg4oHhdo5wIhk= Subject key identifier: CE:7E:1B:BE:54:82:E6:29:59:DD:87:9B:8A:5D:A5:F1:D6:96:38:B2 Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1C2B Signing time: Fri 04 Apr 2025 16:15:14 +0000 Manifest this update: Fri 04 Apr 2025 16:15:13 +0000 Manifest next update: Fri 11 Apr 2025 16:15:13 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: /c7WAy2KA1TqdSVCWoHjlNlMnVlUtDqOvdw7e5ITYDQ=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: 3515yyoHz/OpGxhQJVW0uZ09F4a0FPsq5rPkaEYDZbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7234 (0x1c42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA Validity Not Before: Apr 4 16:15:13 2025 GMT Not After : Apr 11 16:15:13 2025 GMT Subject: CN=67f00591-ade7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:ce:39:47:03:d1:72:36:f7:ec:2a:2f:59: 4c:79:ed:17:ea:32:fe:4a:21:a5:2f:ba:3e:bb:94: 09:bf:30:8d:99:cc:d3:7d:06:c3:f7:92:b6:4a:c9: af:2d:4b:24:8b:6a:ee:e0:de:d1:9d:e9:bf:ac:55: 61:11:d8:6b:3a:73:e1:83:41:37:b4:9f:d5:77:4d: b4:a1:c5:35:17:cd:34:80:96:1d:a4:a2:56:5b:68: 77:93:9e:cc:cc:17:d0:b3:cf:00:ef:0a:13:7e:af: 86:3d:2c:4e:6c:6b:a2:6a:59:ef:2e:7e:07:2c:d0: 48:c6:68:e7:80:65:5a:c9:3c:4d:93:d5:25:aa:98: 96:c5:bd:49:f8:63:6a:9f:9f:f1:1a:b9:e9:83:86: 50:68:ff:63:20:bc:c6:fe:19:33:94:d0:43:92:c5: ed:f9:b5:23:b5:aa:c8:62:97:fc:2b:a3:cb:a0:3e: 68:9f:23:1c:26:f8:3f:15:a8:d7:f2:96:f2:14:91: 2f:d5:c7:68:2a:b6:fc:96:74:82:06:22:df:b1:19: 0c:3f:0b:db:40:23:41:3c:bb:09:2f:45:f1:52:34: ef:cb:eb:48:73:38:27:41:98:a9:3e:dc:f2:46:6d: 42:f5:d8:8e:d0:d2:fa:9d:b2:10:1f:4e:71:51:6b: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7E:1B:BE:54:82:E6:29:59:DD:87:9B:8A:5D:A5:F1:D6:96:38:B2 X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9e:a7:fa:d5:3c:10:2c:e2:10:78:ab:eb:7b:23:75:ea:de: 25:2c:36:64:db:69:0a:1a:e2:95:07:ab:9f:d1:af:e0:bc:61: d0:54:83:38:69:89:24:c0:64:b3:c6:99:46:94:33:c4:fc:90: 89:7d:78:df:0c:02:c7:81:a0:9d:08:89:f8:83:5a:5f:a8:98: e8:a8:62:b2:df:08:30:8c:72:77:ab:be:a9:0a:6d:46:ee:17: ec:e9:06:f4:7c:6b:0a:99:52:3c:6d:0c:46:f4:9b:ab:89:f1: bf:45:77:7d:fd:4b:c7:ee:d5:47:8b:6e:78:2f:69:fc:24:04: dc:2f:9b:e3:30:e9:56:da:9d:9e:3d:59:cf:6b:42:a5:49:61: af:43:f2:04:59:e8:46:d8:9e:13:d6:ad:9f:78:26:f2:bc:7e: 03:19:af:38:4e:83:5e:5b:1e:24:94:66:95:40:61:16:8e:24: 50:12:25:e5:bb:25:52:21:a7:90:22:3e:c9:a1:cf:d5:93:ea: 9b:53:53:72:9c:71:39:1b:a3:5d:80:ff:d0:a9:e5:82:67:8c: df:69:a6:d8:57:1e:e6:dc:e7:b7:09:8e:90:f9:ca:f9:0b:0f: bb:4f:90:78:6d:62:d4:dc:dc:6d:5c:11:a0:5e:89:b3:3f:0b: 71:9b:3f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjUwNDA0MTYxNTEzWhcNMjUwNDExMTYxNTEzWjAYMRYwFAYD VQQDEw02N2YwMDU5MS1hZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15TOOUcD0XI29+wqL1lMee0X6jL+SiGlL7o+u5QJvzCNmczTfQbD95K2Ssmv LUski2ru4N7Rnem/rFVhEdhrOnPhg0E3tJ/Vd020ocU1F800gJYdpKJWW2h3k57M zBfQs88A7woTfq+GPSxObGuialnvLn4HLNBIxmjngGVayTxNk9UlqpiWxb1J+GNq n5/xGrnpg4ZQaP9jILzG/hkzlNBDksXt+bUjtarIYpf8K6PLoD5onyMcJvg/FajX 8pbyFJEv1cdoKrb8lnSCBiLfsRkMPwvbQCNBPLsJL0XxUjTvy+tIczgnQZipPtzy Rm1C9diO0NL6nbIQH05xUWuSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5+G75U guYpWd2Hm4pdpfHWljiyMB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANnqf61TwQLOIQeKvreyN16t4lLDZk22kKGuKVB6uf0a/gvGHQVIM4 aYkkwGSzxplGlDPE/JCJfXjfDALHgaCdCIn4g1pfqJjoqGKy3wgwjHJ3q76pCm1G 7hfs6Qb0fGsKmVI8bQxG9JurifG/RXd9/UvH7tVHi254L2n8JATcL5vjMOlW2p2e PVnPa0KlSWGvQ/IEWehG2J4T1q2feCbyvH4DGa84ToNeWx4klGaVQGEWjiRQEiXl uyVSIaeQIj7Joc/Vk+qbU1NynHE5G6NdgP/QqeWCZ4zfaabYVx7m3Oe3CY6Q+cr5 Cw+7T5B4bWLU3NxtXBGgXomzPwtxmz8B -----END CERTIFICATE-----Generated at Sat Apr 5 21:09:05 2025 by rpki-client