$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: ENbbTsi/O6Z5qYq5hsA4wqutmQOGfVl2iI8wjbatFMM= Subject key identifier: 0F:BB:01:DD:91:3D:5F:59:FC:DB:F9:AC:46:D1:AC:D9:08:E3:62:43 Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1C61 Signing time: Sun 20 Jul 2025 16:13:21 +0000 Manifest this update: Sun 20 Jul 2025 16:13:21 +0000 Manifest next update: Sun 27 Jul 2025 16:13:21 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: U4IOVR+E1Rh5kgrIu8a0ynryApKDz983hhiDydmW6Bk=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: 3515yyoHz/OpGxhQJVW0uZ09F4a0FPsq5rPkaEYDZbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7288 (0x1c78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: Jul 20 16:13:21 2025 GMT Not After : Jul 27 16:13:21 2025 GMT Subject: CN=687d15a1-24c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:37:7f:c7:71:a2:5a:58:4e:50:26:14:69: 84:07:58:6f:e0:f8:9a:24:8c:91:a4:da:45:17:df: 95:67:00:49:8f:21:6f:34:46:cf:73:76:e7:e9:bf: 39:cc:f1:86:0a:ce:ce:32:64:19:e5:3b:5e:12:1b: ac:f5:75:f5:85:ac:79:07:39:ee:05:27:bc:66:f5: a5:ed:e9:d9:e1:e5:bd:a2:60:70:53:3b:09:9f:f6: f3:ae:2f:69:af:8f:93:4a:c3:d1:3c:25:9a:da:8b: 07:1d:2d:2c:5c:a7:32:a2:df:7f:d9:83:45:b5:43: 4c:a8:a4:6d:45:0f:25:89:12:a3:0f:af:d7:81:86: 6a:ba:07:7b:3c:0f:14:57:8e:d9:28:c6:9b:28:dc: 5d:b2:c4:d1:56:8d:1f:52:cc:24:79:ae:02:10:97: 32:77:62:bc:cf:92:ec:01:cb:20:e3:2f:09:e4:40: 18:73:a3:22:53:60:99:dd:60:94:55:56:df:f2:0a: 56:32:46:3c:19:42:18:5e:4f:8b:cf:d1:19:c8:01: 1e:77:dd:83:e3:35:04:fb:dd:4f:36:e9:6a:a0:a5: ac:c8:ec:4a:cd:69:c2:01:10:74:fa:14:08:4f:a8: 26:66:c9:68:8f:6e:b4:7c:6c:14:43:6b:71:71:e9: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:01:DD:91:3D:5F:59:FC:DB:F9:AC:46:D1:AC:D9:08:E3:62:43 X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:95:26:38:b5:2f:9f:e7:ee:b2:65:4b:a8:42:a6:dd:37:c9: ea:95:76:e0:9e:64:04:1e:6d:0d:eb:53:2f:4e:fa:0f:86:e7: 81:d2:7b:ff:e8:a5:fd:63:54:61:4b:ee:2d:30:38:b5:3a:53: 61:d7:5c:c2:e6:de:fa:17:dc:bb:13:f1:33:53:2e:7f:32:c8: c4:a8:16:1c:f5:5b:79:72:16:c2:bd:7c:69:64:16:c3:b9:a2: 26:68:60:36:e7:cd:a9:49:ab:b0:63:b7:1f:69:dd:7c:3b:8e: 1a:0f:0d:19:2c:ef:ea:5e:fa:7a:1e:04:e7:0e:44:a7:a5:84: 54:4d:5a:48:81:b5:70:f1:04:02:83:95:e4:5f:92:25:cd:20: 84:db:14:a5:14:6f:47:54:0a:fa:bc:85:4d:97:18:b3:dc:78: 59:ce:37:0e:06:65:f5:14:dd:76:8a:f8:03:d4:b8:e4:df:11: 43:d8:57:b6:1d:bf:3d:7c:01:ad:ff:99:63:9b:1a:72:7a:10: d7:79:1c:90:07:12:a5:ed:c8:8d:70:5d:df:fa:71:9b:11:96: 4e:c2:26:7e:ce:cb:53:0f:97:f7:f9:48:8e:3d:2c:7d:6d:5b: 0f:6e:bd:d1:f0:27:bb:1a:ab:38:93:d7:64:d4:64:ae:3d:43: fc:02:00:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjUwNzIwMTYxMzIxWhcNMjUwNzI3MTYxMzIxWjAYMRYwFAYD VQQDEw02ODdkMTVhMS0yNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DI3f8dxolpYTlAmFGmEB1hv4PiaJIyRpNpFF9+VZwBJjyFvNEbPc3bn6b85 zPGGCs7OMmQZ5TteEhus9XX1hax5BznuBSe8ZvWl7enZ4eW9omBwUzsJn/bzri9p r4+TSsPRPCWa2osHHS0sXKcyot9/2YNFtUNMqKRtRQ8liRKjD6/XgYZqugd7PA8U V47ZKMabKNxdssTRVo0fUswkea4CEJcyd2K8z5LsAcsg4y8J5EAYc6MiU2CZ3WCU VVbf8gpWMkY8GUIYXk+Lz9EZyAEed92D4zUE+91PNulqoKWsyOxKzWnCARB0+hQI T6gmZsloj260fGwUQ2txcenkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+7Ad2R PV9Z/Nv5rEbRrNkI42JDMB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxlSY4tS+f5+6yZUuoQqbdN8nqlXbgnmQEHm0N61MvTvoPhueB0nv/ 6KX9Y1RhS+4tMDi1OlNh11zC5t76F9y7E/EzUy5/MsjEqBYc9Vt5chbCvXxpZBbD uaImaGA2582pSauwY7cfad18O44aDw0ZLO/qXvp6HgTnDkSnpYRUTVpIgbVw8QQC g5XkX5IlzSCE2xSlFG9HVAr6vIVNlxiz3HhZzjcOBmX1FN12ivgD1Ljk3xFD2Fe2 Hb89fAGt/5ljmxpyehDXeRyQBxKl7ciNcF3f+nGbEZZOwiZ+zstTD5f3+UiOPSx9 bVsPbr3R8Ce7Gqs4k9dk1GSuPUP8AgBO -----END CERTIFICATE-----Generated at Mon Jul 21 07:20:25 2025 by rpki-client