$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: y8LoE2TdqrDVMR/swUxnmcpSreKgK6JfP+F97JA4i+8= Subject key identifier: 18:83:8E:FB:41:AA:FB:79:F3:68:D8:38:3A:10:C6:C6:C0:5C:1F:DF Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 057F Signing time: Fri 30 May 2025 23:28:53 +0000 Manifest this update: Fri 30 May 2025 23:28:53 +0000 Manifest next update: Fri 06 Jun 2025 23:28:53 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: 7lqWhLG267fMNuXctrNk0Vr6SxTx9WbaQYoQXagc3m0=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: May 30 23:28:53 2025 GMT Not After : Jun 6 23:28:53 2025 GMT Subject: CN=683a3f35-6620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:70:fe:af:06:07:a7:7f:0f:c0:3d:9e:db: 9f:45:ed:30:a5:c8:7e:1c:15:7b:e7:99:4d:2c:93: ef:95:9f:3c:bc:35:ba:e0:01:fe:4c:5f:05:ab:14: 91:6d:4f:22:47:76:cc:c2:e1:4e:87:94:54:5c:8f: 93:16:14:01:de:d4:44:84:a3:19:42:82:f0:df:d7: 75:37:d9:60:27:97:df:3f:73:93:9b:04:4d:e7:26: 43:79:e4:a7:71:bc:ef:23:1f:bf:67:18:e1:a3:e2: c5:86:04:52:cc:11:eb:67:70:ba:4e:72:9d:43:46: 1b:a0:0d:35:69:e7:a2:e1:82:82:41:c5:5a:57:fa: e2:ab:0a:49:07:2f:f6:28:b6:8c:32:f6:28:41:69: 5f:5f:9a:14:86:d6:e5:36:ec:81:e7:68:62:aa:af: 31:a7:0f:fb:92:0c:64:34:fc:2d:e9:88:b1:2a:01: 84:07:30:01:a7:39:3c:dc:11:55:ff:5d:ef:f1:a8: e9:ab:a2:8b:8d:e8:24:6f:f3:89:cf:5e:9f:9f:f8: 61:51:0c:93:0f:9b:82:31:46:76:43:02:48:13:fc: a5:c3:5b:3c:22:db:58:c9:96:55:a0:f9:e9:12:70: 09:37:3c:ec:5e:7d:5b:fb:01:9d:3a:0a:38:42:f3: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:8E:FB:41:AA:FB:79:F3:68:D8:38:3A:10:C6:C6:C0:5C:1F:DF X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f1:1b:63:0d:0b:4e:9e:7b:b8:e2:56:dc:37:03:d8:39:a1: 8b:de:80:8f:17:64:f3:fd:97:77:15:ce:72:ac:8e:58:fa:cb: ec:87:67:50:6f:a2:dc:a9:7d:2b:57:92:e6:4a:c5:2e:d9:bc: 2d:3f:fb:a9:76:bc:96:52:38:98:6f:36:6b:02:7d:ae:7d:d0: 03:0f:0f:52:35:25:f8:b4:d0:74:31:c3:41:3c:36:cd:97:ca: ab:4f:1c:fb:3e:33:1c:e9:3f:22:ec:7b:fe:0e:a5:ef:55:81: 92:ef:e1:42:dc:63:a5:5c:93:5c:5a:70:8a:fe:a5:b9:af:7e: 62:b9:34:27:bc:e9:9c:32:fe:09:2c:f0:f5:1b:d6:ac:59:b5: 21:c7:f2:a2:d3:03:8b:ac:c6:65:27:68:a2:43:5b:c0:09:a6: 77:9f:de:c1:71:a2:bf:41:82:31:f9:e2:2c:fa:1b:df:ed:93: 2f:41:f4:2d:b1:cc:81:82:12:6a:b7:a3:73:0c:21:06:11:d4: a3:3c:66:7f:e8:05:e7:b6:e5:2b:25:16:3f:05:d2:33:2f:64: f4:ee:e1:d0:25:d6:cd:31:b6:67:af:85:2c:27:18:49:20:1e: 83:ca:c7:ef:9e:f7:45:eb:ff:87:af:fd:80:e7:7b:ba:d5:3c: 61:3c:9f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwNTMwMjMyODUzWhcNMjUwNjA2MjMyODUzWjAYMRYwFAYD VQQDEw02ODNhM2YzNS02NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKZw/q8GB6d/D8A9ntufRe0wpch+HBV755lNLJPvlZ88vDW64AH+TF8FqxSR bU8iR3bMwuFOh5RUXI+TFhQB3tREhKMZQoLw39d1N9lgJ5ffP3OTmwRN5yZDeeSn cbzvIx+/Zxjho+LFhgRSzBHrZ3C6TnKdQ0YboA01aeei4YKCQcVaV/riqwpJBy/2 KLaMMvYoQWlfX5oUhtblNuyB52hiqq8xpw/7kgxkNPwt6YixKgGEBzABpzk83BFV /13v8ajpq6KLjegkb/OJz16fn/hhUQyTD5uCMUZ2QwJIE/ylw1s8IttYyZZVoPnp EnAJNzzsXn1b+wGdOgo4QvMXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiDjvtB qvt582jYODoQxsbAXB/fMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/8RtjDQtOnnu44lbcNwPYOaGL3oCPF2Tz/Zd3Fc5yrI5Y+svsh2dQ b6LcqX0rV5LmSsUu2bwtP/updryWUjiYbzZrAn2ufdADDw9SNSX4tNB0McNBPDbN l8qrTxz7PjMc6T8i7Hv+DqXvVYGS7+FC3GOlXJNcWnCK/qW5r35iuTQnvOmcMv4J LPD1G9asWbUhx/Ki0wOLrMZlJ2iiQ1vACaZ3n97BcaK/QYIx+eIs+hvf7ZMvQfQt scyBghJqt6NzDCEGEdSjPGZ/6AXntuUrJRY/BdIzL2T07uHQJdbNMbZnr4UsJxhJ IB6DysfvnvdF6/+Hr/2A53u61TxhPJ/y -----END CERTIFICATE-----Generated at Sat May 31 17:30:23 2025 by rpki-client