$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: G35ZCA8k/cbd5bM4bK7L65QaAM28n9pPuxF3h6ddsew= Subject key identifier: 16:43:D0:3D:A5:0B:78:0D:08:44:60:B6:8B:71:65:5E:4D:7E:EB:4B Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 05BA Signing time: Thu 18 Sep 2025 23:25:03 +0000 Manifest this update: Thu 18 Sep 2025 23:25:03 +0000 Manifest next update: Thu 25 Sep 2025 23:25:03 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: 8Qdqs8y1OCC4XYD4eWAO6es/IfJrejSy/Wy0pg2bJek=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Sep 18 23:25:03 2025 GMT Not After : Sep 25 23:25:03 2025 GMT Subject: CN=68cc94cf-8d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:cf:45:62:54:86:ca:7a:a3:d6:8b:92:76: 3f:c2:57:5b:7b:23:1d:c8:a1:a9:15:96:50:0f:6e: 7c:29:40:b0:73:4a:1b:45:a8:0f:07:16:bd:19:f8: 33:2d:be:89:fa:03:d3:33:63:11:2a:43:8f:53:ad: 60:bd:22:3b:3b:0f:3d:e9:77:ec:5c:08:ab:d5:45: e8:20:f0:db:ac:e6:75:2a:ac:e8:01:4b:b4:9b:eb: 60:0a:cc:39:75:0c:5d:ec:86:b0:7e:c9:5d:78:7e: fa:a7:a2:a4:a4:02:69:fd:ac:6b:fa:41:a0:e4:3e: 6e:88:dc:e4:18:c5:e3:aa:c3:2c:c1:e2:94:07:54: 44:fc:04:53:79:a9:f7:b2:85:34:94:a8:2a:6d:57: 66:de:0a:bd:93:9c:83:9d:3f:99:fc:70:c4:e8:26: 6f:13:ec:b0:2c:2c:e6:f6:3c:3f:50:a8:c4:04:18: 08:44:17:c3:11:81:63:c6:05:76:34:31:ad:ea:2d: 8e:14:71:3c:8e:dc:33:7b:21:23:49:5a:63:37:45: e7:50:5a:bc:e4:1c:e7:46:3b:73:04:5c:1e:b3:85: af:0a:bc:67:a3:ba:36:9d:58:9e:ec:b8:2f:f8:04: 5a:f7:d5:fc:8b:ea:8a:e5:24:7a:3e:93:37:1d:f6: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:43:D0:3D:A5:0B:78:0D:08:44:60:B6:8B:71:65:5E:4D:7E:EB:4B X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0a:c9:71:18:66:b9:c0:1b:6b:49:4c:a1:d8:78:d3:54:17: 65:af:34:2c:14:60:aa:e8:79:1c:0c:ba:44:ea:3d:68:3e:0a: a4:88:46:b8:ea:70:b2:d5:1a:46:eb:91:42:0b:aa:cf:05:53: 33:d2:98:f4:d8:d4:68:d1:33:5b:48:41:1a:a4:cc:72:a3:f7: 5d:a1:9c:03:d7:87:df:77:20:29:c7:8a:8b:fb:e4:37:70:83: d3:10:aa:37:30:94:9b:2f:45:e0:2c:47:8b:64:20:5a:64:61: 1e:88:2f:0f:88:3e:28:85:71:24:a7:6e:72:0a:cb:47:33:bc: 26:69:5f:1a:8a:68:5f:c4:be:8b:65:ac:96:71:20:9f:4f:cb: 64:11:83:9b:76:13:36:53:f7:38:b0:f7:25:79:b3:4b:34:2a: 1f:8a:a9:00:9c:8c:15:2a:6d:b1:12:d8:49:47:cb:37:0a:37: 53:e5:9e:8d:36:c4:4d:6e:25:8f:f1:47:41:2d:33:67:94:6b: f8:dc:34:f6:20:fe:9c:16:9d:ec:24:78:d9:7a:6d:3f:65:ba: 2d:f4:18:90:e0:6f:73:59:f2:2e:d3:77:3d:08:3d:f9:fe:f1: dd:79:71:50:be:b1:f0:8e:0c:0b:66:19:ef:9d:f9:a6:05:4d: d9:a1:44:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwOTE4MjMyNTAzWhcNMjUwOTI1MjMyNTAzWjAYMRYwFAYD VQQDEw02OGNjOTRjZi04ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uLPRWJUhsp6o9aLknY/wldbeyMdyKGpFZZQD258KUCwc0obRagPBxa9Gfgz Lb6J+gPTM2MRKkOPU61gvSI7Ow896XfsXAir1UXoIPDbrOZ1KqzoAUu0m+tgCsw5 dQxd7IawfsldeH76p6KkpAJp/axr+kGg5D5uiNzkGMXjqsMsweKUB1RE/ARTean3 soU0lKgqbVdm3gq9k5yDnT+Z/HDE6CZvE+ywLCzm9jw/UKjEBBgIRBfDEYFjxgV2 NDGt6i2OFHE8jtwzeyEjSVpjN0XnUFq85BznRjtzBFwes4WvCrxno7o2nVie7Lgv +ARa99X8i+qK5SR6PpM3HfZXzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZD0D2l C3gNCERgtotxZV5NfutLMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0CslxGGa5wBtrSUyh2HjTVBdlrzQsFGCq6HkcDLpE6j1oPgqkiEa4 6nCy1RpG65FCC6rPBVMz0pj02NRo0TNbSEEapMxyo/ddoZwD14ffdyApx4qL++Q3 cIPTEKo3MJSbL0XgLEeLZCBaZGEeiC8PiD4ohXEkp25yCstHM7wmaV8aimhfxL6L ZayWcSCfT8tkEYObdhM2U/c4sPclebNLNCofiqkAnIwVKm2xEthJR8s3CjdT5Z6N NsRNbiWP8UdBLTNnlGv43DT2IP6cFp3sJHjZem0/Zbot9BiQ4G9zWfIu03c9CD35 /vHdeXFQvrHwjgwLZhnvnfmmBU3ZoUSD -----END CERTIFICATE-----Generated at Fri Sep 19 09:08:23 2025 by rpki-client