$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: 5j0vELVsWPf4tKDSf0aSitYP7Q62RAijHItRwedfiJk= Subject key identifier: DD:F3:6D:B0:49:DA:22:D5:49:DB:18:5A:89:41:09:33:27:5D:46:44 Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0546 Signing time: Fri 30 May 2025 23:38:09 +0000 Manifest this update: Fri 30 May 2025 23:38:08 +0000 Manifest next update: Fri 06 Jun 2025 23:38:08 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: SgX7zFPyK9yRCelrFTBWndavKhmCiyl6mQbJfnJG9Hc=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: Pfjb1wm6jDOim3eSfbu3Z5HUwd0Kah9HIhgDBWP9f4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: May 30 23:38:08 2025 GMT Not After : Jun 6 23:38:08 2025 GMT Subject: CN=683a4160-64ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:ea:5e:a7:3b:6f:d1:03:5e:89:71:ce:bb: c7:55:aa:80:55:31:dc:b9:f5:23:63:82:2b:f7:7b: 97:58:37:9e:6a:be:59:5e:3c:c0:55:78:17:f9:d5: 94:f4:c8:cd:40:4e:8b:fe:51:86:2e:ec:36:69:47: 13:38:20:b9:52:30:bd:cf:55:21:4a:6b:3f:69:21: dc:21:53:29:60:33:b3:c0:94:14:9e:e7:6c:a3:d5: 3a:6c:96:13:c4:b5:2f:e8:2c:fe:34:8c:fc:de:7a: e8:8b:98:a2:84:52:d5:f4:0f:31:b6:d7:8e:60:f2: 0b:5a:53:f2:99:7b:14:c6:6f:e5:90:17:2e:4b:25: 7a:74:73:d3:04:59:ea:42:3f:ac:7d:cf:d7:14:f9: 05:95:f5:a7:f8:16:0f:82:2f:c7:74:d2:37:31:ef: c4:7f:e4:a0:f3:53:f8:b9:37:d3:22:7a:0f:8d:23: c2:1c:2e:73:d4:de:7d:da:f1:ee:00:7c:56:59:b5: 6f:a2:74:53:58:50:16:ef:73:4d:e9:72:61:52:44: 59:8f:98:0f:ea:e6:cb:0e:06:4e:4e:0e:7f:09:d0: 81:27:cd:82:05:6b:92:ae:51:fe:61:c8:24:cc:40: 70:00:e4:14:d7:94:f9:50:d5:b3:c0:19:cb:a7:a8: e7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:6D:B0:49:DA:22:D5:49:DB:18:5A:89:41:09:33:27:5D:46:44 X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:10:f2:67:fb:cf:cd:de:55:3f:bb:dd:68:de:b9:48:0d: b9:cb:13:c4:15:69:59:c7:4c:5d:7b:7d:80:fa:1a:27:20:cf: c4:1e:f8:ea:21:15:87:fc:17:5c:03:c6:c3:c3:f8:94:3c:e0: b3:a1:fa:a6:f2:57:9a:2e:e1:ad:b1:d4:ff:3d:38:59:32:47: c4:0d:06:5b:06:16:1d:af:ba:da:cb:cf:ea:56:05:f2:6e:6b: d6:ac:40:0b:e9:6a:fc:b6:56:65:2d:2e:c8:f9:6a:e4:96:a6: d0:89:dd:5e:8d:a3:0a:4f:df:f2:55:9a:30:7f:c8:f6:ff:34: 4c:88:87:07:c0:41:63:bc:75:de:c5:ec:8d:7b:6e:af:9f:71: 24:13:a0:8b:be:5f:58:c8:18:3f:97:ac:b9:a6:8a:8b:ff:63: 7e:f3:be:50:9e:41:e7:cb:e8:45:ad:b0:32:a1:2d:48:fc:0c: e5:26:87:73:05:e3:bf:6d:05:74:5f:8e:01:4a:b2:23:f0:61: c8:ab:5a:1e:df:75:a6:89:12:7e:6d:6e:89:05:c8:69:45:a5: a2:f4:d9:73:5c:f8:dc:5c:c8:f6:2c:62:48:eb:42:a9:af:93: f2:84:9c:d3:aa:c2:61:64:14:44:31:c9:f0:86:f7:cd:bc:44: c4:ec:1f:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUwNTMwMjMzODA4WhcNMjUwNjA2MjMzODA4WjAYMRYwFAYD VQQDEw02ODNhNDE2MC02NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2z/qXqc7b9EDXolxzrvHVaqAVTHcufUjY4Ir93uXWDeear5ZXjzAVXgX+dWU 9MjNQE6L/lGGLuw2aUcTOCC5UjC9z1UhSms/aSHcIVMpYDOzwJQUnudso9U6bJYT xLUv6Cz+NIz83nroi5iihFLV9A8xtteOYPILWlPymXsUxm/lkBcuSyV6dHPTBFnq Qj+sfc/XFPkFlfWn+BYPgi/HdNI3Me/Ef+Sg81P4uTfTInoPjSPCHC5z1N592vHu AHxWWbVvonRTWFAW73NN6XJhUkRZj5gP6ubLDgZOTg5/CdCBJ82CBWuSrlH+Ycgk zEBwAOQU15T5UNWzwBnLp6jncwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3zbbBJ 2iLVSdsYWolBCTMnXUZEMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX/BDyZ/vPzd5VP7vdaN65SA25yxPEFWlZx0xde32A+honIM/EHvjq IRWH/BdcA8bDw/iUPOCzofqm8leaLuGtsdT/PThZMkfEDQZbBhYdr7ray8/qVgXy bmvWrEAL6Wr8tlZlLS7I+WrklqbQid1ejaMKT9/yVZowf8j2/zRMiIcHwEFjvHXe xeyNe26vn3EkE6CLvl9YyBg/l6y5poqL/2N+875QnkHny+hFrbAyoS1I/AzlJodz BeO/bQV0X44BSrIj8GHIq1oe33WmiRJ+bW6JBchpRaWi9NlzXPjcXMj2LGJI60Kp r5PyhJzTqsJhZBREMcnwhvfNvETE7B9X -----END CERTIFICATE-----Generated at Sat May 31 16:38:50 2025 by rpki-client