$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: kRzMcRs0xpXR418ZO/UIiM758HF4qjHnVpFQLc9mHxY= Subject key identifier: 3B:52:DD:EA:C8:67:86:05:AA:0B:23:33:56:AC:B0:A7:43:FA:BB:92 Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0572 Signing time: Wed 20 Aug 2025 23:24:52 +0000 Manifest this update: Wed 20 Aug 2025 23:24:52 +0000 Manifest next update: Wed 27 Aug 2025 23:24:52 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: gndqS4pqV9hhKju9+Nk4Ji2tZYyY5xvHkdIzDXIJZnI=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: CdrfPMZy52he8bpwd/sQIj17yAvkU7L0EqcCRVjCrHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: Aug 20 23:24:52 2025 GMT Not After : Aug 27 23:24:52 2025 GMT Subject: CN=68a65944-29d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:b2:dd:5f:a1:37:c4:e0:48:c9:dc:01:54: 8f:03:77:61:60:09:13:db:39:59:85:4e:23:87:73: 1a:4a:ae:c0:44:aa:4d:e4:80:83:c8:4e:24:5a:24: 81:23:8e:08:c9:5e:42:0c:0e:12:6f:f1:a5:4e:86: d0:41:f6:fd:c3:15:31:c7:f7:6a:46:70:f0:19:cf: 1b:06:a3:00:cc:c4:68:bb:76:8c:96:92:8c:1b:d7: 84:93:59:89:71:37:68:64:b9:df:c4:5e:ce:0e:61: 79:86:97:5a:be:79:6b:40:a5:50:0a:d9:a8:dd:66: fd:be:aa:48:8c:29:5e:e0:3d:f0:46:0c:a1:b9:14: 80:0d:ed:e2:ad:8a:ae:5e:32:e6:92:aa:78:24:33: 6a:71:91:2b:34:45:3f:97:bb:71:b1:71:9b:fd:cd: e7:48:21:c9:2f:73:72:f9:c9:74:0c:e6:31:00:e8: 05:2f:fd:a8:9d:ca:f3:a9:c5:76:06:ea:fd:e3:a2: e1:77:9e:aa:9f:a7:2d:b3:18:50:1f:ba:5e:f2:b9: 42:90:ae:bc:1c:dc:02:fb:cd:62:46:70:fe:47:24: 4a:e0:e1:af:21:81:7a:4c:fb:54:27:27:02:ff:65: f5:1e:67:c7:4b:a0:ec:61:3d:09:11:42:39:05:07: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:52:DD:EA:C8:67:86:05:AA:0B:23:33:56:AC:B0:A7:43:FA:BB:92 X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9a:0f:24:6f:b7:64:58:f5:fc:ff:e3:23:b7:64:38:5e:02: 86:bf:4e:f4:c5:14:bb:99:fa:0a:ef:7d:76:46:84:b3:a0:17: ba:ec:04:1d:61:2f:23:36:ca:bd:68:c9:45:2c:de:e7:8d:2d: 2f:67:9d:5e:23:78:59:78:65:db:f2:f6:06:2e:37:a6:29:58: 6e:c3:5c:f7:d0:fe:de:9c:a9:8d:a8:ad:95:f7:8f:5b:c5:94: 0a:23:9b:b5:44:54:96:c9:07:76:e3:11:18:5c:1c:7f:dc:a7: 52:75:76:f2:87:cd:77:ea:b7:f5:fd:29:ac:0c:63:67:b5:78: 75:1c:e0:37:eb:26:cd:32:4e:2c:8b:12:6a:44:e6:8b:64:52: 07:d0:6e:79:56:28:7c:ee:29:76:cb:ea:e5:81:bb:42:db:49: 81:a0:c7:71:73:c5:e6:39:d7:87:2c:25:94:3b:73:b5:36:c7: 00:3e:35:37:43:04:5d:c5:09:80:9c:af:92:e4:f1:87:88:a2: f0:af:f1:0b:4c:fa:79:b4:b8:72:ba:95:8a:e4:dd:7c:d6:fc: 47:70:1a:b1:c9:4c:a0:49:c9:1e:8b:99:c8:c2:48:4e:e4:6c: f7:fa:a7:2c:0a:4d:5f:91:d8:61:65:16:49:d2:cf:6b:ba:59: 04:d8:b4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUwODIwMjMyNDUyWhcNMjUwODI3MjMyNDUyWjAYMRYwFAYD VQQDEw02OGE2NTk0NC0yOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsWy3V+hN8TgSMncAVSPA3dhYAkT2zlZhU4jh3MaSq7ARKpN5ICDyE4kWiSB I44IyV5CDA4Sb/GlTobQQfb9wxUxx/dqRnDwGc8bBqMAzMRou3aMlpKMG9eEk1mJ cTdoZLnfxF7ODmF5hpdavnlrQKVQCtmo3Wb9vqpIjCle4D3wRgyhuRSADe3irYqu XjLmkqp4JDNqcZErNEU/l7txsXGb/c3nSCHJL3Ny+cl0DOYxAOgFL/2oncrzqcV2 Bur946Lhd56qn6ctsxhQH7pe8rlCkK68HNwC+81iRnD+RyRK4OGvIYF6TPtUJycC /2X1HmfHS6DsYT0JEUI5BQd9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtS3erI Z4YFqgsjM1assKdD+ruSMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATmg8kb7dkWPX8/+Mjt2Q4XgKGv070xRS7mfoK7312RoSzoBe67AQd YS8jNsq9aMlFLN7njS0vZ51eI3hZeGXb8vYGLjemKVhuw1z30P7enKmNqK2V949b xZQKI5u1RFSWyQd24xEYXBx/3KdSdXbyh8136rf1/SmsDGNntXh1HOA36ybNMk4s ixJqROaLZFIH0G55Vih87il2y+rlgbtC20mBoMdxc8XmOdeHLCWUO3O1NscAPjU3 QwRdxQmAnK+S5PGHiKLwr/ELTPp5tLhyupWK5N181vxHcBqxyUygSckei5nIwkhO 5Gz3+qcsCk1fkdhhZRZJ0s9rulkE2LQ9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:43 2025 by rpki-client