$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: Zhu7sPC1PZHkv2xsTziJDZAKp0MOf3RFq5Tts4k8T6E= Subject key identifier: 20:7E:15:CF:99:BA:F7:A8:6A:B6:6D:4D:11:6A:9D:46:C5:01:89:66 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0CC5 Signing time: Wed 10 Sep 2025 18:23:28 +0000 Manifest this update: Wed 10 Sep 2025 18:23:27 +0000 Manifest next update: Wed 17 Sep 2025 18:23:27 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: IrIyFaJyUHJ1T2FIexykwy3hz4FqpNtROEC2ZKLgPLY=) 2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: TNeim+c/SqFpRd1l3QdyFDanyKYRvKOEj0vZ8enHI5M=) 3: 27B9D8CE5A4911F096BE7C32C4F9AE02.roa (hash: nXEceLRdjptD3hMuu1Rrn7X5bxhPTnP5MRplqc2Qdl4=) 4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Sep 10 18:23:27 2025 GMT Not After : Sep 17 18:23:27 2025 GMT Subject: CN=68c1c220-92f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:3d:9e:a3:d0:bb:8b:7e:84:ce:90:03:ae: 45:bb:14:9c:2b:84:e4:26:c4:f2:65:8a:25:60:ab: ba:80:4d:5d:03:c5:52:b7:a6:60:4d:11:f9:4e:ef: c7:65:f3:3e:2c:ad:7d:38:c8:ba:46:38:c6:ff:a8: f4:f9:dc:b7:76:c1:4a:11:32:56:15:14:95:68:2d: 0e:49:aa:23:68:38:4d:f9:a0:47:a7:9d:84:00:4c: b9:a9:db:4a:db:e4:18:6d:b3:44:ad:3d:0d:43:a1: 22:1e:ef:c0:a4:4c:c9:e6:de:48:a1:a1:57:2a:42: 2f:ed:93:27:3c:11:d2:32:36:1b:bd:74:2b:26:14: e1:21:dc:77:17:65:e5:1d:76:f8:f4:21:4c:bf:2c: 3a:2f:38:d6:16:d5:af:18:70:2a:bd:5f:77:47:c5: 5e:d3:39:ad:4a:a1:bb:65:8a:05:1f:3b:bd:85:21: 4d:35:b5:dd:23:af:4a:04:50:d0:bc:ff:ff:68:68: a6:00:0c:47:2d:c3:ae:98:74:6d:e8:ae:52:1e:d1: 4c:96:0c:80:75:b9:b3:b4:9b:c1:93:05:7e:05:2b: 15:42:04:96:b3:59:7f:0e:70:7e:45:55:77:84:70: 3d:38:2f:61:a0:6b:d9:39:4c:1b:44:1d:18:c3:9b: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:15:CF:99:BA:F7:A8:6A:B6:6D:4D:11:6A:9D:46:C5:01:89:66 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c0:b0:68:91:cc:ac:45:10:62:81:8d:6e:fc:84:8e:a6:b5: a4:7b:f8:e6:ee:f5:94:25:38:3f:a7:fd:a8:84:db:92:f2:d1: 9e:31:ed:b3:f6:aa:7a:2d:c5:6b:fa:85:e5:b7:e4:ff:fa:ff: 89:ce:36:e5:ca:ed:1c:d9:89:6d:2c:04:71:01:dc:ff:64:70: 56:27:9a:3e:a0:a4:1b:37:97:44:d7:33:aa:df:3c:50:63:1f: 7b:de:64:02:84:23:b1:e6:d8:2f:78:07:30:b1:53:90:4e:01: f9:ab:78:6b:8a:07:43:e4:a8:55:61:2e:02:e9:11:86:7c:8e: 5f:0c:53:14:b9:ce:65:85:03:49:76:ef:86:e6:e6:b7:1b:5f: ad:0c:a0:e5:03:ba:7e:d2:c8:7c:20:50:d3:2d:75:ff:00:34: a7:b5:96:c1:17:b7:63:39:8e:27:4c:04:4b:e2:7f:9f:0d:2f: 63:39:aa:35:fb:e8:af:0c:b2:5d:82:a3:e3:ec:27:3f:f7:49: ea:28:22:31:48:5d:f3:14:f8:48:f2:ca:58:21:4a:94:7a:f2: a5:3d:ec:e3:60:7c:68:b8:01:c7:08:be:94:90:55:87:6f:22: 0c:55:14:15:e0:98:aa:40:c9:ae:97:5a:28:40:07:53:83:75: 94:f7:42:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUwOTEwMTgyMzI3WhcNMjUwOTE3MTgyMzI3WjAYMRYwFAYD VQQDEw02OGMxYzIyMC05MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWk9nqPQu4t+hM6QA65FuxScK4TkJsTyZYolYKu6gE1dA8VSt6ZgTRH5Tu/H ZfM+LK19OMi6RjjG/6j0+dy3dsFKETJWFRSVaC0OSaojaDhN+aBHp52EAEy5qdtK 2+QYbbNErT0NQ6EiHu/ApEzJ5t5IoaFXKkIv7ZMnPBHSMjYbvXQrJhThIdx3F2Xl HXb49CFMvyw6LzjWFtWvGHAqvV93R8Ve0zmtSqG7ZYoFHzu9hSFNNbXdI69KBFDQ vP//aGimAAxHLcOumHRt6K5SHtFMlgyAdbmztJvBkwV+BSsVQgSWs1l/DnB+RVV3 hHA9OC9hoGvZOUwbRB0Yw5twzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB+Fc+Z uveoarZtTRFqnUbFAYlmMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvwLBokcysRRBigY1u/ISOprWke/jm7vWUJTg/p/2ohNuS8tGeMe2z 9qp6LcVr+oXlt+T/+v+Jzjblyu0c2YltLARxAdz/ZHBWJ5o+oKQbN5dE1zOq3zxQ Yx973mQChCOx5tgveAcwsVOQTgH5q3hrigdD5KhVYS4C6RGGfI5fDFMUuc5lhQNJ du+G5ua3G1+tDKDlA7p+0sh8IFDTLXX/ADSntZbBF7djOY4nTARL4n+fDS9jOao1 ++ivDLJdgqPj7Cc/90nqKCIxSF3zFPhI8spYIUqUevKlPezjYHxouAHHCL6UkFWH byIMVRQV4JiqQMmul1ooQAdTg3WU90IF -----END CERTIFICATE-----Generated at Thu Sep 11 10:58:06 2025 by rpki-client