$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: bX5PyzvDjejmQoc09o2ZzZ2xYI5/mei2LyS/wz8+Avs= Subject key identifier: 45:F4:3A:35:CE:18:BF:CA:B8:B8:40:2E:38:26:24:3A:FB:02:72:C5 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0C8D Signing time: Fri 30 May 2025 18:29:29 +0000 Manifest this update: Fri 30 May 2025 18:29:29 +0000 Manifest next update: Fri 06 Jun 2025 18:29:29 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: qiu8sx+4bm79CWFDonq2X7+VFhaLIKbIq7InnYuzhPo=) 2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: DUbgXXzqpapSxP1SYmetX0pcnJaOWrBmkI9YsNCICSA=) 3: 6C061360105911F08BC6692CC4F9AE02.roa (hash: fxnKQH+hbVYix2vpYNlA4ryJmehEVWmxPALPrY6fkNI=) 4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: May 30 18:29:29 2025 GMT Not After : Jun 6 18:29:29 2025 GMT Subject: CN=6839f909-569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:60:6d:89:a5:e1:de:35:47:e8:a5:2d:95: 3d:54:e6:18:5f:c3:72:39:8e:48:b8:27:07:1a:7a: df:3f:8a:ce:7d:3e:58:12:e7:a8:97:a6:57:67:ca: 0b:d2:bb:61:58:83:87:40:1a:32:84:a5:26:c6:53: 17:b7:96:7f:71:e9:c2:10:47:6f:ce:83:df:e3:7c: 35:bf:15:61:49:b1:07:aa:82:b6:1d:94:6e:67:54: 4e:47:08:05:ca:28:10:a7:c3:0f:ad:88:95:70:b8: 92:41:60:6d:4f:a1:08:80:e5:5f:62:21:fe:7d:5e: 95:ce:e3:05:14:37:15:4d:b1:ba:35:64:61:6e:f5: d4:99:fd:7e:54:fd:fe:b1:7e:4b:8b:52:35:2b:7b: ed:bb:69:28:80:28:37:e7:19:9c:1d:49:a1:51:86: cb:e6:28:ba:04:75:16:0b:e7:81:bf:fb:ef:1f:aa: d9:77:8c:a0:11:ec:2a:1c:c3:23:9b:ab:f8:6b:02: 4f:59:e4:4b:7d:1d:c4:f6:7d:3b:11:b5:9c:cd:53: 34:dd:e2:0a:72:76:32:c4:7b:bf:d4:85:7d:d1:c0: 57:3e:ea:7c:00:19:cc:d2:90:be:d5:99:06:fe:67: 99:79:43:95:86:95:7f:2d:fa:48:99:2b:1c:5f:bc: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F4:3A:35:CE:18:BF:CA:B8:B8:40:2E:38:26:24:3A:FB:02:72:C5 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:57:f3:6c:ad:0e:b2:ac:a4:dd:ee:c8:3d:12:79:7e:88:80: f6:13:90:55:c3:28:0e:01:1f:1c:3e:a9:03:25:8d:20:60:5e: 1f:15:64:11:ef:ad:61:30:a4:32:2d:ca:44:0c:21:bc:99:77: 88:69:8e:fe:4f:12:81:a9:09:82:bc:85:ed:ba:23:11:26:15: c2:32:7c:08:df:02:c8:97:40:eb:18:43:b9:f6:ce:cb:4a:86: 2c:f3:ca:b1:28:36:65:9d:c5:aa:d9:e7:f0:15:04:e5:9f:45: 7c:0a:73:99:c0:f2:22:9c:15:15:39:1a:02:a2:45:ab:b3:92: 31:90:f6:98:1e:07:d1:a0:ed:02:06:d8:d0:d8:96:2f:bd:69: 77:27:c3:50:d6:df:a2:99:1c:bf:89:e3:b8:a9:8c:a1:fe:09: d3:0a:7a:85:4e:b4:58:05:bf:b7:e1:ba:60:31:c2:56:de:ba: a6:0f:4a:3b:4b:ee:6a:db:f2:89:0e:d8:00:21:b7:2b:d3:e4: 89:cd:0b:b3:90:14:c0:d9:85:bf:0a:79:8b:97:14:1c:c3:8b: e3:96:53:7f:dd:82:6f:ff:95:06:51:cd:14:86:5f:9b:d3:00: 33:dd:5f:f1:6e:3e:94:49:c0:5f:a4:41:51:a8:c8:ba:97:b3: 6e:e2:13:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUwNTMwMTgyOTI5WhcNMjUwNjA2MTgyOTI5WjAYMRYwFAYD VQQDEw02ODM5ZjkwOS01NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkb5gbYml4d41R+ilLZU9VOYYX8NyOY5IuCcHGnrfP4rOfT5YEueol6ZXZ8oL 0rthWIOHQBoyhKUmxlMXt5Z/cenCEEdvzoPf43w1vxVhSbEHqoK2HZRuZ1RORwgF yigQp8MPrYiVcLiSQWBtT6EIgOVfYiH+fV6VzuMFFDcVTbG6NWRhbvXUmf1+VP3+ sX5Li1I1K3vtu2kogCg35xmcHUmhUYbL5ii6BHUWC+eBv/vvH6rZd4ygEewqHMMj m6v4awJPWeRLfR3E9n07EbWczVM03eIKcnYyxHu/1IV90cBXPup8ABnM0pC+1ZkG /meZeUOVhpV/LfpImSscX7zapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEX0OjXO GL/KuLhALjgmJDr7AnLFMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbV/NsrQ6yrKTd7sg9Enl+iID2E5BVwygOAR8cPqkDJY0gYF4fFWQR 761hMKQyLcpEDCG8mXeIaY7+TxKBqQmCvIXtuiMRJhXCMnwI3wLIl0DrGEO59s7L SoYs88qxKDZlncWq2efwFQTln0V8CnOZwPIinBUVORoCokWrs5IxkPaYHgfRoO0C BtjQ2JYvvWl3J8NQ1t+imRy/ieO4qYyh/gnTCnqFTrRYBb+34bpgMcJW3rqmD0o7 S+5q2/KJDtgAIbcr0+SJzQuzkBTA2YW/CnmLlxQcw4vjllN/3YJv/5UGUc0Uhl+b 0wAz3V/xbj6UScBfpEFRqMi6l7Nu4hMa -----END CERTIFICATE-----Generated at Sat May 31 17:58:41 2025 by rpki-client