$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: AkpglLE1kug2TzjG9TYehBBgST3tmz9oyJOmUqL41b4= Subject key identifier: 8D:E1:18:D5:BA:25:BD:5F:E9:3B:64:0F:59:40:DD:FB:C4:D8:14:46 Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 3481 Signing time: Sat 31 May 2025 15:00:40 +0000 Manifest this update: Sat 31 May 2025 15:00:40 +0000 Manifest next update: Sat 07 Jun 2025 15:00:40 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: ZGCM0tRCX7/vzeOAAgX20Rhl4o2pf7uk9nR3AlV0UB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: May 31 15:00:40 2025 GMT Not After : Jun 7 15:00:40 2025 GMT Subject: CN=683b1998-b518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:28:ae:e7:16:d2:a7:1b:10:69:3e:c4:dd:73: 59:c3:1a:69:f5:d3:8b:8e:a8:42:2d:fb:10:b0:ba: 03:d7:49:eb:b3:24:93:58:3f:6d:17:7a:25:8b:63: 2c:28:4a:7f:d1:48:a1:84:56:09:d4:38:c0:aa:7a: 93:4d:ba:71:c4:c9:37:2d:a5:c7:5d:86:5b:03:b2: bf:7a:f3:37:e9:47:c4:b7:fd:f6:fe:64:f5:0e:81: ed:f1:ad:58:df:1b:bd:e5:f2:0b:c6:8f:c7:ed:90: 90:ec:55:b1:a0:13:06:d5:1d:d6:7f:d8:e6:38:3d: 5e:84:a2:8a:73:6c:6a:89:b5:54:86:d0:27:3d:37: f4:fe:b8:3f:80:24:1c:ab:71:1f:11:f1:cf:ba:18: 16:e1:de:9b:b9:e3:6f:c0:a1:cc:8d:51:dd:8c:2b: 57:ce:9c:8e:ed:f1:98:67:e8:81:1f:7c:af:b6:e2: f9:d3:bd:20:e2:57:b0:20:e4:01:95:c6:7f:c7:71: 10:36:14:37:e2:df:28:a9:68:18:3d:19:e9:9a:e9: 75:7b:05:02:96:d6:32:87:52:5b:92:cc:69:7f:9e: 6e:86:8f:f9:72:61:5a:1a:1d:77:f8:dc:67:eb:24: d5:58:26:07:f5:a5:ff:5d:73:c9:f4:2e:9f:0a:42: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E1:18:D5:BA:25:BD:5F:E9:3B:64:0F:59:40:DD:FB:C4:D8:14:46 X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ed:4b:55:84:1e:a6:a9:95:2a:09:e3:0b:74:20:02:6c:23: 51:e3:91:97:ba:ea:ed:ac:6e:f8:65:50:5d:77:04:80:c5:4f: 3c:cf:49:37:8a:e7:1a:a5:f3:47:34:22:eb:a5:82:f8:19:bc: fc:ee:ef:60:9a:a8:1f:84:ce:d4:fb:ed:7a:a9:10:52:ff:30: c3:21:e2:cd:c6:47:e7:50:5d:bf:6d:1b:86:0f:2d:cd:3e:a7: cf:3c:a8:19:44:42:ba:6c:e4:46:df:8e:d2:b0:3a:39:f4:94: ee:5e:04:e6:35:d7:c3:11:a9:24:02:d5:f6:d3:3f:89:bc:fa: 50:98:69:46:e9:6a:6c:57:9d:d1:07:b4:43:dd:78:75:5f:5b: b6:50:2e:3c:25:b9:db:ec:df:ea:07:8f:4e:cc:0a:79:e3:ae: 2b:bf:9d:bc:ac:eb:6b:09:0d:d3:e2:a0:9f:06:bf:60:df:f0: b6:f2:69:43:e0:f0:83:97:9b:44:94:4a:3c:6c:88:1d:af:47: fd:5b:26:08:d8:9b:82:d9:ae:d8:da:6d:a2:bb:1a:90:33:01: ab:2e:e0:77:9b:f4:23:26:cb:4d:b1:2d:f7:1c:fe:4e:0f:a9: 77:d1:8c:6e:ea:6a:4c:8e:3c:e2:c1:f9:f5:46:d1:e7:b3:7e: 70:cd:ab:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUwNTMxMTUwMDQwWhcNMjUwNjA3MTUwMDQwWjAYMRYwFAYD VQQDEw02ODNiMTk5OC1iNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yiu5xbSpxsQaT7E3XNZwxpp9dOLjqhCLfsQsLoD10nrsySTWD9tF3oli2Ms KEp/0UihhFYJ1DjAqnqTTbpxxMk3LaXHXYZbA7K/evM36UfEt/32/mT1DoHt8a1Y 3xu95fILxo/H7ZCQ7FWxoBMG1R3Wf9jmOD1ehKKKc2xqibVUhtAnPTf0/rg/gCQc q3EfEfHPuhgW4d6bueNvwKHMjVHdjCtXzpyO7fGYZ+iBH3yvtuL5070g4lewIOQB lcZ/x3EQNhQ34t8oqWgYPRnpmul1ewUCltYyh1Jbksxpf55uho/5cmFaGh13+Nxn 6yTVWCYH9aX/XXPJ9C6fCkKl9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3hGNW6 Jb1f6TtkD1lA3fvE2BRGMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC07UtVhB6mqZUqCeMLdCACbCNR45GXuurtrG74ZVBddwSAxU88z0k3 iucapfNHNCLrpYL4Gbz87u9gmqgfhM7U++16qRBS/zDDIeLNxkfnUF2/bRuGDy3N PqfPPKgZREK6bORG347SsDo59JTuXgTmNdfDEakkAtX20z+JvPpQmGlG6WpsV53R B7RD3Xh1X1u2UC48Jbnb7N/qB49OzAp5464rv528rOtrCQ3T4qCfBr9g3/C28mlD 4PCDl5tElEo8bIgdr0f9WyYI2JuC2a7Y2m2iuxqQMwGrLuB3m/QjJstNsS33HP5O D6l30Yxu6mpMjjziwfn1RtHns35wzasK -----END CERTIFICATE-----Generated at Sat May 31 17:32:51 2025 by rpki-client