$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: xtpj42HJbXhJeqXcqPGGdIMnScYCicyXNXBe8x/6qUc= Subject key identifier: B0:2E:12:CA:14:90:00:28:53:8F:CE:58:7D:5B:D7:BD:F2:25:F5:6A Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 34AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 34AA Signing time: Wed 20 Aug 2025 15:00:57 +0000 Manifest this update: Wed 20 Aug 2025 15:00:56 +0000 Manifest next update: Wed 27 Aug 2025 15:00:56 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: XsTvPrXLiJtTSDT/Vibsu0O/rDdeM1SJiSWR4pu47Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13482 (0x34aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Aug 20 15:00:56 2025 GMT Not After : Aug 27 15:00:56 2025 GMT Subject: CN=68a5e328-b07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:a2:04:3a:3b:0c:58:b3:2a:f9:7b:53:d8: 1b:50:57:09:99:46:1b:cf:81:23:e5:ab:4b:53:20: d6:c4:84:3d:7b:cd:c1:4a:5b:22:3e:b6:8d:3c:03: d8:51:5f:7c:65:a1:1f:28:9c:87:59:b7:fd:a0:39: 90:fd:50:66:55:5d:29:f3:bc:0c:f3:5b:7f:d4:57: 95:a3:4e:6b:02:99:f8:2f:63:76:f8:29:9e:5e:37: 2d:a8:90:bc:52:1b:2f:d0:70:73:86:06:1f:ea:42: 45:95:e2:7b:fa:57:ac:b5:9f:69:dd:ad:4c:ec:db: d5:10:16:66:ca:22:63:bd:b6:59:4b:cc:a4:1c:79: f9:bf:6a:50:b0:5a:0e:b2:9c:bd:a6:61:fe:b9:d7: 0c:56:fe:e1:dc:b8:03:6e:30:cb:d9:36:18:e1:10: 9d:c9:2e:0c:c0:3b:18:8f:61:a9:87:96:2d:46:0f: 80:17:e2:bc:7f:9f:2a:b6:eb:df:6c:73:bb:52:95: 44:08:ff:70:ee:f8:99:4f:4b:ea:58:cb:2c:5f:a9: 4d:92:e8:2d:c9:d3:2d:b2:60:0b:10:a7:8b:d5:2e: 21:de:2a:7f:14:11:eb:c1:12:6f:bf:c0:12:d2:1c: d9:62:8c:1b:d1:32:0b:8c:53:5c:93:e7:11:1c:00: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2E:12:CA:14:90:00:28:53:8F:CE:58:7D:5B:D7:BD:F2:25:F5:6A X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:9a:85:f5:e7:13:59:be:f0:d2:cf:af:78:a1:21:a5:fb:dd: 36:95:55:c5:b7:b5:16:f3:6e:62:78:45:35:33:cc:d4:14:53: df:a8:01:61:72:87:3e:0f:ac:db:34:81:b1:05:ad:f2:92:50: 93:d1:33:ff:59:88:9a:66:2f:04:ac:ce:8d:c1:0e:c8:49:f4: b8:63:f5:a7:d8:8c:d9:55:f2:bc:ea:3d:8c:63:a9:95:f6:b1: 24:96:b2:38:55:88:1b:bc:2d:52:b2:59:a5:77:ca:36:3f:2f: c0:ec:bc:e3:24:0c:56:6a:48:15:bf:b1:54:39:27:2d:d4:88: 18:cd:45:05:1b:eb:de:d2:57:59:26:87:77:89:94:83:7c:f8: 5b:b3:e8:24:10:a8:37:1e:33:5a:42:a2:48:5b:8e:8a:c4:13: e1:4b:52:4b:b7:a4:53:ce:64:15:0c:9c:84:8b:6b:ec:7d:3c: 59:ec:82:6e:e1:f4:97:5a:fe:f8:4c:60:7c:33:22:08:3c:00: 73:6e:a1:20:0a:8b:f0:e3:b6:fb:20:59:82:27:cc:53:63:38: 83:18:5e:0c:7d:c6:5f:64:d0:2e:b6:a6:92:45:cf:9c:0c:5e: 8a:a2:3e:f8:34:60:bc:6d:2f:e8:cf:67:f2:af:8f:bb:5e:9d: 83:de:76:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUwODIwMTUwMDU2WhcNMjUwODI3MTUwMDU2WjAYMRYwFAYD VQQDEw02OGE1ZTMyOC1iMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03iiBDo7DFizKvl7U9gbUFcJmUYbz4Ej5atLUyDWxIQ9e83BSlsiPraNPAPY UV98ZaEfKJyHWbf9oDmQ/VBmVV0p87wM81t/1FeVo05rApn4L2N2+CmeXjctqJC8 Uhsv0HBzhgYf6kJFleJ7+lestZ9p3a1M7NvVEBZmyiJjvbZZS8ykHHn5v2pQsFoO spy9pmH+udcMVv7h3LgDbjDL2TYY4RCdyS4MwDsYj2Gph5YtRg+AF+K8f58qtuvf bHO7UpVECP9w7viZT0vqWMssX6lNkugtydMtsmALEKeL1S4h3ip/FBHrwRJvv8AS 0hzZYowb0TILjFNck+cRHACfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAuEsoU kAAoU4/OWH1b173yJfVqMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARmoX15xNZvvDSz694oSGl+902lVXFt7UW825ieEU1M8zUFFPfqAFh coc+D6zbNIGxBa3yklCT0TP/WYiaZi8ErM6NwQ7ISfS4Y/Wn2IzZVfK86j2MY6mV 9rEklrI4VYgbvC1Sslmld8o2Py/A7LzjJAxWakgVv7FUOSct1IgYzUUFG+ve0ldZ Jod3iZSDfPhbs+gkEKg3HjNaQqJIW46KxBPhS1JLt6RTzmQVDJyEi2vsfTxZ7IJu 4fSXWv74TGB8MyIIPABzbqEgCovw47b7IFmCJ8xTYziDGF4MfcZfZNAutqaSRc+c DF6Koj74NGC8bS/oz2fyr4+7Xp2D3nZX -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:14 2025 by rpki-client