$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: phxEfytM1KW9C3lZXG6yvrcUYjdSJ50FeurxCrEJ+BE= Subject key identifier: C8:5B:27:4D:86:86:B4:EF:55:32:69:41:78:95:CF:44:7B:41:89:72 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 05A6 Signing time: Sun 10 Aug 2025 23:15:29 +0000 Manifest this update: Sun 10 Aug 2025 23:15:28 +0000 Manifest next update: Sun 17 Aug 2025 23:15:28 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: k/1Z/+8pWFKHvaoBGd/eCOsoDb3LYBETbcrZh6nME7U=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Aug 10 23:15:28 2025 GMT Not After : Aug 17 23:15:28 2025 GMT Subject: CN=68992811-4ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:97:63:91:af:e3:ee:83:58:72:40:7b:65: f1:4c:88:7c:33:b5:91:8e:b9:8d:33:90:77:11:1d: 31:c6:b9:f0:83:e4:8f:7a:da:a4:91:0e:46:a6:20: 5c:0c:6f:2e:ef:c6:4b:c0:5d:17:63:bd:0c:65:40: a7:c1:34:68:19:c3:68:4a:1c:0a:54:02:f7:62:8b: 65:d9:f8:02:66:f1:36:0f:a7:59:30:3a:ea:2e:f8: 7a:20:a9:b2:ed:59:0a:7e:78:0e:f7:02:47:45:76: 0b:19:7f:bd:d2:07:d9:a7:db:29:b1:de:1e:fb:96: 6b:bf:a7:e5:79:b8:11:ae:b4:26:bb:82:18:bf:e0: 3a:69:f3:83:4a:fd:b3:fd:cd:03:d7:ef:16:32:d9: 9a:c3:84:ed:83:0f:10:d0:90:a2:4c:3e:f3:91:0f: 65:b1:40:e2:c1:0e:75:fd:d0:17:12:5a:51:17:86: 4b:4d:ab:e9:4a:d1:b6:d6:2b:81:76:ae:e8:7b:b9: 60:86:f4:be:83:c7:6e:2b:09:3e:17:9e:ac:4d:07: be:12:76:39:aa:e8:fb:c4:d0:ee:7c:ae:8a:9c:cd: d7:52:42:0a:96:c7:ee:68:f6:f3:d3:dd:8a:40:45: 68:a6:0f:9c:6f:d3:b0:b1:e9:8c:68:fd:8a:37:b6: 0e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5B:27:4D:86:86:B4:EF:55:32:69:41:78:95:CF:44:7B:41:89:72 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:71:58:50:9b:bb:81:d1:91:5e:59:6d:f3:88:49:5f:00: 2c:83:7b:b3:2c:5c:8c:87:54:e6:18:cc:3a:3d:0e:fa:0d:28: 92:29:e8:0f:a9:04:32:e9:85:9f:f7:a6:8f:40:cc:e1:32:a8: 33:a9:25:3e:19:96:82:4c:16:44:cc:0d:f7:c6:5e:30:31:f0: 0f:a6:4a:9d:b9:fe:ec:c9:a6:6e:43:0a:1f:6c:14:27:72:d8: 9b:e5:59:9a:09:4a:01:2f:df:9a:83:38:23:34:2d:a3:f0:0f: 26:a2:08:04:8f:db:af:76:8e:18:c6:59:2e:eb:ff:e3:94:43: 08:57:0e:a6:00:16:b6:a5:b6:85:c2:bb:5f:05:33:2c:c4:1f: 3c:aa:f9:2d:8f:03:43:32:49:df:72:57:61:d5:8b:4d:e7:93: cc:c1:86:6c:02:05:cc:b3:68:8f:e2:b8:b8:8d:9f:0b:3f:cc: b8:1b:4f:03:13:d8:c3:51:80:bf:05:e2:83:17:21:73:0a:3f: ac:dd:50:9e:c6:f8:22:e5:0a:6a:59:fb:ad:9c:9a:85:88:08: 1d:ce:a1:b1:d2:37:c4:fb:44:ac:3b:a9:1e:8c:2e:73:04:c4: 18:db:d9:aa:31:48:35:7e:39:29:31:ef:b1:a4:3d:22:93:6a: cc:3e:65:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwODEwMjMxNTI4WhcNMjUwODE3MjMxNTI4WjAYMRYwFAYD VQQDEw02ODk5MjgxMS00YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSqXY5Gv4+6DWHJAe2XxTIh8M7WRjrmNM5B3ER0xxrnwg+SPetqkkQ5GpiBc DG8u78ZLwF0XY70MZUCnwTRoGcNoShwKVAL3Yotl2fgCZvE2D6dZMDrqLvh6IKmy 7VkKfngO9wJHRXYLGX+90gfZp9spsd4e+5Zrv6flebgRrrQmu4IYv+A6afODSv2z /c0D1+8WMtmaw4Ttgw8Q0JCiTD7zkQ9lsUDiwQ51/dAXElpRF4ZLTavpStG21iuB dq7oe7lghvS+g8duKwk+F56sTQe+EnY5quj7xNDufK6KnM3XUkIKlsfuaPbz092K QEVopg+cb9OwsemMaP2KN7YOtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhbJ02G hrTvVTJpQXiVz0R7QYlyMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA0nFYUJu7gdGRXllt84hJXwAsg3uzLFyMh1TmGMw6PQ76DSiSKegP qQQy6YWf96aPQMzhMqgzqSU+GZaCTBZEzA33xl4wMfAPpkqduf7syaZuQwofbBQn ctib5VmaCUoBL9+agzgjNC2j8A8moggEj9uvdo4Yxlku6//jlEMIVw6mABa2pbaF wrtfBTMsxB88qvktjwNDMknfcldh1YtN55PMwYZsAgXMs2iP4ri4jZ8LP8y4G08D E9jDUYC/BeKDFyFzCj+s3VCexvgi5QpqWfutnJqFiAgdzqGx0jfE+0SsO6kejC5z BMQY29mqMUg1fjkpMe+xpD0ik2rMPmUc -----END CERTIFICATE-----Generated at Wed Aug 13 00:30:03 2025 by rpki-client