$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: gK37fn8t+BIKftorly5/ouA2BPXFdbtZPxCXumBhTog= Subject key identifier: 26:A0:FE:82:9A:66:0C:60:92:18:1C:EA:F0:1A:15:E1:EC:47:E4:FF Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 0587 Signing time: Sat 14 Jun 2025 22:59:14 +0000 Manifest this update: Sat 14 Jun 2025 22:59:13 +0000 Manifest next update: Sat 21 Jun 2025 22:59:13 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: u5bD8hULqHXqVsnqSH4hK9PI2x0115viSVZqEqIeU30=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Jun 14 22:59:13 2025 GMT Not After : Jun 21 22:59:13 2025 GMT Subject: CN=684dfec2-a45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:e2:99:84:05:c2:e6:0e:93:85:66:b0:29: 0e:4a:1d:6a:29:0d:4a:fa:e6:4a:24:8e:40:35:1e: 16:da:68:9c:36:56:bd:9d:f1:fa:0c:ee:b8:e3:21: 6a:45:89:87:9c:39:d6:fd:c7:aa:d0:bc:bc:0e:45: ed:93:8b:0f:45:86:88:f8:9a:3d:33:ec:ab:87:e7: 58:12:cb:94:c0:7b:85:ae:6c:a4:12:20:25:d0:c7: 51:7f:71:43:6c:78:5a:e4:6f:54:13:68:f5:69:ba: 97:86:ce:6d:8e:fb:76:b5:3e:75:d3:4f:d4:b2:8b: cf:41:74:34:fc:43:b4:de:74:a9:3d:0f:5c:93:ec: 6a:a1:3c:9f:d3:82:14:94:0d:71:52:50:39:ed:bb: 14:2a:cb:5c:fe:5e:f7:5a:c7:99:2c:80:ff:e7:d0: e5:db:63:84:61:b3:17:54:b3:01:72:8b:42:b1:97: 4d:21:9a:46:a9:e9:52:d3:a7:97:f6:6f:cc:d3:06: 8e:dd:62:b5:4c:53:2a:e3:b0:14:83:c9:0f:c1:b4: 8c:dd:01:6e:40:05:26:4a:c9:9c:69:3a:8d:59:57: a1:b5:2e:7e:5b:8c:7f:83:7f:dd:0f:77:ae:ba:67: d0:3c:98:1f:e2:68:a6:64:cd:36:65:e8:58:3b:ec: 73:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:FE:82:9A:66:0C:60:92:18:1C:EA:F0:1A:15:E1:EC:47:E4:FF X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:4a:bf:f4:58:57:b5:aa:c3:f9:93:e0:01:c0:b7:5a:37: b6:04:b0:76:fd:5a:de:5d:55:39:74:f6:eb:4f:26:44:6b:93: 84:b7:df:13:81:e2:04:56:98:fc:9f:1b:36:28:22:90:17:a6: 37:e3:be:e5:0d:f2:c8:3e:5d:25:af:7d:6b:b7:09:55:65:58: 80:ea:e9:2e:25:d2:13:ce:03:24:a7:c4:be:d4:9a:a4:03:c0: 75:10:11:da:74:99:a8:b0:52:f7:00:ef:97:d7:d3:8f:57:77: 2b:74:83:ee:24:67:a7:5b:93:24:ea:8d:78:b3:48:e3:bc:d2: 17:a5:5a:2c:81:8a:58:ab:87:a0:bd:56:ba:78:b6:3c:8b:1d: b9:9e:8f:c0:60:a0:cb:ba:a6:62:d4:fb:26:4d:63:b2:2e:9d: 74:24:bc:5d:5e:65:99:d0:ff:ac:92:63:7a:b0:03:da:e3:93: 40:99:b9:9b:36:a5:4f:61:03:fe:f7:c4:81:a8:b0:39:f4:04: 77:88:f5:30:77:fd:c8:36:e9:04:ad:cc:74:50:2f:9f:b0:35: 15:77:e9:45:61:bb:90:49:d4:a5:e0:3b:48:1a:38:2b:75:11: ce:c3:80:81:fd:4f:58:b2:33:0a:76:4b:ad:11:4b:ac:80:ee: ca:58:e3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwNjE0MjI1OTEzWhcNMjUwNjIxMjI1OTEzWjAYMRYwFAYD VQQDEw02ODRkZmVjMi1hNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0fimYQFwuYOk4VmsCkOSh1qKQ1K+uZKJI5ANR4W2micNla9nfH6DO644yFq RYmHnDnW/ceq0Ly8DkXtk4sPRYaI+Jo9M+yrh+dYEsuUwHuFrmykEiAl0MdRf3FD bHha5G9UE2j1abqXhs5tjvt2tT5100/UsovPQXQ0/EO03nSpPQ9ck+xqoTyf04IU lA1xUlA57bsUKstc/l73WseZLID/59Dl22OEYbMXVLMBcotCsZdNIZpGqelS06eX 9m/M0waO3WK1TFMq47AUg8kPwbSM3QFuQAUmSsmcaTqNWVehtS5+W4x/g3/dD3eu umfQPJgf4mimZM02ZehYO+xzvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCag/oKa Zgxgkhgc6vAaFeHsR+T/MB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGkq/9FhXtarD+ZPgAcC3Wje2BLB2/VreXVU5dPbrTyZEa5OEt98T geIEVpj8nxs2KCKQF6Y3477lDfLIPl0lr31rtwlVZViA6ukuJdITzgMkp8S+1Jqk A8B1EBHadJmosFL3AO+X19OPV3crdIPuJGenW5Mk6o14s0jjvNIXpVosgYpYq4eg vVa6eLY8ix25no/AYKDLuqZi1PsmTWOyLp10JLxdXmWZ0P+skmN6sAPa45NAmbmb NqVPYQP+98SBqLA59AR3iPUwd/3INukErcx0UC+fsDUVd+lFYbuQSdSl4DtIGjgr dRHOw4CB/U9YsjMKdkutEUusgO7KWOOv -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:18 2025 by rpki-client