$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft File: njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json) Hash identifier: YhlvOov6sbeRHvBqLjlMuxVghu4TlpomOIebdLz0kAc= Subject key identifier: 6E:A7:26:C1:BB:B5:D0:3B:6B:3C:0D:30:17:D0:A2:51:90:00:8A:6D Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC Certificate issuer: /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft Manifest number: 0535 Signing time: Thu 24 Apr 2025 23:15:54 +0000 Manifest this update: Thu 24 Apr 2025 23:15:54 +0000 Manifest next update: Thu 01 May 2025 23:15:54 +0000 Files and hashes: 1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: mqlgiZUn2uIseE9GnoB/TSSLuvAU1Q54Dlbh0AtrGsY=) 2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: Pfjb1wm6jDOim3eSfbu3Z5HUwd0Kah9HIhgDBWP9f4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177A8, serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC Validity Not Before: Apr 24 23:15:54 2025 GMT Not After : May 1 23:15:54 2025 GMT Subject: CN=680ac62a-88d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2e:fc:b3:ee:93:85:20:64:18:4a:22:a5:1c: 96:81:5e:52:72:2f:37:53:43:8e:df:66:17:7a:47: c3:27:00:7f:0b:dc:76:54:35:c1:82:0d:8f:5b:f0: 29:ae:ce:de:00:a3:40:d8:a3:84:3f:d6:98:53:8f: df:ea:04:75:ea:ac:9f:f0:44:07:9f:23:6e:04:59: 3c:29:20:db:8b:b9:74:05:68:cc:af:91:0e:11:7b: 2f:05:9d:c8:ce:31:7b:a7:06:df:c9:7e:23:4b:af: 10:e6:6a:ad:23:29:9f:13:d6:ce:fa:fd:68:a7:f0: a4:35:16:7f:90:13:ce:77:53:20:7b:b9:a3:4b:ae: 0d:93:74:a0:45:5c:52:55:b8:af:ea:f7:25:8e:96: e9:c4:bf:1e:e5:74:10:55:8a:35:36:5e:fc:fa:16: f8:b8:4f:a1:ab:d8:df:b8:d8:a4:2b:7c:da:7e:5d: 8d:22:03:af:d3:8b:2a:b7:a9:f8:fb:b8:90:bf:9c: 67:df:a0:5f:f9:9c:01:dd:9e:32:63:6d:08:e0:c1: 86:82:88:41:68:f7:08:fc:df:04:60:73:8d:6f:b9: 77:23:43:0f:19:fd:41:35:48:d3:b5:0a:2a:5b:ae: db:48:c2:df:52:c3:7e:01:18:76:e4:18:c4:b7:e1: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A7:26:C1:BB:B5:D0:3B:6B:3C:0D:30:17:D0:A2:51:90:00:8A:6D X509v3 Authority Key Identifier: keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3d:cf:ae:83:b6:96:08:eb:7c:23:f1:b7:2d:b3:e7:f5:8b: ad:66:2c:5d:48:e6:83:eb:0a:3e:e2:37:9c:f1:34:a0:a0:98: 0e:20:a8:1a:9a:b8:0f:51:55:48:bc:b4:32:a3:d6:9c:03:10: 4e:c4:9c:e4:98:1b:e9:6d:2a:1b:47:72:c9:03:d4:e8:d6:ef: ff:97:46:a1:32:65:b1:f0:eb:10:c0:d8:09:f6:d0:9e:54:ce: 3a:50:ca:90:16:91:2d:dd:2f:3d:f4:4a:b7:b7:a0:fc:7d:b3: 32:ce:4b:48:e6:89:d1:e4:9d:17:1b:ec:8a:32:42:9a:2d:3f: db:10:25:29:9d:43:fd:f8:ba:17:62:86:d0:98:53:ea:dc:78: 1e:78:df:22:4d:cf:ba:66:fa:79:3c:df:5a:a6:42:6d:94:47: f7:33:ac:f0:66:77:80:fc:fb:8b:09:df:c2:93:2b:c4:80:b3: e4:46:0a:1c:61:fe:bf:fe:47:b6:b0:38:f8:51:7b:9f:28:17: e7:62:cd:d6:2a:c1:38:48:58:07:6d:f8:6e:3b:98:de:38:08: c2:ce:79:aa:19:28:0e:99:17:56:28:2f:a7:b3:ad:3a:d6:0b: d2:75:f9:be:a5:1d:fd:29:2b:d8:98:5e:12:d2:21:7c:77:dd: 7e:68:1b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3QTgxMTAvBgNVBAUTKDlFMzVFNTNFRUE2QjdCQzNFQzI5QUYzQjM2MjBFOUE2 NTRDMEI2QUMwHhcNMjUwNDI0MjMxNTU0WhcNMjUwNTAxMjMxNTU0WjAYMRYwFAYD VQQDEw02ODBhYzYyYS04OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4y78s+6ThSBkGEoipRyWgV5Sci83U0OO32YXekfDJwB/C9x2VDXBgg2PW/Ap rs7eAKNA2KOEP9aYU4/f6gR16qyf8EQHnyNuBFk8KSDbi7l0BWjMr5EOEXsvBZ3I zjF7pwbfyX4jS68Q5mqtIymfE9bO+v1op/CkNRZ/kBPOd1Mge7mjS64Nk3SgRVxS Vbiv6vcljpbpxL8e5XQQVYo1Nl78+hb4uE+hq9jfuNikK3zafl2NIgOv04sqt6n4 +7iQv5xn36Bf+ZwB3Z4yY20I4MGGgohBaPcI/N8EYHONb7l3I0MPGf1BNUjTtQoq W67bSMLfUsN+ARh25BjEt+EKgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6nJsG7 tdA7azwNMBfQolGQAIptMB8GA1UdIwQYMBaAFJ415T7qa3vD7CmvOzYg6aZUwLas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdBOC9CQTUyNjEzOEYx MTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4UHNLYTg3TmlEcHBsVEF0 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qWGxQdXByZThQc0thODdOaURwcGxUQXRxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzdBOC9CQTUyNjEzOEYxMTYxMUVCQjBFM0M3NERDNEY5QUUwMi9ualhsUHVwcmU4 UHNLYTg3TmlEcHBsVEF0cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Pc+ug7aWCOt8I/G3LbPn9YutZixdSOaD6wo+4jec8TSgoJgOIKga mrgPUVVIvLQyo9acAxBOxJzkmBvpbSobR3LJA9To1u//l0ahMmWx8OsQwNgJ9tCe VM46UMqQFpEt3S899Eq3t6D8fbMyzktI5onR5J0XG+yKMkKaLT/bECUpnUP9+LoX YobQmFPq3HgeeN8iTc+6Zvp5PN9apkJtlEf3M6zwZneA/PuLCd/CkyvEgLPkRgoc Yf6//ke2sDj4UXufKBfnYs3WKsE4SFgHbfhuO5jeOAjCznmqGSgOmRdWKC+ns606 1gvSdfm+pR39KSvYmF4S0iF8d91+aBt9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:53 2025 by rpki-client