$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: gXGsHF4zQhvwmpobxcak/pnqrT7PNrqhr1RiZP4Z0as= Subject key identifier: 0B:30:75:AF:19:03:6E:4A:76:CF:61:EB:05:64:59:74:EF:69:19:7A Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 3488 Signing time: Sat 14 Jun 2025 14:59:49 +0000 Manifest this update: Sat 14 Jun 2025 14:59:48 +0000 Manifest next update: Sat 21 Jun 2025 14:59:48 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: XH3BEvuI6IDf29JVGo7vdzKwyCB4CXmMgVfwLKfYI8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A, serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: Jun 14 14:59:48 2025 GMT Not After : Jun 21 14:59:48 2025 GMT Subject: CN=684d8e64-f7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5b:0f:68:cd:fd:de:db:fd:b2:7c:0d:d4:e1: 96:b3:2f:5a:dd:ec:1f:97:0f:a9:b9:7b:98:a0:b8: 1f:e1:84:90:80:c1:70:41:2b:df:ae:52:d5:07:3a: d7:8b:0d:bf:ce:8f:4e:d7:28:2c:c9:50:fd:cf:b6: 81:c0:f4:1a:05:08:f1:a4:d8:4f:55:2d:d3:06:05: b5:79:0b:3e:90:66:ac:23:7e:4e:82:ba:d4:2a:27: bb:de:15:82:14:d0:c8:19:3a:19:81:43:b3:64:8d: 34:7c:d5:2a:a6:14:e4:3e:b2:44:4b:e3:0d:0d:04: cc:81:e0:41:d0:2a:6c:a5:7d:b4:14:a2:1e:38:a8: 65:14:f1:f5:e5:72:89:a4:d8:58:fe:cc:e6:60:bb: e3:97:5f:5f:13:80:08:91:c4:46:0e:77:b9:1d:75: 0b:41:d5:c8:be:7e:7d:cd:61:81:87:fb:2e:8e:e5: 62:b9:f9:c3:88:fd:ab:bc:20:e2:51:c8:7b:32:d5: 33:1d:3c:bb:de:24:62:ad:50:bf:d5:f7:b2:80:ff: 25:db:d4:b6:79:72:e7:81:27:ea:a8:96:3b:5f:90: 91:8a:61:a5:47:e0:4e:8f:49:6d:d6:74:e7:22:67: 5d:f5:76:15:fa:ef:36:b0:8f:4a:ff:ef:35:da:da: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:30:75:AF:19:03:6E:4A:76:CF:61:EB:05:64:59:74:EF:69:19:7A X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:46:44:a0:ea:69:37:41:ca:8b:50:13:a1:c0:88:0f:56:2f: a7:b8:1f:40:f6:de:27:6b:95:68:22:27:cb:d4:cb:6b:90:a6: 82:d8:fa:a2:36:e7:97:9d:95:bb:07:d3:b4:ce:4f:28:e0:4a: 3b:f0:c5:0d:f5:6e:23:da:2d:f3:1a:d9:67:b6:c0:4d:5e:d7: e6:c6:d2:1c:23:ed:33:da:78:55:f5:34:5f:99:0b:da:2e:d5: 41:49:ce:64:da:be:ff:a7:fb:cb:9f:25:4d:6b:cc:42:34:9e: 67:f9:39:9b:f5:e8:56:0a:d5:55:6e:85:6c:8e:92:84:98:48: cc:82:51:aa:32:19:0f:bd:cd:77:b4:3d:c5:7e:f2:a7:7f:6a: 16:2f:88:21:af:d0:b5:5b:31:65:04:95:f1:04:b1:ab:f4:98: 99:a9:f4:79:cd:bd:24:03:58:46:4f:df:80:0c:89:b8:a4:92: 88:d9:bf:d0:84:5d:33:69:93:14:fc:22:aa:70:e7:3c:a1:e4: 75:b4:29:1e:cb:cd:d6:ee:c9:22:53:4d:43:01:b0:03:24:e0: 7d:83:df:0a:35:2a:f6:0c:62:f2:a1:32:16:ad:77:e3:15:9a: 85:e9:89:36:b2:4c:a0:53:ae:50:c3:7a:f7:43:72:d7:0b:6b: 59:38:ac:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjUwNjE0MTQ1OTQ4WhcNMjUwNjIxMTQ1OTQ4WjAYMRYwFAYD VQQDEw02ODRkOGU2NC1mN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lsPaM393tv9snwN1OGWsy9a3ewflw+puXuYoLgf4YSQgMFwQSvfrlLVBzrX iw2/zo9O1ygsyVD9z7aBwPQaBQjxpNhPVS3TBgW1eQs+kGasI35OgrrUKie73hWC FNDIGToZgUOzZI00fNUqphTkPrJES+MNDQTMgeBB0CpspX20FKIeOKhlFPH15XKJ pNhY/szmYLvjl19fE4AIkcRGDne5HXULQdXIvn59zWGBh/sujuViufnDiP2rvCDi Uch7MtUzHTy73iRirVC/1feygP8l29S2eXLngSfqqJY7X5CRimGlR+BOj0lt1nTn Imdd9XYV+u82sI9K/+812toR1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAswda8Z A25Kds9h6wVkWXTvaRl6MB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQRkSg6mk3QcqLUBOhwIgPVi+nuB9A9t4na5VoIifL1MtrkKaC2Pqi NueXnZW7B9O0zk8o4Eo78MUN9W4j2i3zGtlntsBNXtfmxtIcI+0z2nhV9TRfmQva LtVBSc5k2r7/p/vLnyVNa8xCNJ5n+Tmb9ehWCtVVboVsjpKEmEjMglGqMhkPvc13 tD3FfvKnf2oWL4ghr9C1WzFlBJXxBLGr9JiZqfR5zb0kA1hGT9+ADIm4pJKI2b/Q hF0zaZMU/CKqcOc8oeR1tCkey83W7skiU01DAbADJOB9g98KNSr2DGLyoTIWrXfj FZqF6Yk2skygU65Qw3r3Q3LXC2tZOKwh -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:58 2025 by rpki-client