$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: g3l3koHGz8Rezkp8NdfiFaX7eZ4bKyyi27NnBXri/sk= Subject key identifier: 01:A5:D9:AA:7C:01:5A:E6:10:92:1B:12:04:8B:D0:16:51:6B:9F:3B Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 106C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 105D Signing time: Mon 20 Oct 2025 17:52:19 +0000 Manifest this update: Mon 20 Oct 2025 17:52:18 +0000 Manifest next update: Mon 27 Oct 2025 17:52:18 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: 0XcZyL0rr1Y2KWZFinK6txR/O7oeeugFgXuiNSabgxM=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: Oct 20 17:52:18 2025 GMT Not After : Oct 27 17:52:18 2025 GMT Subject: CN=68f676d3-cb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:de:38:1e:76:c2:08:55:54:ae:90:7e:19: 01:9b:85:b9:5e:3a:1a:34:6f:f5:1e:a9:02:e7:d3: 23:2e:27:a9:83:7a:f9:cd:68:a4:b0:3b:45:62:f4: 6d:f6:0d:9a:fc:d6:e9:fc:72:ce:3c:e4:b2:d9:e8: 9c:b4:51:1f:5d:92:b7:0e:59:53:b4:6f:b4:48:b1: 0a:05:1b:6a:20:6d:93:9d:f6:9d:63:de:cf:cd:3c: 61:09:cc:d7:09:79:0c:a0:20:7d:85:4d:f2:27:78: 42:1e:60:dc:0b:e1:9c:35:94:09:b1:94:69:c2:4f: 08:ab:dd:49:b7:85:76:d3:3d:11:8b:e0:a5:5c:52: 3c:72:7f:94:83:16:58:45:a5:41:21:90:64:e7:55: 4d:05:81:a7:0b:8a:69:11:c3:78:8b:de:70:d5:04: 0c:65:5d:56:cc:37:30:8c:20:57:1a:5a:a5:52:b8: cd:8e:a9:28:67:c9:c2:46:3d:8b:82:cb:e3:d2:b1: 56:47:05:3f:c0:6a:b3:12:16:79:0d:34:05:9b:28: 8c:0e:35:e4:e2:38:15:a9:82:6b:d3:3b:f1:be:52: 1f:2c:00:c1:66:66:aa:fb:53:f3:ce:48:88:ef:4c: a0:ab:4c:a1:d3:3f:87:df:6e:0b:c1:7e:ba:5c:c3: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:D9:AA:7C:01:5A:E6:10:92:1B:12:04:8B:D0:16:51:6B:9F:3B X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:5a:aa:a5:0b:52:62:83:24:90:a1:22:e9:05:08:6e:05: 9a:86:17:64:5a:76:38:0c:be:db:63:93:8f:ef:48:99:f8:83: 09:e5:b0:85:d3:69:2f:f6:9c:b2:04:d3:7f:8d:7d:be:48:4b: 68:6f:f5:52:b5:f3:c6:3e:4b:45:62:14:fe:c8:c6:85:18:cc: a9:06:bb:5d:06:2b:d9:7d:60:a1:f5:07:28:c5:a7:6b:3e:3f: ca:14:2d:9e:c2:7c:eb:44:5e:4c:e4:03:20:cd:38:58:61:1b: d8:18:b1:55:b3:69:2b:ea:41:a0:28:d8:f6:1a:fc:47:2b:dc: 57:ff:bb:f2:3b:45:2a:68:c0:09:3d:af:a7:b5:12:e7:1c:13: ed:70:f2:6d:d8:14:2b:31:d1:2c:97:4d:5f:c1:5e:f9:c9:a5: 8f:bf:8a:61:36:fe:f4:9f:57:bf:3f:11:6d:8f:49:a3:cd:64: 7a:4b:13:70:5d:17:bc:84:ed:fe:c6:a7:dc:a1:83:57:e2:bc: 2a:aa:71:f5:16:31:0f:08:c6:4c:61:d6:06:f8:56:5d:3a:db: 78:2b:e3:94:ed:ee:2c:b2:99:e6:0a:dc:8b:24:17:10:23:ff: e0:07:e2:09:14:39:85:e5:11:70:bf:9c:91:19:6a:bc:94:7f: 62:a2:6f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjUxMDIwMTc1MjE4WhcNMjUxMDI3MTc1MjE4WjAYMRYwFAYD VQQDEw02OGY2NzZkMy1jYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMveOB52wghVVK6QfhkBm4W5XjoaNG/1HqkC59MjLiepg3r5zWiksDtFYvRt 9g2a/Nbp/HLOPOSy2eictFEfXZK3DllTtG+0SLEKBRtqIG2TnfadY97PzTxhCczX CXkMoCB9hU3yJ3hCHmDcC+GcNZQJsZRpwk8Iq91Jt4V20z0Ri+ClXFI8cn+UgxZY RaVBIZBk51VNBYGnC4ppEcN4i95w1QQMZV1WzDcwjCBXGlqlUrjNjqkoZ8nCRj2L gsvj0rFWRwU/wGqzEhZ5DTQFmyiMDjXk4jgVqYJr0zvxvlIfLADBZmaq+1PzzkiI 70ygq0yh0z+H324LwX66XMPOiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGl2ap8 AVrmEJIbEgSL0BZRa587MB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxwFqqpQtSYoMkkKEi6QUIbgWahhdkWnY4DL7bY5OP70iZ+IMJ5bCF 02kv9pyyBNN/jX2+SEtob/VStfPGPktFYhT+yMaFGMypBrtdBivZfWCh9Qcoxadr Pj/KFC2ewnzrRF5M5AMgzThYYRvYGLFVs2kr6kGgKNj2GvxHK9xX/7vyO0UqaMAJ Pa+ntRLnHBPtcPJt2BQrMdEsl01fwV75yaWPv4phNv70n1e/PxFtj0mjzWR6SxNw XRe8hO3+xqfcoYNX4rwqqnH1FjEPCMZMYdYG+FZdOtt4K+OU7e4sspnmCtyLJBcQ I//gB+IJFDmF5RFwv5yRGWq8lH9iom8s -----END CERTIFICATE-----Generated at Tue Oct 21 02:11:38 2025 by rpki-client