$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: A8dhT5cxIJEVAqu94Gw+dYLaccGIfzuut3ocTaBgdO8= Subject key identifier: 15:BD:F9:64:79:C2:59:B7:FF:DE:49:B1:C5:38:D6:A7:84:C3:5A:C5 Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 04BF Signing time: Sat 23 Aug 2025 00:06:07 +0000 Manifest this update: Sat 23 Aug 2025 00:06:07 +0000 Manifest next update: Sat 30 Aug 2025 00:06:07 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: aE6uusFm8cDZLbl8HdXt7Bux6RhIVrk5m6+UZ26Y+Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: Aug 23 00:06:07 2025 GMT Not After : Aug 30 00:06:07 2025 GMT Subject: CN=68a905ef-656a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:04:ec:c8:73:d5:ce:2e:fa:a9:36:57:be: 3a:6e:b2:bc:d4:f4:4a:f2:3e:93:79:fd:a1:88:1e: 9a:b1:35:87:da:c8:df:72:ea:d7:36:50:f3:e4:3c: e2:e3:89:d1:78:02:4d:8d:43:55:53:7e:d8:c3:85: 5d:1a:f6:f0:97:83:87:9f:98:eb:80:07:68:9b:ec: d9:e1:80:b3:3a:93:5c:ed:68:06:0f:f7:ab:7e:3c: 2b:b7:2e:1a:ca:6c:f7:ed:26:ae:4b:69:ab:f3:f2: ac:b8:20:a5:55:2f:4c:9a:6e:40:96:94:d7:6d:83: e7:cc:74:09:20:6c:67:82:74:ba:5f:84:60:76:7d: 30:d1:74:84:29:e4:70:f6:1b:bb:03:73:1f:07:db: 10:6c:16:28:ef:09:41:25:9c:e4:ab:27:f3:60:60: e0:0a:1a:56:fb:b5:d6:6c:7d:ca:34:4a:b4:1a:98: ca:c0:16:8c:2a:36:a1:ed:f8:81:ba:cd:c7:79:70: 83:f6:50:e0:fc:9b:45:10:4b:8c:c8:43:a3:ce:69: 7b:cc:ef:87:2c:c3:8c:46:bf:b6:0d:ed:d7:66:f1: 02:b7:74:f8:ae:c8:ff:3a:79:3f:f6:e6:b8:54:be: 36:74:32:00:f1:2e:e0:c1:f3:82:1e:bb:2d:64:23: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:F9:64:79:C2:59:B7:FF:DE:49:B1:C5:38:D6:A7:84:C3:5A:C5 X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a7:9f:b9:3e:9d:80:cc:52:52:7f:37:7f:9e:1e:c8:c1:9d: df:8b:79:2f:02:a9:4d:b5:a7:5e:5e:e2:49:ee:b3:fe:7f:c0: bc:a9:94:2c:7f:95:e1:e1:fa:3d:1d:bc:73:6d:f0:0b:36:3b: 2f:21:6b:9e:0f:54:4b:d4:22:1e:d1:52:6d:92:aa:a9:a1:3e: 07:f0:74:84:d1:e4:33:be:cc:ce:63:25:b7:62:b3:3d:65:2b: ab:59:2c:8c:83:40:42:3c:cf:ab:ce:81:12:0e:b3:90:e5:47: 45:b4:a0:78:a0:dd:2b:7b:0b:db:c3:f7:ec:d1:13:26:b6:96: d0:bb:69:42:72:9e:66:c7:73:b5:c9:8f:80:9d:40:3a:d7:65: 42:47:72:3a:24:7f:2c:8b:f2:92:42:3f:f7:ba:51:c2:ce:10: e8:d7:99:14:f5:2f:ce:11:94:8d:a3:23:5c:eb:37:54:d7:09: 10:20:33:d3:4e:3b:90:88:e3:d8:8b:f6:ea:2d:6f:a7:a3:e7: b4:f8:f1:53:e6:b9:b1:d7:83:8b:a4:51:42:d0:ef:48:52:6a: 09:32:a7:d3:04:a5:c7:8d:3e:73:fa:2f:d6:a2:28:5b:5e:a2: e0:ca:fb:c3:4a:a8:be:31:35:d9:0f:7f:54:40:92:bb:28:cb: ab:71:5a:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUwODIzMDAwNjA3WhcNMjUwODMwMDAwNjA3WjAYMRYwFAYD VQQDEw02OGE5MDVlZi02NTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgkE7Mhz1c4u+qk2V746brK81PRK8j6Tef2hiB6asTWH2sjfcurXNlDz5Dzi 44nReAJNjUNVU37Yw4VdGvbwl4OHn5jrgAdom+zZ4YCzOpNc7WgGD/erfjwrty4a ymz37SauS2mr8/KsuCClVS9Mmm5AlpTXbYPnzHQJIGxngnS6X4Rgdn0w0XSEKeRw 9hu7A3MfB9sQbBYo7wlBJZzkqyfzYGDgChpW+7XWbH3KNEq0GpjKwBaMKjah7fiB us3HeXCD9lDg/JtFEEuMyEOjzml7zO+HLMOMRr+2De3XZvECt3T4rsj/Onk/9ua4 VL42dDIA8S7gwfOCHrstZCOsJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBW9+WR5 wlm3/95JscU41qeEw1rFMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSp5+5Pp2AzFJSfzd/nh7IwZ3fi3kvAqlNtadeXuJJ7rP+f8C8qZQs f5Xh4fo9HbxzbfALNjsvIWueD1RL1CIe0VJtkqqpoT4H8HSE0eQzvszOYyW3YrM9 ZSurWSyMg0BCPM+rzoESDrOQ5UdFtKB4oN0rewvbw/fs0RMmtpbQu2lCcp5mx3O1 yY+AnUA612VCR3I6JH8si/KSQj/3ulHCzhDo15kU9S/OEZSNoyNc6zdU1wkQIDPT TjuQiOPYi/bqLW+no+e0+PFT5rmx14OLpFFC0O9IUmoJMqfTBKXHjT5z+i/Woihb XqLgyvvDSqi+MTXZD39UQJK7KMurcVrN -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:31 2025 by rpki-client