$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft File: neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json) Hash identifier: WtI9H7T49r1LSrATGUAuPZQa/Lf2jWSqoQhxXPPTTtc= Subject key identifier: A5:9B:4E:1B:4D:CB:27:22:CD:38:9E:A3:82:DC:74:23:56:B7:22:53 Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05 Certificate issuer: /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft Manifest number: 01BE Signing time: Tue 01 Jul 2025 03:27:12 +0000 Manifest this update: Tue 01 Jul 2025 03:27:12 +0000 Manifest next update: Tue 08 Jul 2025 03:27:12 +0000 Files and hashes: 1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: mZjsrbzdnhfE+KuAHd3UbZUJK+FmMqskCOXEt497x4s=) 2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: z1DiM+Sb1v9sxtvB7lwEWlS9RqjVAOPpk9d0UUYugp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E81, serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005 Validity Not Before: Jul 1 03:27:12 2025 GMT Not After : Jul 8 03:27:12 2025 GMT Subject: CN=68635590-7b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:7a:50:eb:aa:0c:e2:22:cb:f4:bd:bf:4e: 76:e8:4a:0d:8c:de:31:23:21:fb:0b:88:61:ba:31: 8b:94:2e:2e:a2:60:7c:7a:a4:cf:93:53:a9:13:16: 01:e3:d6:32:be:46:3b:12:a3:c3:6c:e7:46:c8:a2: 34:27:4e:66:1a:53:12:53:c2:1c:27:66:dd:c3:44: 43:dd:b6:4b:13:d2:0b:57:6b:aa:a9:50:ac:79:f6: b8:74:f1:da:87:a3:8e:25:fb:b4:15:ff:e2:ff:a5: e4:ec:2f:b5:20:91:9d:27:a1:dc:fb:bc:59:a9:83: 3c:81:32:4d:52:b5:d0:42:74:26:88:0f:43:e3:f0: 5d:d7:82:21:5c:ad:80:d4:59:7f:91:7c:92:94:8e: c1:01:47:b4:d4:3c:b1:0a:28:fa:0f:60:1d:fd:05: 2c:b0:8d:97:c2:5d:b8:4a:4a:66:ba:83:f9:13:ec: 29:f5:7c:82:cb:c5:48:59:33:f4:a9:0c:33:60:14: 59:29:3a:5d:68:64:52:e4:48:19:a8:a5:83:da:ee: 2b:6f:66:81:88:b1:3f:87:70:99:0e:d3:49:54:d1: 07:4e:db:b0:2a:f2:e8:fa:0e:3d:a2:b0:22:89:6e: 12:a9:7a:3f:94:c2:4d:68:e4:45:f4:36:93:cb:f2: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:4E:1B:4D:CB:27:22:CD:38:9E:A3:82:DC:74:23:56:B7:22:53 X509v3 Authority Key Identifier: keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b5:4a:11:fb:7a:5f:c1:e8:b3:fe:a2:f2:50:91:49:7c:8f: 99:6c:3b:30:f5:9c:9d:bf:0b:22:2b:63:ac:4f:45:ce:43:8b: b7:23:63:91:38:23:09:19:db:b2:61:66:ec:7a:f7:df:f9:e0: e4:75:62:08:1a:2f:48:15:b7:5e:bd:06:f9:b6:84:d3:52:07: fc:10:52:6b:4f:07:11:72:95:da:f3:3c:f0:65:15:2b:a5:79: e6:c7:6e:c7:96:36:52:8b:94:f5:27:a5:6e:96:c2:16:d1:0d: 00:6f:f6:b6:f4:09:a9:c6:b8:8f:7b:29:28:6c:9f:86:e1:30: 2c:d0:71:d6:e5:69:35:ad:fb:56:cd:72:45:bb:a1:34:64:95: a0:64:18:1f:0f:07:14:2a:46:cd:d7:9d:82:49:fa:23:53:8c: 0b:69:75:19:1e:f6:9a:41:d6:5c:54:3c:9c:6d:44:8b:3a:36: eb:ce:c1:16:87:74:f2:9c:97:53:5b:fb:ac:cd:ba:b7:25:95: 3f:de:04:a0:ac:bf:9a:a5:c7:b6:0d:a4:21:e9:49:4b:30:f3: 50:5d:9e:f3:fe:41:03:29:be:51:b3:8b:35:fb:94:f5:b8:79: 86:d6:9a:57:24:0e:dd:81:9d:b4:02:72:06:75:ef:fd:e4:3c: d7:ea:1e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFODExMTAvBgNVBAUTKDlERTQ0NDhBRDlGQ0M3M0ZBQTJEMjc1NUY0QkY1NDlE MzE0MjcwMDUwHhcNMjUwNzAxMDMyNzEyWhcNMjUwNzA4MDMyNzEyWjAYMRYwFAYD VQQDEw02ODYzNTU5MC03YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ96UOuqDOIiy/S9v0526EoNjN4xIyH7C4hhujGLlC4uomB8eqTPk1OpExYB 49YyvkY7EqPDbOdGyKI0J05mGlMSU8IcJ2bdw0RD3bZLE9ILV2uqqVCsefa4dPHa h6OOJfu0Ff/i/6Xk7C+1IJGdJ6Hc+7xZqYM8gTJNUrXQQnQmiA9D4/Bd14IhXK2A 1Fl/kXySlI7BAUe01DyxCij6D2Ad/QUssI2Xwl24SkpmuoP5E+wp9XyCy8VIWTP0 qQwzYBRZKTpdaGRS5EgZqKWD2u4rb2aBiLE/h3CZDtNJVNEHTtuwKvLo+g49orAi iW4SqXo/lMJNaORF9DaTy/KmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWbThtN yycizTieo4LcdCNWtyJTMB8GA1UdIwQYMBaAFJ3kRIrZ/Mc/qi0nVfS/VJ0xQnAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4MS8xNkNGNzU2NkIx N0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6LXFMU2RWOUw5VW5URkNj QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUkVpdG44eHotcUxTZFY5TDlVblRGQ2NBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4MS8xNkNGNzU2NkIxN0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6 LXFMU2RWOUw5VW5URkNjQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZtUoR+3pfweiz/qLyUJFJfI+ZbDsw9ZydvwsiK2OsT0XOQ4u3I2OR OCMJGduyYWbsevff+eDkdWIIGi9IFbdevQb5toTTUgf8EFJrTwcRcpXa8zzwZRUr pXnmx27HljZSi5T1J6VulsIW0Q0Ab/a29AmpxriPeykobJ+G4TAs0HHW5Wk1rftW zXJFu6E0ZJWgZBgfDwcUKkbN152CSfojU4wLaXUZHvaaQdZcVDycbUSLOjbrzsEW h3TynJdTW/uszbq3JZU/3gSgrL+apce2DaQh6UlLMPNQXZ7z/kEDKb5Rs4s1+5T1 uHmG1ppXJA7dgZ20AnIGde/95DzX6h7r -----END CERTIFICATE-----Generated at Wed Jul 2 06:31:03 2025 by rpki-client