$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft File: neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json) Hash identifier: CZd88Lbqc+C8uhvdsSInVXd8atfTChBreKJmrLBQH6U= Subject key identifier: C2:9B:E2:21:82:FA:6F:FC:F3:34:0F:45:7B:DD:F3:F6:F8:92:CC:E5 Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05 Certificate issuer: /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft Manifest number: 01A5 Signing time: Sun 11 May 2025 02:16:41 +0000 Manifest this update: Sun 11 May 2025 02:16:41 +0000 Manifest next update: Sun 18 May 2025 02:16:41 +0000 Files and hashes: 1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: cKrz80CVkX+x+psekCRETkwLjYfrAS1hVfUXWOqgWSQ=) 2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: z1DiM+Sb1v9sxtvB7lwEWlS9RqjVAOPpk9d0UUYugp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E81, serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005 Validity Not Before: May 11 02:16:41 2025 GMT Not After : May 18 02:16:41 2025 GMT Subject: CN=68200889-e5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:6d:12:7a:8b:26:19:5a:e5:59:fa:06:3f: 37:6b:9a:15:d9:76:63:dc:e6:6b:74:ab:40:eb:59: 5b:6a:51:6c:4c:67:0a:69:60:83:ab:d0:45:02:4b: f1:d2:27:87:80:74:6b:d1:13:fd:1c:4b:22:7b:1e: ce:91:49:96:4f:39:b8:77:3c:44:c9:4a:26:f6:ff: d3:41:06:f7:45:59:ce:f7:38:35:0c:29:70:f0:80: 8b:56:90:ab:83:4e:ba:cc:22:e5:d8:34:43:9e:26: e5:d9:59:6e:6d:90:2a:57:b1:68:21:7f:a7:36:f3: ab:34:ba:b7:df:d1:a2:84:08:d4:71:06:1a:e9:d1: 5b:1a:ae:56:5d:43:43:93:0f:d0:c8:cf:74:28:96: 70:d6:c3:70:d8:a1:f8:9a:ef:70:bc:53:ef:62:3c: 4b:10:10:b7:01:56:32:d2:4a:dc:ed:59:ab:ff:b6: 87:b5:ba:08:01:88:58:a9:5c:eb:ee:ca:5a:20:20: f1:c1:eb:38:ab:8a:58:36:b8:b7:66:2a:99:83:d1: ad:49:c7:9d:b4:bc:d1:86:d8:36:79:22:b7:9e:72: f5:c7:78:98:e8:f8:a3:57:be:d5:69:7e:1f:37:b3: 73:08:55:55:6d:09:e2:6d:40:f5:69:ab:50:ef:af: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9B:E2:21:82:FA:6F:FC:F3:34:0F:45:7B:DD:F3:F6:F8:92:CC:E5 X509v3 Authority Key Identifier: keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3d:0b:30:6b:51:73:6a:2a:4c:e0:68:b9:fb:d6:03:61:d0: 74:fd:cd:62:25:02:13:3f:0e:2c:15:4a:9e:30:8b:03:33:37: cc:c9:0f:1c:7c:34:58:33:68:79:a8:5e:90:fe:17:f7:4f:ba: ae:20:a1:b1:64:f8:2d:94:8a:93:cb:28:e4:8c:59:e1:e6:99: dd:97:2f:10:88:63:76:83:8b:6a:9d:57:e7:5c:d4:66:e2:f2: dc:7b:55:28:fe:10:f3:11:fd:67:d3:6c:18:05:8c:bb:cf:44: 72:87:17:7e:bb:54:3a:6c:76:00:dd:21:3b:3e:34:2e:62:d8: 04:c5:58:1a:38:ee:27:13:d3:76:e4:18:00:89:0e:69:fe:9b: 2c:94:55:5b:36:c3:7d:23:4b:a8:d3:c5:c8:53:8f:a2:9f:1a: c1:f1:02:91:7e:42:3c:8b:72:45:91:57:2d:7c:db:c5:2d:f7: 22:2e:bc:3a:ff:f2:b2:ca:e4:72:81:0f:64:2c:79:25:88:b3: 85:f5:6a:af:c3:56:75:8d:d6:0c:da:9a:6c:47:27:4e:0c:a6: 0f:c2:42:2a:c9:89:56:3e:12:41:f0:c7:66:ed:47:b2:d7:19: 2b:2f:9a:17:01:27:97:36:4d:34:39:1c:46:5f:25:ff:db:9e: fd:04:28:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFODExMTAvBgNVBAUTKDlERTQ0NDhBRDlGQ0M3M0ZBQTJEMjc1NUY0QkY1NDlE MzE0MjcwMDUwHhcNMjUwNTExMDIxNjQxWhcNMjUwNTE4MDIxNjQxWjAYMRYwFAYD VQQDEw02ODIwMDg4OS1lNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf1tEnqLJhla5Vn6Bj83a5oV2XZj3OZrdKtA61lbalFsTGcKaWCDq9BFAkvx 0ieHgHRr0RP9HEsiex7OkUmWTzm4dzxEyUom9v/TQQb3RVnO9zg1DClw8ICLVpCr g066zCLl2DRDnibl2VlubZAqV7FoIX+nNvOrNLq339GihAjUcQYa6dFbGq5WXUND kw/QyM90KJZw1sNw2KH4mu9wvFPvYjxLEBC3AVYy0krc7Vmr/7aHtboIAYhYqVzr 7spaICDxwes4q4pYNri3ZiqZg9GtScedtLzRhtg2eSK3nnL1x3iY6PijV77VaX4f N7NzCFVVbQnibUD1aatQ76/HYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKb4iGC +m/88zQPRXvd8/b4kszlMB8GA1UdIwQYMBaAFJ3kRIrZ/Mc/qi0nVfS/VJ0xQnAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4MS8xNkNGNzU2NkIx N0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6LXFMU2RWOUw5VW5URkNj QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUkVpdG44eHotcUxTZFY5TDlVblRGQ2NBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4MS8xNkNGNzU2NkIxN0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6 LXFMU2RWOUw5VW5URkNjQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPQswa1FzaipM4Gi5+9YDYdB0/c1iJQITPw4sFUqeMIsDMzfMyQ8c fDRYM2h5qF6Q/hf3T7quIKGxZPgtlIqTyyjkjFnh5pndly8QiGN2g4tqnVfnXNRm 4vLce1Uo/hDzEf1n02wYBYy7z0Ryhxd+u1Q6bHYA3SE7PjQuYtgExVgaOO4nE9N2 5BgAiQ5p/psslFVbNsN9I0uo08XIU4+inxrB8QKRfkI8i3JFkVctfNvFLfciLrw6 //KyyuRygQ9kLHkliLOF9Wqvw1Z1jdYM2ppsRydODKYPwkIqyYlWPhJB8Mdm7Uey 1xkrL5oXASeXNk00ORxGXyX/2579BCjM -----END CERTIFICATE-----Generated at Sun May 11 16:51:53 2025 by rpki-client