$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: t0ixrHqYvqIiA4xaUlfWhNyy8Gg1sdnXJuuwn8ctGxM= Subject key identifier: C6:CF:C4:14:3F:B1:44:D5:13:3E:74:CA:78:14:EB:20:ED:6D:A5:3E Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C5B Signing time: Fri 22 Aug 2025 18:41:05 +0000 Manifest this update: Fri 22 Aug 2025 18:41:04 +0000 Manifest next update: Fri 29 Aug 2025 18:41:04 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: RdPRK3ZSkopONTAapyR1SvTonMxLG3DDU42TbWepBs8=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Aug 22 18:41:04 2025 GMT Not After : Aug 29 18:41:04 2025 GMT Subject: CN=68a8b9c1-4f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:46:81:8e:49:22:55:c7:dc:c9:eb:bf:cd: 9a:09:5f:0b:23:29:99:90:59:32:c1:d6:e3:da:da: 82:1a:3e:ca:5a:2b:83:eb:34:e4:96:be:c1:ad:d0: 4b:4b:b8:0e:16:9a:68:ce:ab:a1:0a:93:8c:ae:1e: a2:89:38:c6:11:5d:75:b6:4e:4e:2d:20:77:0f:de: fa:c8:0b:88:13:82:b6:95:8d:70:1a:8e:d8:f8:34: 88:2b:50:e5:2f:40:15:12:3b:b5:bc:65:cc:e7:e5: 7e:05:d7:ee:8d:fc:4b:78:07:61:c4:ed:51:29:70: 21:49:c5:c7:cd:0c:a8:58:f6:46:1c:6c:4b:a7:85: 56:18:31:26:c5:b2:48:1a:11:c8:ac:41:de:fd:b5: 92:bb:c8:5d:94:5d:06:bc:c2:0d:ba:b6:7c:a2:7a: e7:8f:90:b0:c5:7a:ec:5f:8a:62:f5:19:aa:cd:dc: 73:1b:88:23:dc:fb:fa:7d:d6:ee:c1:00:a1:df:13: b0:8e:2b:df:da:b2:1b:d1:bd:3d:22:75:62:71:eb: ba:ca:70:9b:7d:26:bc:a4:38:3f:02:be:70:22:94: b6:63:83:77:e7:e1:21:15:dc:8d:29:9d:ed:51:eb: 9c:56:1c:30:1c:c2:93:e8:03:a1:a5:18:49:6f:20: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CF:C4:14:3F:B1:44:D5:13:3E:74:CA:78:14:EB:20:ED:6D:A5:3E X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:65:d5:42:fb:b6:cd:6e:78:fb:9f:cd:57:f5:1e:61:7a:c9: 24:9e:01:85:e2:3b:e6:35:e0:f0:92:e1:8d:79:5a:fb:fd:6d: 34:42:44:90:82:9e:e7:45:21:e9:d3:0e:16:8a:7e:c5:54:60: 9b:77:9f:4f:15:34:a3:06:50:b9:80:29:8e:fe:c5:b9:0e:a9: aa:33:c7:1b:43:e1:db:10:0a:a7:9c:43:ce:e2:a2:61:5a:50: f1:b1:46:0e:42:c5:e6:09:6e:b6:9e:ac:8d:87:f7:71:bc:b4: cb:74:7d:fc:a1:3d:78:b8:26:43:44:d8:fd:e1:57:6f:93:6c: 26:eb:d5:1b:1c:21:13:e1:7a:9d:e6:c6:b2:71:14:41:98:3a: 38:4f:d8:a0:bb:52:92:a0:82:c8:ec:76:8b:0b:f1:c4:e2:f5: f2:18:65:e4:69:db:dc:16:74:bd:99:b0:af:32:1b:81:c7:b3: 4f:c5:99:11:d0:3a:0a:d2:8c:bd:02:53:d3:f0:b3:70:01:6a: b3:25:42:36:21:9c:be:d4:92:e2:c4:fe:ff:2f:aa:aa:33:10: 3c:bf:78:4c:81:31:da:76:6a:5f:92:2d:29:28:fc:ad:32:78: c1:5c:f6:07:5e:82:f9:90:70:65:7c:7a:96:f1:26:01:c3:cf: cc:07:bb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUwODIyMTg0MTA0WhcNMjUwODI5MTg0MTA0WjAYMRYwFAYD VQQDEw02OGE4YjljMS00ZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu5GgY5JIlXH3Mnrv82aCV8LIymZkFkywdbj2tqCGj7KWiuD6zTklr7BrdBL S7gOFppozquhCpOMrh6iiTjGEV11tk5OLSB3D976yAuIE4K2lY1wGo7Y+DSIK1Dl L0AVEju1vGXM5+V+BdfujfxLeAdhxO1RKXAhScXHzQyoWPZGHGxLp4VWGDEmxbJI GhHIrEHe/bWSu8hdlF0GvMINurZ8onrnj5CwxXrsX4pi9RmqzdxzG4gj3Pv6fdbu wQCh3xOwjivf2rIb0b09InViceu6ynCbfSa8pDg/Ar5wIpS2Y4N35+EhFdyNKZ3t UeucVhwwHMKT6AOhpRhJbyBwcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbPxBQ/ sUTVEz50yngU6yDtbaU+MB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcZdVC+7bNbnj7n81X9R5heskkngGF4jvmNeDwkuGNeVr7/W00QkSQ gp7nRSHp0w4Win7FVGCbd59PFTSjBlC5gCmO/sW5DqmqM8cbQ+HbEAqnnEPO4qJh WlDxsUYOQsXmCW62nqyNh/dxvLTLdH38oT14uCZDRNj94Vdvk2wm69UbHCET4Xqd 5saycRRBmDo4T9igu1KSoILI7HaLC/HE4vXyGGXkadvcFnS9mbCvMhuBx7NPxZkR 0DoK0oy9AlPT8LNwAWqzJUI2IZy+1JLixP7/L6qqMxA8v3hMgTHadmpfki0pKPyt MnjBXPYHXoL5kHBlfHqW8SYBw8/MB7u2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:01 2025 by rpki-client