$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: MydlEEaCVyJ3FO95nynUFccH6cuOKP+m1EFdAgCeCnA= Subject key identifier: 0F:E0:DF:01:5A:58:B5:5D:44:DC:47:47:29:63:E2:EC:8D:89:BF:FA Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C78 Signing time: Sat 18 Oct 2025 19:17:27 +0000 Manifest this update: Sat 18 Oct 2025 19:17:27 +0000 Manifest next update: Sat 25 Oct 2025 19:17:27 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: P0HkITKRUsmD94XkXtnnRS7oYBlS1UTsJcPMkmPIMxg=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Oct 18 19:17:27 2025 GMT Not After : Oct 25 19:17:27 2025 GMT Subject: CN=68f3e7c7-b59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:30:14:28:fa:67:c6:d3:15:80:72:64:d3: f1:be:56:3c:55:2f:07:0a:df:53:a7:54:a2:29:5a: 34:c7:0b:b6:9a:93:e9:3b:5d:57:70:02:4e:0b:c4: 9c:84:27:a0:3d:23:f2:d6:8f:0f:5c:2a:ca:a6:d7: 7a:37:9c:24:80:ac:0b:d0:27:33:11:28:d3:c2:36: 7c:cb:1b:31:d1:af:8d:8f:a1:1d:96:93:36:5e:42: 2f:83:5c:82:00:3e:bb:2e:00:69:2a:e2:8e:e9:96: 42:79:cb:fb:39:a2:37:81:aa:f7:6d:f7:61:6c:b6: 47:cf:8e:57:4c:7c:ce:63:f7:60:84:4a:39:1f:a9: b9:dd:7e:40:c4:97:a7:e8:60:ad:27:f5:03:0a:d1: 7f:b4:be:c9:f1:b9:65:72:3e:01:2e:2a:01:2a:9b: a8:64:6b:54:3c:ef:fe:3c:13:8a:56:8a:3f:71:98: ad:12:35:ac:71:ff:ca:60:fa:1d:4b:7b:ad:b3:b0: 64:ac:05:bc:dd:48:57:d2:e4:c0:fe:13:b2:55:98: d7:bd:57:29:55:d2:36:63:a0:de:9b:a8:95:81:b9: 04:6e:d6:88:7c:44:d9:c7:99:61:c3:ba:07:16:92: af:97:54:cc:24:8c:13:90:aa:e9:62:19:55:11:18: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E0:DF:01:5A:58:B5:5D:44:DC:47:47:29:63:E2:EC:8D:89:BF:FA X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e5:73:0a:26:e2:bb:c8:67:be:58:5b:7a:73:44:73:e7:c9: 68:42:69:37:24:55:8c:b5:2e:31:0c:0d:bf:9e:1f:a0:b8:f8: 4d:06:93:35:8c:c4:0d:67:9f:9d:0a:71:96:e7:e6:6e:7f:9c: 54:24:af:2a:73:b5:2e:92:30:39:95:e5:70:51:a7:3e:2e:e8: 9b:11:29:60:50:8b:78:98:6d:82:61:84:48:4a:9d:6d:26:21: fa:39:58:52:3b:84:ec:96:a2:29:a9:13:74:3b:07:4d:22:e0: 63:6b:d7:31:b6:cf:f4:d5:31:d8:9e:a5:5d:04:c9:bc:18:e5: f7:52:15:0a:d1:7d:11:3d:c3:04:82:f4:16:bb:d1:c8:bb:71: a4:3c:7d:99:65:65:a1:a0:fd:13:7f:03:c8:37:33:5f:5a:29: fe:f6:60:09:c0:bc:25:24:fc:5c:25:e5:e3:76:11:e1:0e:81: 1c:54:78:13:8f:57:67:8b:ee:31:51:59:db:3d:c4:3a:ea:13: 4d:cc:a9:be:dc:1b:43:0b:a4:ab:52:f0:f2:01:49:29:cd:c3: 89:87:9f:22:c8:bc:27:df:22:a0:d4:cc:e0:b8:09:b0:eb:1c: 33:4c:a0:b0:17:62:5a:b6:12:f0:44:31:0e:22:ff:1c:0e:15: 8c:68:b7:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUxMDE4MTkxNzI3WhcNMjUxMDI1MTkxNzI3WjAYMRYwFAYD VQQDEw02OGYzZTdjNy1iNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW8wFCj6Z8bTFYByZNPxvlY8VS8HCt9Tp1SiKVo0xwu2mpPpO11XcAJOC8Sc hCegPSPy1o8PXCrKptd6N5wkgKwL0CczESjTwjZ8yxsx0a+Nj6EdlpM2XkIvg1yC AD67LgBpKuKO6ZZCecv7OaI3gar3bfdhbLZHz45XTHzOY/dghEo5H6m53X5AxJen 6GCtJ/UDCtF/tL7J8bllcj4BLioBKpuoZGtUPO/+PBOKVoo/cZitEjWscf/KYPod S3uts7BkrAW83UhX0uTA/hOyVZjXvVcpVdI2Y6Dem6iVgbkEbtaIfETZx5lhw7oH FpKvl1TMJIwTkKrpYhlVERikBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/g3wFa WLVdRNxHRylj4uyNib/6MB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn5XMKJuK7yGe+WFt6c0Rz58loQmk3JFWMtS4xDA2/nh+guPhNBpM1 jMQNZ5+dCnGW5+Zuf5xUJK8qc7UukjA5leVwUac+LuibESlgUIt4mG2CYYRISp1t JiH6OVhSO4TslqIpqRN0OwdNIuBja9cxts/01THYnqVdBMm8GOX3UhUK0X0RPcME gvQWu9HIu3GkPH2ZZWWhoP0TfwPINzNfWin+9mAJwLwlJPxcJeXjdhHhDoEcVHgT j1dni+4xUVnbPcQ66hNNzKm+3BtDC6SrUvDyAUkpzcOJh58iyLwn3yKg1MzguAmw 6xwzTKCwF2JathLwRDEOIv8cDhWMaLc8 -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:15 2025 by rpki-client