$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: DH0nCYNsBRG0UQw/dOd/m3znex3NK2v2N6o8LHqJxEc= Subject key identifier: 3B:67:48:B6:71:91:99:26:8D:E4:C9:42:3A:6E:DA:43:AA:78:EE:9A Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C28 Signing time: Mon 12 May 2025 18:29:49 +0000 Manifest this update: Mon 12 May 2025 18:29:49 +0000 Manifest next update: Mon 19 May 2025 18:29:49 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: J69xoAqoMgdxLlA5XhMcd7jVCPcKBrWm8qIBW+iTego=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: May 12 18:29:49 2025 GMT Not After : May 19 18:29:49 2025 GMT Subject: CN=68223e1d-d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:77:15:db:a6:b0:dc:a7:5c:63:29:0e:ca: 99:2c:48:08:e3:68:63:2c:da:46:6f:4a:b0:23:70: 32:95:1f:5b:5c:9b:11:d2:cc:06:b2:08:ca:1a:95: e8:29:02:2a:b5:d2:10:e3:e5:ab:95:82:13:76:44: f1:39:cc:04:e7:04:b2:ba:34:bd:5e:5c:35:80:3e: 42:7e:62:f6:4d:44:fa:f8:0c:12:2b:1d:21:af:c5: 92:48:1e:d2:c9:92:70:41:4e:80:03:41:1e:aa:90: 79:84:1f:9b:0b:90:39:5c:96:a4:4e:8d:c0:02:b7: a3:29:f0:48:43:d5:9e:35:b3:e2:c9:3c:18:5a:16: 8e:60:6f:29:40:dc:c7:86:5b:83:39:ee:7a:e2:cc: 49:5a:20:b2:67:dc:0a:6f:c4:f5:e9:e0:b3:90:17: a3:bc:d1:10:2d:f9:c7:fa:31:90:25:41:5a:ec:39: b4:e9:d5:40:16:36:71:e2:e0:37:12:7d:8d:b1:81: 30:7c:8f:60:7a:11:02:bb:3c:3c:4e:e3:ed:46:ab: 15:b4:34:81:ef:a0:50:95:c4:e9:ba:80:76:3e:ee: fa:40:0b:e0:19:b0:92:e9:56:66:56:78:e9:94:f4: 13:26:7f:a5:65:42:90:6b:46:1d:14:a4:3e:52:c3: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:67:48:B6:71:91:99:26:8D:E4:C9:42:3A:6E:DA:43:AA:78:EE:9A X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:98:1a:16:42:4b:0b:b9:28:31:4d:30:ab:a1:c7:8e:f6:f7: f6:60:0b:e2:4b:65:fc:ec:de:59:d2:80:61:57:e8:9b:fc:12: ea:eb:50:dd:15:f3:e6:63:ba:c0:46:b3:31:8c:18:53:b6:f4: 20:40:58:db:e9:c1:2c:82:94:33:e7:0e:0b:ef:a9:b2:e3:90: e5:f6:dd:13:f3:e0:87:eb:01:3f:d1:dc:83:55:fd:79:47:e0: de:ba:e9:0a:b9:d9:5a:7d:27:ec:25:f9:7e:79:7b:eb:5d:14: 92:cb:9d:81:64:ce:39:ad:0f:b4:69:cd:a5:5c:f2:12:dc:87: 43:3e:1d:03:0a:25:10:69:2a:1a:f9:5f:45:39:31:f9:f1:82: e9:ed:50:de:36:ff:37:0f:57:d6:d7:3a:85:28:fe:fc:38:ba: 8b:5c:3f:e0:7e:67:65:d6:75:12:e9:9f:01:b4:af:8d:69:be: 51:1d:ee:23:c2:3b:32:c9:0a:df:d3:9b:bc:05:2c:2f:ea:1c: 2d:52:d1:0f:c1:66:9a:d8:72:fc:cf:d6:e3:07:44:14:00:b5: a7:e9:2e:43:c5:9f:b1:6c:26:58:72:24:a2:f0:a7:cf:66:87: 90:41:16:2d:e0:f7:42:e3:e4:97:11:cc:80:5e:ca:ad:42:cd: eb:90:2c:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUwNTEyMTgyOTQ5WhcNMjUwNTE5MTgyOTQ5WjAYMRYwFAYD VQQDEw02ODIyM2UxZC1kNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4Z3FdumsNynXGMpDsqZLEgI42hjLNpGb0qwI3AylR9bXJsR0swGsgjKGpXo KQIqtdIQ4+WrlYITdkTxOcwE5wSyujS9Xlw1gD5CfmL2TUT6+AwSKx0hr8WSSB7S yZJwQU6AA0EeqpB5hB+bC5A5XJakTo3AArejKfBIQ9WeNbPiyTwYWhaOYG8pQNzH hluDOe564sxJWiCyZ9wKb8T16eCzkBejvNEQLfnH+jGQJUFa7Dm06dVAFjZx4uA3 En2NsYEwfI9gehECuzw8TuPtRqsVtDSB76BQlcTpuoB2Pu76QAvgGbCS6VZmVnjp lPQTJn+lZUKQa0YdFKQ+UsPyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtnSLZx kZkmjeTJQjpu2kOqeO6aMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQmBoWQksLuSgxTTCroceO9vf2YAviS2X87N5Z0oBhV+ib/BLq61Dd FfPmY7rARrMxjBhTtvQgQFjb6cEsgpQz5w4L76my45Dl9t0T8+CH6wE/0dyDVf15 R+DeuukKudlafSfsJfl+eXvrXRSSy52BZM45rQ+0ac2lXPIS3IdDPh0DCiUQaSoa +V9FOTH58YLp7VDeNv83D1fW1zqFKP78OLqLXD/gfmdl1nUS6Z8BtK+Nab5RHe4j wjsyyQrf05u8BSwv6hwtUtEPwWaa2HL8z9bjB0QUALWn6S5DxZ+xbCZYciSi8KfP ZoeQQRYt4PdC4+SXEcyAXsqtQs3rkCwv -----END CERTIFICATE-----Generated at Tue May 13 22:55:13 2025 by rpki-client