$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: QsJr+XttPi/LEEkOaO3qO8B1uZXmu4OP6LY9D9q8swU= Subject key identifier: 88:7B:67:73:2B:B4:81:D9:AA:02:34:F0:BA:25:2C:98:E1:99:DA:BC Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 526E Signing time: Fri 16 May 2025 15:09:15 +0000 Manifest this update: Fri 16 May 2025 15:09:15 +0000 Manifest next update: Fri 23 May 2025 15:09:15 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: LM0Wf5ZVfuVtTNvfTfWOiXhpEK6Uo7WSTlwCRFhi+Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: May 16 15:09:15 2025 GMT Not After : May 23 15:09:15 2025 GMT Subject: CN=6827551b-a8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:6b:39:6f:81:82:2f:73:f7:8c:4c:09:97: 17:b8:46:20:fb:1d:09:e4:d8:80:52:01:52:19:36: dd:c2:c9:03:02:48:5e:39:cd:7c:ea:fd:10:c4:04: 49:da:56:b1:82:83:9c:d0:bd:5d:58:fa:dd:f1:56: db:9c:0f:d2:eb:bf:ba:29:dd:d7:2b:ad:43:8b:45: 4e:4c:2a:75:1c:6b:b9:4b:30:df:63:52:c1:d1:10: 15:12:36:d6:b0:d9:c7:c6:a3:7f:f1:4f:e9:01:55: b0:19:5d:e6:e7:b7:88:5e:07:44:e8:26:8c:1a:92: fb:66:fb:0f:32:2d:80:d9:ec:c8:ee:0a:28:12:da: 72:e8:64:e6:64:f4:f2:7f:d7:eb:e0:00:c3:6b:aa: b0:06:d5:6c:c0:21:70:19:cf:6a:ba:ae:58:9b:fe: 80:19:30:7b:34:ec:01:b0:0b:af:67:e3:ac:09:11: c4:d7:be:d6:88:74:65:d6:a9:02:b8:fa:cf:37:8f: a2:db:72:47:16:d7:a5:d3:7f:8b:95:02:c3:96:52: cc:a5:e7:20:fa:ed:10:9a:ba:be:b2:a7:5b:71:36: db:18:ec:7e:60:8d:0a:35:61:2f:c7:58:6c:81:5c: ce:52:9e:28:43:15:ed:36:59:82:f7:41:dd:e0:54: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7B:67:73:2B:B4:81:D9:AA:02:34:F0:BA:25:2C:98:E1:99:DA:BC X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:1d:33:6b:01:e6:0f:4d:ec:f9:41:4c:cf:f1:2b:5c:97: af:a0:bb:57:ea:88:27:19:a1:e8:b0:42:04:03:9f:d8:24:0c: 7e:76:c7:dc:99:cd:d5:b0:ad:d6:24:f4:3e:05:4d:d8:e7:cf: 33:66:bb:a2:ed:0d:85:0b:eb:15:35:e5:de:79:26:42:2b:b5: 16:c2:a5:0b:20:a1:59:b0:fd:c9:3e:e0:90:32:86:19:77:36: 3f:84:a2:a8:4e:5a:8d:1c:8d:b3:43:4b:f7:8c:5c:0a:0e:6b: b0:a6:99:7b:8c:5d:19:ef:fd:01:36:3a:ba:e7:f9:c9:bc:db: 3e:e2:a3:56:19:da:92:77:3a:6d:a9:48:bd:34:b8:a2:10:a9: 77:47:5c:fc:8a:ff:b3:9f:4f:1b:ec:e1:de:87:16:b7:14:8d: ea:a8:38:04:1f:7d:82:5d:69:34:45:3a:a1:b6:62:73:cb:63: fa:1f:f8:99:cb:3d:f8:00:0f:b0:11:bf:3d:eb:5f:8f:f7:28: f1:89:6e:2b:11:89:05:08:64:16:9f:e2:bf:28:4a:5b:a4:e9: a0:29:c9:2e:f2:b7:18:39:53:8a:2f:f3:c3:92:89:09:4a:60: af:23:10:e6:9f:0b:82:99:6f:58:5b:dd:02:18:31:26:d6:7e: 1d:b1:1a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjUwNTE2MTUwOTE1WhcNMjUwNTIzMTUwOTE1WjAYMRYwFAYD VQQDEw02ODI3NTUxYi1hOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1BrOW+Bgi9z94xMCZcXuEYg+x0J5NiAUgFSGTbdwskDAkheOc186v0QxARJ 2laxgoOc0L1dWPrd8VbbnA/S67+6Kd3XK61Di0VOTCp1HGu5SzDfY1LB0RAVEjbW sNnHxqN/8U/pAVWwGV3m57eIXgdE6CaMGpL7ZvsPMi2A2ezI7gooEtpy6GTmZPTy f9fr4ADDa6qwBtVswCFwGc9quq5Ym/6AGTB7NOwBsAuvZ+OsCRHE177WiHRl1qkC uPrPN4+i23JHFtel03+LlQLDllLMpecg+u0Qmrq+sqdbcTbbGOx+YI0KNWEvx1hs gVzOUp4oQxXtNlmC90Hd4FR4IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh7Z3Mr tIHZqgI08LolLJjhmdq8MB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNuh0zawHmD03s+UFMz/ErXJevoLtX6ognGaHosEIEA5/YJAx+dsfc mc3VsK3WJPQ+BU3Y588zZrui7Q2FC+sVNeXeeSZCK7UWwqULIKFZsP3JPuCQMoYZ dzY/hKKoTlqNHI2zQ0v3jFwKDmuwppl7jF0Z7/0BNjq65/nJvNs+4qNWGdqSdzpt qUi9NLiiEKl3R1z8iv+zn08b7OHehxa3FI3qqDgEH32CXWk0RTqhtmJzy2P6H/iZ yz34AA+wEb8961+P9yjxiW4rEYkFCGQWn+K/KEpbpOmgKcku8rcYOVOKL/PDkokJ SmCvIxDmnwuCmW9YW90CGDEm1n4dsRoj -----END CERTIFICATE-----Generated at Sat May 17 04:59:47 2025 by rpki-client