$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: D0WaNhroSzUr1YIemcy3uLz6MkXkmN/suZWFvYEamZU= Subject key identifier: 12:58:E5:F1:B2:35:31:30:EF:80:0B:C5:B3:11:35:13:B9:81:E2:F4 Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 06BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 5304 Signing time: Fri 22 Aug 2025 15:06:21 +0000 Manifest this update: Fri 22 Aug 2025 15:06:21 +0000 Manifest next update: Fri 29 Aug 2025 15:06:21 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 6GDHFT/O9nW40uVinwe2NIb0PE7lJTEBC4RMO4OVPvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: Aug 22 15:06:21 2025 GMT Not After : Aug 29 15:06:21 2025 GMT Subject: CN=68a8876d-93ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:b2:a9:07:ad:85:49:ac:e4:7a:9b:a1:0a: 9e:b5:34:d7:43:92:51:ee:7f:d1:0c:e8:71:83:fc: 4c:8b:0d:4f:5c:46:81:a1:2a:93:35:97:33:2f:58: 6f:6a:e5:06:93:84:fc:f0:82:8d:25:91:ca:6b:24: cd:d0:b6:34:72:f6:6f:98:a8:3d:07:43:5b:1c:b7: ef:da:ce:c3:0c:91:59:c2:5d:96:22:8f:d8:aa:2e: fa:51:65:da:b9:b8:f9:bb:53:49:4d:07:17:b9:77: 2f:cb:98:a1:85:eb:e4:ae:9f:90:bf:85:fd:78:79: f3:8a:94:5e:6c:32:a7:6e:61:8e:86:4d:91:fa:71: 75:a6:d0:6e:e9:67:35:f1:88:d8:e4:75:f5:69:4f: 34:b0:1e:0e:ae:44:e0:1b:89:9f:32:d2:a8:95:08: 4c:a8:69:6d:ff:fb:fd:58:ac:73:16:50:dc:98:98: 40:10:6e:80:6f:7a:fb:12:1e:c5:4b:fe:ca:82:62: b8:be:55:93:d1:13:bc:12:14:1c:40:46:54:25:4d: 5f:20:79:3a:29:3c:cb:f9:17:02:bd:4b:05:f6:f8: 85:f3:89:29:85:13:a7:5b:6d:6d:53:3d:07:2e:f7: 98:24:3a:f0:5f:7a:aa:4b:83:b0:59:07:17:44:3e: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:58:E5:F1:B2:35:31:30:EF:80:0B:C5:B3:11:35:13:B9:81:E2:F4 X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ec:79:ec:a8:de:58:f8:b2:74:52:85:13:13:f4:8e:ee:86: aa:d9:12:c5:02:92:a0:b1:53:de:32:07:7d:f5:35:fe:29:bc: c1:66:89:5b:7f:1e:cd:d3:47:74:b0:3b:7a:49:f1:e2:76:df: 5e:19:d3:d4:0c:bf:70:36:de:30:b1:bf:fb:8f:52:dd:2e:56: 97:5a:fc:44:a7:57:87:45:98:4f:60:f8:b1:11:c8:11:2c:e3: 3b:b2:9a:0d:8e:9f:94:b5:ea:78:ac:98:d8:f0:6b:0c:67:21: 99:66:cf:24:a2:6c:77:51:d0:ed:28:08:a7:33:7f:c0:07:67: bb:bb:8b:e0:5d:c7:77:3b:87:4a:69:82:3e:63:c1:ea:72:35: b5:72:8e:44:e1:4a:39:3d:da:68:1a:7a:d5:e7:cf:18:d1:3f: 18:b2:5f:b7:c2:ff:26:e0:b2:76:9e:40:c1:b3:50:f1:fe:9f: d5:bc:df:6b:c3:75:94:a9:64:5c:2f:7d:65:3c:ef:d2:e4:d5: b2:23:04:2c:51:ed:eb:c4:93:91:ba:82:76:e4:bf:09:6e:84: bf:d4:ec:7e:44:1a:40:ef:14:85:ea:c0:81:fa:ce:8e:a5:9b: f5:41:60:b7:f8:a5:d3:bf:50:87:2f:72:5b:44:48:da:8b:bc: b3:83:a6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjUwODIyMTUwNjIxWhcNMjUwODI5MTUwNjIxWjAYMRYwFAYD VQQDEw02OGE4ODc2ZC05M2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubOyqQethUms5HqboQqetTTXQ5JR7n/RDOhxg/xMiw1PXEaBoSqTNZczL1hv auUGk4T88IKNJZHKayTN0LY0cvZvmKg9B0NbHLfv2s7DDJFZwl2WIo/Yqi76UWXa ubj5u1NJTQcXuXcvy5ihhevkrp+Qv4X9eHnzipRebDKnbmGOhk2R+nF1ptBu6Wc1 8YjY5HX1aU80sB4OrkTgG4mfMtKolQhMqGlt//v9WKxzFlDcmJhAEG6Ab3r7Eh7F S/7KgmK4vlWT0RO8EhQcQEZUJU1fIHk6KTzL+RcCvUsF9viF84kphROnW21tUz0H LveYJDrwX3qqS4OwWQcXRD7gBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJY5fGy NTEw74ALxbMRNRO5geL0MB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv7HnsqN5Y+LJ0UoUTE/SO7oaq2RLFApKgsVPeMgd99TX+KbzBZolb fx7N00d0sDt6SfHidt9eGdPUDL9wNt4wsb/7j1LdLlaXWvxEp1eHRZhPYPixEcgR LOM7spoNjp+Utep4rJjY8GsMZyGZZs8komx3UdDtKAinM3/AB2e7u4vgXcd3O4dK aYI+Y8HqcjW1co5E4Uo5PdpoGnrV588Y0T8Ysl+3wv8m4LJ2nkDBs1Dx/p/VvN9r w3WUqWRcL31lPO/S5NWyIwQsUe3rxJORuoJ25L8JboS/1Ox+RBpA7xSF6sCB+s6O pZv1QWC3+KXTv1CHL3JbREjai7yzg6YL -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:29 2025 by rpki-client