$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: 8hnkPFIxs6Eg+TQmsOzVZrq8SL3jIaVs2feHb2dXHFM= Subject key identifier: 0E:4D:73:FA:EB:BD:D4:88:89:24:2C:5E:6E:17:34:85:B5:48:F9:60 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 18 Signing time: Thu 03 Jul 2025 08:13:52 +0000 Manifest this update: Thu 03 Jul 2025 08:13:52 +0000 Manifest next update: Thu 10 Jul 2025 08:13:52 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: SzGS1vRg1ibtyPPgg1MRqQh2FVSKA0A8W6MBWUNnHVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Jul 3 08:13:52 2025 GMT Not After : Jul 10 08:13:52 2025 GMT Subject: CN=68663bc0-9828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:8f:dd:a3:d2:b9:51:9d:bb:a3:d7:d2:69: 50:ee:0f:86:7e:a4:74:b5:2e:69:3b:61:9a:9d:0c: b4:58:64:9c:ce:3e:6d:09:4f:a7:4c:10:ee:ba:ee: 8c:3c:ac:92:14:c4:3a:df:02:4e:0d:d8:02:e4:77: 79:8d:8b:26:22:03:48:df:f4:47:e8:a7:94:e4:2d: 24:5b:63:53:ce:84:44:66:f5:5d:aa:2f:89:c0:9d: da:0c:ff:0b:58:b9:eb:0c:30:93:1f:74:f7:f4:88: a9:3e:e1:12:15:a7:b0:79:2a:71:0b:40:2f:6f:16: b8:40:de:96:7c:78:f5:19:40:37:2a:48:2d:ce:9d: 0d:c1:a1:25:39:88:36:5c:8d:ac:77:b3:57:6b:87: 78:66:99:45:69:67:16:7b:3f:92:31:1a:d2:31:9a: 4a:17:8c:cf:1a:8f:82:6c:a4:03:12:c4:9f:9e:73: 84:5b:99:18:e4:90:7b:30:ca:8d:06:20:cd:0c:7d: 1a:df:fb:4e:35:57:b7:06:da:f6:35:17:9d:cd:81: e0:59:36:89:c1:7e:98:84:8d:77:de:44:c0:e4:11: d5:7d:08:0f:26:93:d8:b3:53:c6:69:8e:1c:f1:f5: dc:e1:b1:26:eb:94:2f:22:23:0f:76:9e:f4:70:e7: 28:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:73:FA:EB:BD:D4:88:89:24:2C:5E:6E:17:34:85:B5:48:F9:60 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9b:68:56:17:e2:9f:d3:32:55:33:ce:0e:39:2a:28:d5:85: 47:3e:5e:12:c3:65:00:c7:de:06:86:43:4c:bf:32:3b:41:8a: 09:bd:a4:a0:b6:39:f8:93:de:c2:8c:15:f9:3f:b1:92:c8:4f: c5:67:c3:b6:a6:39:04:e3:7d:dd:e2:65:59:fe:ca:d3:52:9f: 34:ad:ee:7f:00:f2:c2:23:33:92:9e:8c:6d:34:4d:69:b0:04: a6:e2:c2:70:0b:de:3a:6b:d0:e8:4e:59:34:5d:eb:0d:e0:3d: 0c:0a:22:ac:12:aa:ac:d2:e8:2d:b3:95:a4:7f:0e:e2:53:39: 79:86:36:0b:75:b4:0a:af:87:8d:a7:cc:a1:bc:b3:00:bc:6d: 64:8a:65:bd:b6:3a:f4:a4:20:61:e2:52:2e:8a:8c:d9:99:b1: 11:ec:d0:5d:cb:ca:62:87:91:87:c4:7e:72:44:1f:36:36:4a: 5a:6b:d0:7c:9d:cb:c5:11:86:57:dd:ab:b4:28:33:5e:bd:ab: 13:4b:e3:84:83:51:4a:4f:e3:71:01:29:53:79:c3:0f:ac:78: d5:89:0b:c0:0d:56:35:01:38:73:43:9e:01:4d:9e:b9:88:81: 60:13:e7:16:41:97:16:42:ac:5c:a3:d4:1d:96:d0:f3:d1:4b: 4e:f5:33:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA3MDMwODEzNTJaFw0yNTA3MTAwODEzNTJaMBgxFjAUBgNV BAMTDTY4NjYzYmMwLTk4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jI/do9K5UZ27o9fSaVDuD4Z+pHS1Lmk7YZqdDLRYZJzOPm0JT6dMEO667ow8 rJIUxDrfAk4N2ALkd3mNiyYiA0jf9Efop5TkLSRbY1POhERm9V2qL4nAndoM/wtY uesMMJMfdPf0iKk+4RIVp7B5KnELQC9vFrhA3pZ8ePUZQDcqSC3OnQ3BoSU5iDZc jax3s1drh3hmmUVpZxZ7P5IxGtIxmkoXjM8aj4JspAMSxJ+ec4RbmRjkkHswyo0G IM0MfRrf+041V7cG2vY1F53NgeBZNonBfpiEjXfeRMDkEdV9CA8mk9izU8Zpjhzx 9dzhsSbrlC8iIw92nvRw5yhzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDk1z+uu9 1IiJJCxebhc0hbVI+WAwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI2baFYX4p/TMlUzzg45KijVhUc+XhLDZQDH3gaGQ0y/MjtBigm9pKC2 OfiT3sKMFfk/sZLIT8Vnw7amOQTjfd3iZVn+ytNSnzSt7n8A8sIjM5KejG00TWmw BKbiwnAL3jpr0OhOWTRd6w3gPQwKIqwSqqzS6C2zlaR/DuJTOXmGNgt1tAqvh42n zKG8swC8bWSKZb22OvSkIGHiUi6KjNmZsRHs0F3LymKHkYfEfnJEHzY2Slpr0Hyd y8URhlfdq7QoM169qxNL44SDUUpP43EBKVN5ww+seNWJC8ANVjUBOHNDngFNnrmI gWAT5xZBlxZCrFyj1B2W0PPRS071M/w= -----END CERTIFICATE-----Generated at Thu Jul 3 23:09:15 2025 by rpki-client