$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: rioGT9i8dZf0kRTeNF89zEtObxUSPSGbhNHxkc4htEw= Subject key identifier: 0F:A5:94:18:1E:F9:55:71:34:58:25:40:AF:F1:30:BB:55:E2:55:65 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 4F Signing time: Sun 19 Oct 2025 10:41:14 +0000 Manifest this update: Sun 19 Oct 2025 10:41:13 +0000 Manifest next update: Sun 26 Oct 2025 10:41:13 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: UbadYauqro/N3FsfzbyueAbAQwVaXKKd5OqOzj31LRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Oct 19 10:41:13 2025 GMT Not After : Oct 26 10:41:13 2025 GMT Subject: CN=68f4c04a-6525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:9d:09:57:36:16:a4:2e:64:0e:15:cd:7f: 5a:22:33:af:09:3e:99:6a:90:0b:ef:ff:60:c5:df: 3f:ae:fd:2a:89:5f:e3:69:8e:94:f2:4a:ad:e5:2e: e8:10:12:c3:b4:7e:b5:06:a2:65:f3:85:27:cc:53: 17:5b:a8:72:d4:c1:d6:f3:bc:87:cc:7e:df:3a:63: 50:34:3c:75:ea:20:6e:d1:bc:8f:7a:a5:e6:1e:43: 6f:80:68:91:71:dd:dd:42:fc:e9:4f:46:ff:96:bf: 1c:b9:2f:a7:b4:58:bd:d5:84:5d:68:34:59:74:a6: 29:81:ed:2d:f7:5e:22:0a:44:83:bb:b2:bb:1a:ce: 75:db:4c:e7:56:9f:24:87:78:87:96:d9:c4:7b:0a: 75:b4:ab:0f:8a:f5:fe:3d:c4:52:50:83:c8:81:a1: 65:b9:00:04:d3:2f:2e:48:55:87:84:79:2b:fd:e4: 1b:d2:74:c1:2f:e5:a6:78:85:39:50:3e:8b:14:7e: dd:af:6e:21:25:a2:7f:64:11:ea:ba:4d:eb:49:95: 6b:86:f0:fa:71:bc:84:93:a2:ed:89:e6:62:ca:68: 60:70:48:3c:f3:53:ae:2f:3c:fa:53:79:30:18:05: fc:7a:f6:dd:bb:0e:e9:b4:8a:5e:0e:54:08:3f:f5: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A5:94:18:1E:F9:55:71:34:58:25:40:AF:F1:30:BB:55:E2:55:65 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ff:bc:9c:0a:7f:c3:32:a1:cf:c0:c9:0d:17:b4:b2:c6:e0: ad:b5:60:df:65:94:3c:c0:2c:30:2c:a0:08:3c:0b:a4:28:57: d0:df:e4:a1:7e:de:65:6e:e2:86:53:a8:66:ee:83:4b:39:3a: ee:87:bd:d1:18:92:0a:13:b6:0a:dd:d0:76:64:39:94:0c:1a: aa:b1:61:fd:6b:1e:a8:6b:1e:a9:aa:97:67:56:c1:85:ea:93: 19:cd:6a:95:a5:9c:e8:45:ec:76:36:c8:54:cd:02:b7:81:30: 9a:68:5e:bc:ed:da:17:f9:f3:38:16:2b:57:7c:38:10:cc:65: 82:de:9a:ff:2c:1d:55:11:2b:19:fe:98:a6:56:b2:d7:77:ae: f8:00:c5:8d:5e:1f:ca:d2:19:4f:e6:98:77:ee:b6:92:00:82: 7d:be:4f:eb:8e:42:7f:cd:2b:ad:8f:9f:49:bc:05:6a:8f:57: 45:c3:ac:8c:bd:ff:d3:05:56:cd:1a:6b:00:09:b0:27:05:3d: d8:d5:b8:ff:f5:56:ac:d4:9c:ec:59:95:cb:07:69:ce:3f:ad: 48:0e:66:54:28:0b:4c:9c:fb:ed:dc:1e:bd:cd:c6:ab:6d:c6: 61:fa:7d:36:f8:f6:b4:37:19:11:9c:0a:d7:69:73:49:ad:d4: b4:fc:3b:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTEwMTkxMDQxMTNaFw0yNTEwMjYxMDQxMTNaMBgxFjAUBgNV BAMTDTY4ZjRjMDRhLTY1MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYS50JVzYWpC5kDhXNf1oiM68JPplqkAvv/2DF3z+u/SqJX+NpjpTySq3lLugQ EsO0frUGomXzhSfMUxdbqHLUwdbzvIfMft86Y1A0PHXqIG7RvI96peYeQ2+AaJFx 3d1C/OlPRv+Wvxy5L6e0WL3VhF1oNFl0pimB7S33XiIKRIO7srsaznXbTOdWnySH eIeW2cR7CnW0qw+K9f49xFJQg8iBoWW5AATTLy5IVYeEeSv95BvSdMEv5aZ4hTlQ PosUft2vbiElon9kEeq6TetJlWuG8PpxvISTou2J5mLKaGBwSDzzU64vPPpTeTAY Bfx69t27Dum0il4OVAg/9cl9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD6WUGB75 VXE0WCVAr/Ewu1XiVWUwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHX/vJwKf8Myoc/AyQ0XtLLG4K21YN9llDzALDAsoAg8C6QoV9Df5KF+ 3mVu4oZTqGbug0s5Ou6HvdEYkgoTtgrd0HZkOZQMGqqxYf1rHqhrHqmql2dWwYXq kxnNapWlnOhF7HY2yFTNAreBMJpoXrzt2hf58zgWK1d8OBDMZYLemv8sHVURKxn+ mKZWstd3rvgAxY1eH8rSGU/mmHfutpIAgn2+T+uOQn/NK62Pn0m8BWqPV0XDrIy9 /9MFVs0aawAJsCcFPdjVuP/1VqzUnOxZlcsHac4/rUgOZlQoC0yc++3cHr3Nxqtt xmH6fTb49rQ3GRGcCtdpc0mt1LT8O64= -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:18 2025 by rpki-client