$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: PlzEWDAi1IIjUwTyQbUEqd5i3fgQDDM1udnPL2XGaic= Subject key identifier: 69:5B:C0:BC:FB:BB:24:1B:BA:F1:EF:C3:D7:4C:C4:68:7B:BE:58:10 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 07:52:44 +0000 Manifest this update: Sat 23 Aug 2025 07:52:43 +0000 Manifest next update: Sat 30 Aug 2025 07:52:43 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: qGCKDXGFmRnc6YpcBL3hvZ+4rpI0UOiqPSYqAdeQVmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Aug 23 07:52:43 2025 GMT Not After : Aug 30 07:52:43 2025 GMT Subject: CN=68a9734b-522c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:21:61:9e:57:15:89:55:ba:a6:0c:26:d5: 62:b4:70:d7:75:b8:cb:96:50:81:d2:d2:4a:f2:5f: d6:3f:c5:3b:c3:a9:1e:63:b9:6f:ce:37:fc:82:7b: 30:4b:12:4c:cf:1e:c3:87:ea:00:86:e5:f3:be:4c: 4d:b9:24:ea:05:54:68:c3:60:53:79:1c:3a:78:6a: f6:df:7a:ee:8e:71:aa:4b:56:59:ca:75:e2:7e:a7: c8:26:cd:93:15:40:a8:e2:4a:9f:4a:78:7b:ec:ff: dc:40:d5:f7:b4:b8:17:0c:d4:65:c8:fe:56:c8:80: f6:dc:86:83:b7:ed:1b:7b:f0:dc:af:1f:e6:2f:17: 7c:dc:17:5c:ab:5f:b2:f0:0b:1d:39:ed:8e:43:0c: ee:54:e7:7e:21:dd:c8:fd:a0:42:6c:48:a9:83:ce: 77:e6:51:5d:ce:ce:75:78:d0:d0:89:02:3d:96:1e: 56:64:e8:98:c5:53:91:8a:3e:67:a8:3f:94:05:5d: a4:db:fa:8b:de:2c:af:94:f1:46:1a:7a:26:b2:d1: 97:37:59:23:b9:b0:09:02:cc:0a:25:91:33:c3:ec: 44:a7:90:c3:16:df:d0:eb:07:75:da:a5:41:54:52: 5b:0d:61:5d:1d:9a:05:76:d3:3f:57:f8:29:e8:d1: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:C0:BC:FB:BB:24:1B:BA:F1:EF:C3:D7:4C:C4:68:7B:BE:58:10 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:28:b1:22:0b:94:a2:9e:74:b2:a8:fa:95:c6:cb:79:2d:9a: b4:e0:d1:cf:ee:2b:85:3c:a8:7f:69:2f:71:d2:c1:fc:a6:67: db:ee:93:02:8e:da:e3:30:85:87:48:ba:b8:ef:65:08:8e:2d: 10:1b:b7:f2:0d:04:f4:25:84:5e:4a:b0:54:16:82:1a:a9:19: 14:59:b6:dc:9a:4e:6a:07:06:9f:ce:38:10:2d:57:ad:c2:df: 2c:ec:6f:03:a7:36:39:db:3a:0b:91:7e:df:e0:a8:ee:a8:0d: 60:b9:22:e0:f6:d0:17:dc:f9:da:a7:4d:ba:51:61:05:b2:cd: 79:a4:4a:3d:af:95:ab:62:b6:f5:9d:9a:5f:b6:89:a4:33:61: ad:5e:28:4b:ff:76:f6:69:8c:78:32:aa:f6:90:94:14:66:31: 91:f2:ca:44:ac:85:cc:7c:5a:b4:96:8e:3d:8e:4e:61:a5:ce: 38:02:c5:67:e8:48:80:82:ea:75:7d:a4:6b:0e:29:d6:15:29: ce:fe:62:e8:92:f2:5b:19:aa:22:97:9b:d1:ca:88:fb:9a:33: 31:2c:4d:a1:fc:5d:2b:76:09:b4:f6:29:18:a7:2f:51:e8:41: 2b:11:be:60:da:fd:25:02:7d:aa:cf:2c:7a:5e:09:b6:a0:19: 05:c0:77:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA4MjMwNzUyNDNaFw0yNTA4MzAwNzUyNDNaMBgxFjAUBgNV BAMTDTY4YTk3MzRiLTUyMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfWCFhnlcViVW6pgwm1WK0cNd1uMuWUIHS0kryX9Y/xTvDqR5juW/ON/yCezBL EkzPHsOH6gCG5fO+TE25JOoFVGjDYFN5HDp4avbfeu6OcapLVlnKdeJ+p8gmzZMV QKjiSp9KeHvs/9xA1fe0uBcM1GXI/lbIgPbchoO37Rt78NyvH+YvF3zcF1yrX7Lw Cx057Y5DDO5U534h3cj9oEJsSKmDznfmUV3OznV40NCJAj2WHlZk6JjFU5GKPmeo P5QFXaTb+oveLK+U8UYaeiay0Zc3WSO5sAkCzAolkTPD7ESnkMMW39DrB3XapUFU UlsNYV0dmgV20z9X+Cno0UCTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaVvAvPu7 JBu68e/D10zEaHu+WBAwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFoosSILlKKedLKo+pXGy3ktmrTg0c/uK4U8qH9pL3HSwfymZ9vukwKO 2uMwhYdIurjvZQiOLRAbt/INBPQlhF5KsFQWghqpGRRZttyaTmoHBp/OOBAtV63C 3yzsbwOnNjnbOguRft/gqO6oDWC5IuD20Bfc+dqnTbpRYQWyzXmkSj2vlatitvWd ml+2iaQzYa1eKEv/dvZpjHgyqvaQlBRmMZHyykSshcx8WrSWjj2OTmGlzjgCxWfo SICC6nV9pGsOKdYVKc7+YuiS8lsZqiKXm9HKiPuaMzEsTaH8XSt2CbT2KRinL1Ho QSsRvmDa/SUCfarPLHpeCbagGQXAd+I= -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:56 2025 by rpki-client