$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: NDFWCnXC1WVbH2Id/ibp3fjvJqZCva4jwlEImQKKTj8= Subject key identifier: D2:79:15:2D:82:6E:F0:DA:4A:86:D1:7E:8B:56:45:1F:7D:42:3B:94 Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 1048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 1039 Signing time: Sun 10 Aug 2025 17:25:59 +0000 Manifest this update: Sun 10 Aug 2025 17:25:58 +0000 Manifest next update: Sun 17 Aug 2025 17:25:58 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: uWM4f9MQYiVdeGAgLX67R/41k0KoZTovQ/icGeIZrXU=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4168 (0x1048) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: Aug 10 17:25:58 2025 GMT Not After : Aug 17 17:25:58 2025 GMT Subject: CN=6898d626-7efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c2:9d:b9:26:f2:86:d2:1a:a6:89:f4:6a:8c: b8:31:be:27:ca:87:8f:a2:19:bc:16:4f:f1:8b:22: 75:f6:d1:0c:27:c9:fb:42:30:73:18:fa:0e:96:00: 6f:e1:08:51:ff:88:ab:cb:12:67:02:b5:6d:86:76: be:40:fc:c9:47:0f:b2:65:de:65:42:ec:de:ff:a0: a2:df:e3:5e:ef:f9:63:54:52:cc:1f:35:62:02:7c: d8:8f:f1:85:34:2f:cc:73:0a:6d:a3:13:98:52:e2: b4:4a:cd:4a:d6:48:5e:91:4f:dd:d5:4d:cd:ba:6a: 8b:b8:c4:4d:5c:6c:59:0e:ff:e5:fd:20:e1:5c:46: 0b:fa:e5:2e:8a:c6:f4:a9:a4:13:bc:1e:9d:e7:27: 71:04:76:e0:a2:f9:21:b3:74:c4:b3:15:7a:8c:7b: ed:ca:c6:16:c3:ea:dd:7d:0b:29:14:bb:38:ca:96: e3:d3:44:8a:31:21:7a:f3:e4:e8:a0:1d:de:d1:dc: 3c:27:64:55:12:76:a9:9d:4a:d3:dd:ab:bc:71:65: f7:d2:23:03:ee:0b:ec:9b:2f:c6:14:39:70:35:5d: 2f:36:bb:e9:0f:96:06:5e:1d:dc:28:51:36:8d:45: 4a:d6:48:12:03:6d:9f:15:61:47:51:19:96:dd:fc: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:79:15:2D:82:6E:F0:DA:4A:86:D1:7E:8B:56:45:1F:7D:42:3B:94 X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b3:ff:e5:a0:78:4b:ad:80:28:72:b7:68:9a:9f:97:c4:5b: 99:5a:30:6a:33:aa:bb:dc:2e:69:e0:52:ee:df:71:11:eb:af: 55:7e:a7:a4:af:5e:94:51:ed:91:74:d8:9f:5c:cf:66:1d:6e: f9:6c:33:3b:16:a4:4d:47:18:c7:53:5c:4f:f9:93:1b:37:7f: 18:48:8c:2e:58:3a:c5:42:67:8a:c0:ef:50:ec:27:a4:aa:2b: 94:30:db:32:03:f5:79:56:5b:5e:1f:39:dc:a5:4d:95:ef:bd: b5:1f:ed:ed:b8:d9:7b:45:9d:6d:89:9c:a9:4b:9f:5c:60:53: 2e:90:94:11:8e:7a:c5:4e:95:51:d4:7c:dc:70:e0:f3:3b:db: 4d:2e:5b:d2:06:bb:24:7e:80:c3:98:0b:85:ae:b1:79:ac:35: 13:0c:fa:41:fc:40:c8:6a:ba:91:d5:64:3d:9a:2e:c6:ae:c8: 8c:fa:0f:66:be:f9:06:b6:90:08:f4:38:1a:16:3d:b7:73:83: 29:8c:a1:36:a6:8a:2c:18:bb:7b:af:8e:5e:52:a1:c6:c4:93: 9a:db:d7:4e:d4:40:e2:f2:27:73:f5:24:91:1a:93:a4:d0:e2: fe:f8:0b:bf:a5:47:68:4d:99:38:5f:76:18:a3:ec:e3:00:1f: 55:d9:f5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjUwODEwMTcyNTU4WhcNMjUwODE3MTcyNTU4WjAYMRYwFAYD VQQDEw02ODk4ZDYyNi03ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cKduSbyhtIapon0aoy4Mb4nyoePohm8Fk/xiyJ19tEMJ8n7QjBzGPoOlgBv 4QhR/4iryxJnArVthna+QPzJRw+yZd5lQuze/6Ci3+Ne7/ljVFLMHzViAnzYj/GF NC/McwptoxOYUuK0Ss1K1khekU/d1U3NumqLuMRNXGxZDv/l/SDhXEYL+uUuisb0 qaQTvB6d5ydxBHbgovkhs3TEsxV6jHvtysYWw+rdfQspFLs4ypbj00SKMSF68+To oB3e0dw8J2RVEnapnUrT3au8cWX30iMD7gvsmy/GFDlwNV0vNrvpD5YGXh3cKFE2 jUVK1kgSA22fFWFHURmW3fw89QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ5FS2C bvDaSobRfotWRR99QjuUMB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCs//loHhLrYAocrdomp+XxFuZWjBqM6q73C5p4FLu33ER669Vfqek r16UUe2RdNifXM9mHW75bDM7FqRNRxjHU1xP+ZMbN38YSIwuWDrFQmeKwO9Q7Cek qiuUMNsyA/V5VlteHzncpU2V7721H+3tuNl7RZ1tiZypS59cYFMukJQRjnrFTpVR 1HzccODzO9tNLlvSBrskfoDDmAuFrrF5rDUTDPpB/EDIarqR1WQ9mi7GrsiM+g9m vvkGtpAI9DgaFj23c4MpjKE2poosGLt7r45eUqHGxJOa29dO1EDi8idz9SSRGpOk 0OL++Au/pUdoTZk4X3YYo+zjAB9V2fWE -----END CERTIFICATE-----Generated at Mon Aug 11 09:53:43 2025 by rpki-client