$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: BhlNQxDEILTpoG7DR9YqvwgQIajJq8roFggaXztvamM= Subject key identifier: 02:EA:B2:5F:20:E9:56:67:2B:A1:66:6A:CD:A2:68:9E:4A:18:0B:B2 Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 04E4 Signing time: Tue 04 Nov 2025 23:52:10 +0000 Manifest this update: Tue 04 Nov 2025 23:52:10 +0000 Manifest next update: Tue 11 Nov 2025 23:52:10 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: /RBdLjAznKUTpDMiMO7Xq0DSZrrDV1ZLhT86gYmHkI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: Nov 4 23:52:10 2025 GMT Not After : Nov 11 23:52:10 2025 GMT Subject: CN=690a91aa-f25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:18:08:91:be:15:d5:0b:de:b3:53:d1:ac: a1:44:37:a2:40:c7:e8:60:2c:65:09:95:ad:54:6f: 43:22:ae:94:cf:ad:8b:7a:4d:b2:11:08:74:51:91: d6:84:1b:7e:f7:20:f4:ae:a0:65:5e:a4:90:ff:a4: a9:66:e1:a5:f4:b1:9d:a7:af:47:8e:86:32:19:73: 16:59:c7:66:04:40:c0:19:4d:77:ee:29:1b:31:4f: d6:08:44:72:3f:d2:91:0b:a3:99:47:1c:cd:85:7b: e3:42:10:6f:15:a8:16:65:e9:8f:12:56:cd:80:d4: cd:cb:b8:3e:99:9e:49:fc:9e:83:c8:00:8e:ea:51: 35:2e:87:a2:e9:6e:a2:49:a8:51:8d:6e:4d:fc:5e: fa:c7:be:7f:65:35:23:64:85:d5:a2:49:c2:4b:28: 7c:d6:89:9d:bc:cf:56:cd:dd:26:81:7c:c5:22:98: 28:22:08:43:c6:5d:86:48:1f:60:ec:14:ae:80:50: 50:86:dc:ab:2b:92:18:3c:5a:bb:aa:cd:bb:4d:a3: 06:11:45:d8:1c:67:82:fe:7e:35:2c:b4:ee:78:20: d2:5a:a9:ce:93:39:47:b5:b8:45:05:a1:4d:1c:a1: 50:0c:4e:ff:d8:9c:90:20:9c:65:7f:d1:f1:97:d2: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:B2:5F:20:E9:56:67:2B:A1:66:6A:CD:A2:68:9E:4A:18:0B:B2 X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:34:e2:88:2f:20:44:ff:d7:ff:ea:01:8a:be:1e:f6:99:c0: d4:f2:00:c5:3c:e3:08:25:dc:ed:e9:18:77:95:5a:7b:33:77: a5:19:5d:84:a7:dd:54:3b:f3:e7:dd:f7:ad:1c:f0:c7:81:50: cc:be:ab:d2:0b:7b:23:84:31:15:84:47:32:04:80:f8:d8:4f: 9e:78:aa:60:14:af:c3:0e:46:15:0f:7f:42:f5:95:2a:f9:7d: 41:b2:25:9c:17:db:4f:51:37:31:32:0a:76:bd:ba:bd:7a:9a: 1b:45:67:99:ed:2f:34:f3:18:4c:10:69:42:e8:de:bb:db:53: a2:5f:98:13:a8:58:fa:15:a4:0a:4a:5f:46:78:4e:25:c6:6e: f3:05:ca:51:d9:fc:d1:4d:ce:26:54:7d:f6:c1:d0:ab:15:32: 85:c2:b5:18:10:0d:c7:d3:8a:b0:39:94:5b:6b:08:b3:ca:f5: 74:a8:81:a8:a0:8f:09:1f:f5:c7:96:cd:bc:36:b3:e5:9e:e0: 42:68:06:48:bd:49:35:60:e2:fe:a9:fd:d8:d8:e1:35:c6:4d: 38:2e:f5:77:52:2a:66:8f:88:69:2e:d7:5e:19:a8:90:7d:d4: 0e:96:26:90:bd:f9:ed:c5:bd:0d:2d:53:31:7c:14:df:3c:ca: 28:6a:f0:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUxMTA0MjM1MjEwWhcNMjUxMTExMjM1MjEwWjAYMRYwFAYD VQQDEw02OTBhOTFhYS1mMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojQYCJG+FdUL3rNT0ayhRDeiQMfoYCxlCZWtVG9DIq6Uz62Lek2yEQh0UZHW hBt+9yD0rqBlXqSQ/6SpZuGl9LGdp69HjoYyGXMWWcdmBEDAGU137ikbMU/WCERy P9KRC6OZRxzNhXvjQhBvFagWZemPElbNgNTNy7g+mZ5J/J6DyACO6lE1Loei6W6i SahRjW5N/F76x75/ZTUjZIXVoknCSyh81omdvM9Wzd0mgXzFIpgoIghDxl2GSB9g 7BSugFBQhtyrK5IYPFq7qs27TaMGEUXYHGeC/n41LLTueCDSWqnOkzlHtbhFBaFN HKFQDE7/2JyQIJxlf9Hxl9JjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALqsl8g 6VZnK6Fmas2iaJ5KGAuyMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANNOKILyBE/9f/6gGKvh72mcDU8gDFPOMIJdzt6Rh3lVp7M3elGV2E p91UO/Pn3fetHPDHgVDMvqvSC3sjhDEVhEcyBID42E+eeKpgFK/DDkYVD39C9ZUq +X1BsiWcF9tPUTcxMgp2vbq9epobRWeZ7S808xhMEGlC6N6721OiX5gTqFj6FaQK Sl9GeE4lxm7zBcpR2fzRTc4mVH32wdCrFTKFwrUYEA3H04qwOZRbawizyvV0qIGo oI8JH/XHls28NrPlnuBCaAZIvUk1YOL+qf3Y2OE1xk04LvV3Uipmj4hpLtdeGaiQ fdQOliaQvfntxb0NLVMxfBTfPMooavC4 -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:18 2025 by rpki-client