$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: LTCL/6xnqfT2KKhDKBNbLJvN/vh2Gwb1W1ak5wBztvY= Subject key identifier: 50:E1:A4:92:6E:02:A3:34:37:CF:C4:A8:2F:FD:81:A0:47:C1:95:45 Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C1F Signing time: Thu 24 Apr 2025 18:34:51 +0000 Manifest this update: Thu 24 Apr 2025 18:34:50 +0000 Manifest next update: Thu 01 May 2025 18:34:50 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: AohqF//GCvtFDbI6QU4xQW9TQnP9in1JzNrVkT0q/pY=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Apr 24 18:34:50 2025 GMT Not After : May 1 18:34:50 2025 GMT Subject: CN=680a844b-116a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:d7:3c:85:6d:2d:1b:3f:9f:27:d8:75:26: 91:1e:c7:16:5c:3a:75:30:93:d6:1a:0f:6c:30:5e: be:e6:12:3e:fe:df:32:1f:fc:e3:39:47:77:3b:e4: 9a:11:d2:d0:f7:45:4c:17:b9:10:d1:3a:aa:e2:bb: 9e:19:55:e9:00:49:e0:4b:fb:5a:6e:65:9e:98:30: 79:8d:14:c7:48:a3:b3:01:e6:ba:9a:ee:9a:0f:f8: e4:a6:af:ce:a2:54:62:64:25:dd:7f:5d:b4:64:ec: f4:f8:cc:a6:94:cc:1a:66:76:ba:ab:04:0b:53:ed: ed:28:08:aa:e6:f5:4b:07:86:d5:f3:4b:9e:25:7a: 26:27:a5:94:b7:1b:f8:a8:fd:7d:c0:f9:f5:6c:fc: 32:83:e3:f4:99:58:bb:c9:b9:66:e1:f7:a7:1b:87: 8b:95:ca:6f:2b:5d:f2:cb:82:af:5a:3a:f7:47:84: 32:f9:07:c4:f9:71:33:7f:bb:50:b3:e6:64:d0:6c: 98:ff:33:0d:fe:43:34:aa:e4:b0:86:38:e8:d3:62: 26:2d:32:7c:45:75:cf:52:39:af:26:67:d7:07:b3: 4d:86:8b:56:d1:e7:81:de:5c:27:29:92:90:02:92: 97:eb:4d:0d:3a:fd:56:5f:84:17:4a:6f:90:04:68: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:A4:92:6E:02:A3:34:37:CF:C4:A8:2F:FD:81:A0:47:C1:95:45 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:23:96:29:f9:e3:29:0f:30:dc:62:ae:41:b4:14:5b:a2:b6: c2:e6:9c:fc:83:c8:b1:bb:ac:1f:76:e6:a7:72:2a:87:17:40: 31:aa:5c:29:88:b1:40:65:fa:eb:04:ca:18:5f:a0:ef:e0:8a: f9:d2:18:d5:d5:99:6b:15:ca:48:01:8e:cf:29:d9:0d:20:b8: b5:42:94:ff:5d:0a:95:47:30:7f:e3:51:ae:14:2c:ed:5b:9f: f2:e0:2b:e3:73:33:93:ca:a4:64:66:ab:c4:a5:1c:de:99:a7: 0b:e2:59:e0:7c:16:b0:9a:8c:86:ce:e2:da:e8:f4:ba:ba:41: 94:92:e6:61:5d:98:3c:43:8a:6b:f3:13:e0:dc:bf:33:dd:fd: 5a:15:e0:9b:c3:a3:d7:21:0d:9a:3d:97:95:53:a1:9e:0e:1b: d3:5c:2a:4c:ae:2b:7e:4c:d6:3b:1e:e0:27:f4:c8:31:55:a9: a3:98:69:f7:1f:2b:2e:8b:9e:ad:88:e2:4b:ff:7a:81:c1:50: eb:a8:5e:3b:c4:ca:d0:0c:a2:47:a4:cf:65:04:ca:ca:9a:41: 60:56:fa:e2:8e:ad:5b:26:45:3a:1e:85:c5:b5:11:da:0c:60: c1:56:26:ab:99:69:82:5a:66:82:b1:b5:03:a7:4c:5c:b1:50: ca:60:76:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUwNDI0MTgzNDUwWhcNMjUwNTAxMTgzNDUwWjAYMRYwFAYD VQQDEw02ODBhODQ0Yi0xMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+jXPIVtLRs/nyfYdSaRHscWXDp1MJPWGg9sMF6+5hI+/t8yH/zjOUd3O+Sa EdLQ90VMF7kQ0Tqq4rueGVXpAEngS/tabmWemDB5jRTHSKOzAea6mu6aD/jkpq/O olRiZCXdf120ZOz0+MymlMwaZna6qwQLU+3tKAiq5vVLB4bV80ueJXomJ6WUtxv4 qP19wPn1bPwyg+P0mVi7yblm4fenG4eLlcpvK13yy4KvWjr3R4Qy+QfE+XEzf7tQ s+Zk0GyY/zMN/kM0quSwhjjo02ImLTJ8RXXPUjmvJmfXB7NNhotW0eeB3lwnKZKQ ApKX600NOv1WX4QXSm+QBGhUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDhpJJu AqM0N8/EqC/9gaBHwZVFMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTI5Yp+eMpDzDcYq5BtBRborbC5pz8g8ixu6wfduanciqHF0Axqlwp iLFAZfrrBMoYX6Dv4Ir50hjV1ZlrFcpIAY7PKdkNILi1QpT/XQqVRzB/41GuFCzt W5/y4CvjczOTyqRkZqvEpRzemacL4lngfBawmoyGzuLa6PS6ukGUkuZhXZg8Q4pr 8xPg3L8z3f1aFeCbw6PXIQ2aPZeVU6GeDhvTXCpMrit+TNY7HuAn9MgxVamjmGn3 Hysui56tiOJL/3qBwVDrqF47xMrQDKJHpM9lBMrKmkFgVvrijq1bJkU6HoXFtRHa DGDBViarmWmCWmaCsbUDp0xcsVDKYHbK -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:52 2025 by rpki-client