$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: oOtGCtcjPkm5By6JjjYI3C1KDX+AVinkiTAo7q3DM6s= Subject key identifier: 9C:5E:A2:7F:DA:73:A6:EF:87:1D:EC:15:1B:62:0C:4D:48:B9:08:2F Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0C80 Signing time: Sun 02 Nov 2025 18:29:50 +0000 Manifest this update: Sun 02 Nov 2025 18:29:49 +0000 Manifest next update: Sun 09 Nov 2025 18:29:49 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: zyM5GkEy5NuTNJJT6sOb4efdrCBGx28qwMigEeynZAY=) 2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: xcYwEU1Ftnj8dFt6vaWPu1zA9QDrpd8bMuPkYaOoGl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Nov 2 18:29:49 2025 GMT Not After : Nov 9 18:29:49 2025 GMT Subject: CN=6907a31e-19f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:33:7d:00:1b:96:5c:5a:ac:c6:7b:25:f8: 58:13:1a:04:cd:57:bb:b7:8f:56:1c:ea:34:74:aa: 0b:0f:97:c7:34:df:95:8b:71:14:43:48:66:5b:50: b8:5d:0c:c1:96:0d:33:52:b7:f1:f7:c4:77:a0:16: d3:d0:2c:d5:1e:3e:3d:e3:ec:b5:42:03:30:90:80: 40:10:4f:40:d5:f3:f0:b0:84:6d:e8:3b:29:89:97: 2f:62:30:7e:b4:5d:b1:97:58:4a:88:eb:22:65:20: b2:0b:5e:1b:2d:32:a5:e0:92:e2:93:da:6b:97:e6: 47:35:eb:65:da:c4:4f:1e:42:1e:ee:68:e5:55:a4: c6:52:ef:b0:4a:71:67:fd:72:70:c8:4a:96:93:17: 35:36:fa:66:88:e4:85:2b:be:78:c3:99:38:1b:a7: 9c:87:82:23:17:56:e0:15:18:54:d7:d6:bf:b9:a2: 26:a7:d5:ef:e5:67:98:01:a6:e4:a8:02:39:d7:1e: 3e:ab:ed:8a:74:99:71:0b:7e:9e:27:56:e5:a4:0b: 28:26:38:27:41:50:a5:20:8d:ca:94:a1:85:e4:18: 6a:ea:9e:4a:a2:d4:65:c2:8a:b7:f4:f9:4b:3f:88: d0:e0:df:19:ee:7b:c9:45:33:7b:0c:53:70:2e:a7: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5E:A2:7F:DA:73:A6:EF:87:1D:EC:15:1B:62:0C:4D:48:B9:08:2F X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8c:ef:42:9b:82:be:be:08:5d:53:27:c5:e8:5f:ca:56:7e: 3a:8e:05:63:e6:8a:0c:c3:20:8d:90:1d:cf:ee:84:bd:09:dc: b3:30:2d:e3:28:9d:b3:2f:95:06:82:1e:ee:d4:80:f2:d1:08: dc:3e:9c:7c:90:66:3a:75:91:c7:ca:2a:17:c1:3c:99:69:4d: fe:66:df:5a:89:5d:0e:0f:95:27:3e:78:0e:df:c2:cd:0d:36: 02:75:da:6d:f3:99:91:94:4c:f6:b4:ab:89:db:a9:4b:cf:f0: 19:55:6b:86:95:61:ce:aa:37:66:af:9c:62:ab:28:82:c9:8e: 0f:1c:41:41:59:0a:b5:ae:dd:21:cc:ed:85:65:b3:51:96:46: 23:ba:53:c7:1d:56:be:37:87:28:8d:5c:75:81:03:09:5b:63: 48:d0:d3:0a:e7:47:c6:76:9a:25:2e:59:d1:26:b2:99:fc:a9: ce:6c:da:50:ae:21:36:3b:42:a1:a6:ec:a3:6c:db:d0:25:e7: aa:4a:81:df:c6:b7:14:39:b7:b8:17:4f:19:fa:12:5a:01:02: 93:7d:14:a2:8d:1e:3b:a7:db:4f:55:0e:1b:9d:6a:28:a3:ee: ed:33:10:75:63:f4:61:ec:96:d6:c4:26:02:01:e9:f4:66:8e: ac:9f:0d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUxMTAyMTgyOTQ5WhcNMjUxMTA5MTgyOTQ5WjAYMRYwFAYD VQQDEw02OTA3YTMxZS0xOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUEzfQAbllxarMZ7JfhYExoEzVe7t49WHOo0dKoLD5fHNN+Vi3EUQ0hmW1C4 XQzBlg0zUrfx98R3oBbT0CzVHj494+y1QgMwkIBAEE9A1fPwsIRt6DspiZcvYjB+ tF2xl1hKiOsiZSCyC14bLTKl4JLik9prl+ZHNetl2sRPHkIe7mjlVaTGUu+wSnFn /XJwyEqWkxc1NvpmiOSFK754w5k4G6ech4IjF1bgFRhU19a/uaImp9Xv5WeYAabk qAI51x4+q+2KdJlxC36eJ1blpAsoJjgnQVClII3KlKGF5Bhq6p5KotRlwoq39PlL P4jQ4N8Z7nvJRTN7DFNwLqd+TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxeon/a c6bvhx3sFRtiDE1IuQgvMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApjO9Cm4K+vghdUyfF6F/KVn46jgVj5ooMwyCNkB3P7oS9CdyzMC3j KJ2zL5UGgh7u1IDy0QjcPpx8kGY6dZHHyioXwTyZaU3+Zt9aiV0OD5UnPngO38LN DTYCddpt85mRlEz2tKuJ26lLz/AZVWuGlWHOqjdmr5xiqyiCyY4PHEFBWQq1rt0h zO2FZbNRlkYjulPHHVa+N4cojVx1gQMJW2NI0NMK50fGdpolLlnRJrKZ/KnObNpQ riE2O0KhpuyjbNvQJeeqSoHfxrcUObe4F08Z+hJaAQKTfRSijR47p9tPVQ4bnWoo o+7tMxB1Y/Rh7JbWxCYCAen0Zo6snw1E -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:46 2025 by rpki-client