$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: 05td89aMNu9eAV/uT5BRtY4oJqwuaVXql6X/+niKir8= Subject key identifier: 20:46:F9:B9:5C:8C:37:5A:9F:C0:5A:B1:29:3C:3A:0D:BB:26:EA:50 Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 52F2 Signing time: Sun 10 Aug 2025 15:02:51 +0000 Manifest this update: Sun 10 Aug 2025 15:02:51 +0000 Manifest next update: Sun 17 Aug 2025 15:02:51 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: LGYWtjFFAE/7sSrvTrbyG47taJiDLFY5M/50gd9sogo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: Aug 10 15:02:51 2025 GMT Not After : Aug 17 15:02:51 2025 GMT Subject: CN=6898b49b-c4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:89:e2:26:dc:9f:b3:6f:93:d1:d3:25:c2: 9d:1a:bd:5b:41:a8:fc:da:5e:19:9a:ef:1b:1b:c7: 30:a0:8d:8b:a2:c9:e0:0a:39:22:0a:e0:72:5f:b7: 5c:0d:32:14:ec:b0:70:4e:ca:07:d1:0e:43:71:2b: c9:a0:bc:34:81:43:95:9f:b9:a3:8f:47:c0:26:f5: 6a:35:22:8b:1f:55:e4:c5:6c:f2:29:5d:85:01:67: f9:f4:17:97:c7:2b:59:9c:d9:73:cc:09:f6:24:c1: 0d:3f:e0:bd:d1:71:f0:a5:6e:a2:fd:f6:db:fd:be: b2:93:98:7a:ea:44:83:98:62:ee:70:e6:8e:e5:c4: bd:3e:ef:59:1b:a2:d0:92:f1:e9:dd:79:a5:50:b4: b8:38:e0:cf:8e:09:77:26:a7:e6:55:4c:c6:50:f9: 4f:14:71:ed:f7:c1:cd:e6:d9:06:4b:2f:8d:81:ed: 56:d9:a1:40:d8:ce:6c:97:fd:f9:da:f7:2a:9b:9d: 96:fd:34:8a:62:68:00:55:5d:46:a1:a7:c2:a1:91: d6:57:ff:c0:f7:d6:c5:48:18:6e:f4:74:3c:5b:2f: 84:06:20:d5:96:b1:40:5b:0d:73:32:e2:07:4d:48: 6d:54:7e:b8:c1:6f:95:c3:91:99:9e:30:38:69:02: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:46:F9:B9:5C:8C:37:5A:9F:C0:5A:B1:29:3C:3A:0D:BB:26:EA:50 X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:32:db:3c:61:fd:8f:a9:91:12:a9:9f:c4:d0:49:d2:d2: 56:62:29:78:e8:b8:20:0a:42:67:50:b8:96:db:50:ca:09:44: 60:5c:49:9e:99:0e:4f:5d:a5:16:e4:d1:19:05:a1:e2:e0:b0: 54:e6:99:ec:e9:3d:d9:60:f8:fe:c1:8c:0a:23:31:33:0d:b3: 94:d3:5f:b0:e9:de:a4:e3:a3:2b:87:a1:37:02:8a:6e:d6:0a: 72:1a:d9:0a:83:92:c7:db:d2:06:8f:8e:e6:07:e2:31:aa:d6: fe:57:e6:cc:85:0a:cd:7d:ea:e9:a6:46:20:d5:c4:e3:00:78: f7:de:f3:46:49:1c:32:2e:be:61:bd:e2:a9:67:57:37:58:4d: 74:55:c8:fa:38:b9:ab:ec:ee:bf:1f:50:da:34:ed:e3:87:7b: ec:de:d9:8b:6f:6e:95:69:38:d3:6e:d1:09:50:49:9d:10:c1: 17:5e:49:e1:18:d6:68:9f:2d:56:f4:37:0f:ae:40:1b:11:30: 80:2c:4b:54:fa:cc:0c:d8:59:00:de:8b:db:21:59:8c:9e:d5: 19:e5:ea:3a:c5:89:e4:c5:16:09:a1:a3:7f:1a:5f:60:98:c2: 3f:02:a1:b5:13:e2:5c:8a:d5:e0:5f:b7:b4:2f:25:ce:02:6a: 4c:7c:b9:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjUwODEwMTUwMjUxWhcNMjUwODE3MTUwMjUxWjAYMRYwFAYD VQQDEw02ODk4YjQ5Yi1jNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRyJ4ibcn7Nvk9HTJcKdGr1bQaj82l4Zmu8bG8cwoI2LosngCjkiCuByX7dc DTIU7LBwTsoH0Q5DcSvJoLw0gUOVn7mjj0fAJvVqNSKLH1XkxWzyKV2FAWf59BeX xytZnNlzzAn2JMENP+C90XHwpW6i/fbb/b6yk5h66kSDmGLucOaO5cS9Pu9ZG6LQ kvHp3XmlULS4OODPjgl3JqfmVUzGUPlPFHHt98HN5tkGSy+Nge1W2aFA2M5sl/35 2vcqm52W/TSKYmgAVV1GoafCoZHWV//A99bFSBhu9HQ8Wy+EBiDVlrFAWw1zMuIH TUhtVH64wW+Vw5GZnjA4aQKLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBG+blc jDdan8BasSk8Og27JupQMB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMlDLbPGH9j6mREqmfxNBJ0tJWYil46LggCkJnULiW21DKCURgXEme mQ5PXaUW5NEZBaHi4LBU5pns6T3ZYPj+wYwKIzEzDbOU01+w6d6k46Mrh6E3Aopu 1gpyGtkKg5LH29IGj47mB+Ixqtb+V+bMhQrNferppkYg1cTjAHj33vNGSRwyLr5h veKpZ1c3WE10Vcj6OLmr7O6/H1DaNO3jh3vs3tmLb26VaTjTbtEJUEmdEMEXXknh GNZony1W9DcPrkAbETCALEtU+swM2FkA3ovbIVmMntUZ5eo6xYnkxRYJoaN/Gl9g mMI/AqG1E+JcitXgX7e0LyXOAmpMfLme -----END CERTIFICATE-----Generated at Mon Aug 11 04:28:43 2025 by rpki-client