$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: z2TUihBnEDiath5r0LXhAcDEDhY+jlPA3EbBjp4IuN4= Subject key identifier: 81:9D:B8:FF:04:41:05:01:FB:78:FE:02:38:71:E1:D9:EC:B7:2D:80 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 2A Signing time: Thu 07 Aug 2025 08:23:13 +0000 Manifest this update: Thu 07 Aug 2025 08:23:12 +0000 Manifest next update: Thu 14 Aug 2025 08:23:12 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: 0OZw2aX70le/GgGG2QabiBHyoYEEvo8GgX11HEm9Tss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Aug 7 08:23:12 2025 GMT Not After : Aug 14 08:23:12 2025 GMT Subject: CN=68946271-1cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:d8:68:71:34:5d:44:2a:a5:f5:bd:6c:89: e0:95:ce:01:2d:84:0c:bb:ee:29:6e:b7:36:a1:c5: b7:ee:8a:ce:17:6f:26:92:02:ba:53:e2:36:24:31: 80:67:16:e2:7b:de:c4:cb:35:cc:ac:9f:d2:f4:9f: f2:3c:fe:44:a9:d8:fd:a8:06:a1:f6:d2:fc:19:2f: 3b:e7:bc:98:e2:6c:98:93:f0:a7:8c:f7:71:42:84: 32:22:73:81:77:63:3f:49:8f:95:df:9c:c5:48:c9: b6:f7:4c:e9:67:0e:1b:6d:58:86:07:5a:c5:b0:f0: 54:43:6a:ab:3c:e3:00:00:50:dc:dd:7a:06:d2:57: 09:ce:1f:d5:cd:cb:b1:42:2b:a3:95:ac:a2:98:20: 8f:8a:1a:c8:c1:cb:65:58:62:c9:59:a2:a3:3e:6a: dd:a5:26:3a:55:0a:de:f8:9a:85:77:5b:07:bb:b6: db:97:70:d9:ed:48:c0:0a:7f:60:f6:39:a5:5f:47: be:e1:95:6b:54:e5:e5:e9:dd:45:2e:36:6e:5f:0c: 1a:05:85:46:a5:3a:4a:0b:34:e1:7b:40:77:4e:8f: c4:1d:ea:6d:b3:7e:ea:24:e4:31:6c:69:26:74:75: 2a:72:a5:c1:ae:55:4c:08:05:21:ce:3c:98:4d:e8: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9D:B8:FF:04:41:05:01:FB:78:FE:02:38:71:E1:D9:EC:B7:2D:80 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:f8:7f:25:ae:e7:ce:a4:46:0f:84:61:5c:a3:3d:b4:ef: a8:f4:00:4c:75:05:1d:3a:d1:4a:5e:70:2b:89:b0:01:54:04: 94:a0:b9:5a:74:37:86:ae:26:8c:50:42:5e:45:48:51:50:c1: 0e:4d:03:d2:bd:fe:dd:b0:ea:a2:d1:22:ac:6d:68:2c:9d:d1: 4d:c2:74:94:3c:54:b8:34:3a:3e:45:bd:4d:f5:00:01:a6:f1: 88:01:16:ce:9c:29:7e:c1:6b:c8:89:01:c5:81:c8:ad:87:d8: 44:ad:c0:77:df:ad:4f:45:83:09:77:3b:cc:5e:32:c7:b5:43: 87:52:df:55:e7:55:24:cd:a7:24:46:4d:c9:e3:56:7e:84:ca: c3:dc:7d:b0:72:77:d7:73:f4:1b:d4:a7:54:b0:95:bb:71:6d: 4c:51:c1:6e:7d:81:13:24:81:86:54:fd:d0:2d:6f:bd:1b:65: e0:46:08:55:b5:52:c9:94:45:19:2e:92:27:d0:60:eb:f6:b6: f2:32:1a:46:59:b9:4c:63:6e:c6:81:99:06:8b:13:ba:de:85: f2:b4:f8:e6:26:5c:e7:27:ed:41:3c:e7:b4:07:38:e3:2f:34: 91:e8:29:66:e0:ff:c5:36:19:26:46:2d:58:83:c1:3c:41:85: b0:38:62:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA4MDcwODIzMTJaFw0yNTA4MTQwODIzMTJaMBgxFjAUBgNV BAMTDTY4OTQ2MjcxLTFjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyYdhocTRdRCql9b1sieCVzgEthAy77ilutzahxbfuis4XbyaSArpT4jYkMYBn FuJ73sTLNcysn9L0n/I8/kSp2P2oBqH20vwZLzvnvJjibJiT8KeM93FChDIic4F3 Yz9Jj5XfnMVIybb3TOlnDhttWIYHWsWw8FRDaqs84wAAUNzdegbSVwnOH9XNy7FC K6OVrKKYII+KGsjBy2VYYslZoqM+at2lJjpVCt74moV3Wwe7ttuXcNntSMAKf2D2 OaVfR77hlWtU5eXp3UUuNm5fDBoFhUalOkoLNOF7QHdOj8Qd6m2zfuok5DFsaSZ0 dSpypcGuVUwIBSHOPJhN6LQxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgZ24/wRB BQH7eP4COHHh2ey3LYAwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKD+H8lrufOpEYPhGFcoz2076j0AEx1BR060UpecCuJsAFUBJSguVp0 N4auJoxQQl5FSFFQwQ5NA9K9/t2w6qLRIqxtaCyd0U3CdJQ8VLg0Oj5FvU31AAGm 8YgBFs6cKX7Ba8iJAcWByK2H2EStwHffrU9Fgwl3O8xeMse1Q4dS31XnVSTNpyRG TcnjVn6EysPcfbByd9dz9BvUp1SwlbtxbUxRwW59gRMkgYZU/dAtb70bZeBGCFW1 UsmURRkukifQYOv2tvIyGkZZuUxjbsaBmQaLE7rehfK0+OYmXOcn7UE857QHOOMv NJHoKWbg/8U2GSZGLViDwTxBhbA4Yv8= -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:17 2025 by rpki-client