$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: 82LuGNe9x6XPYYYM0hhUqIoMcKQccGSx4Fvikpiaz0s= Subject key identifier: AA:A7:24:64:32:14:A9:57:16:04:2B:7F:DE:6C:FE:11:5F:76:47:24 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 0F Signing time: Sun 15 Jun 2025 07:08:39 +0000 Manifest this update: Sun 15 Jun 2025 07:08:38 +0000 Manifest next update: Sun 22 Jun 2025 07:08:38 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: yGfynWIEEn+v2Osnhnawv5SE+mMkoa/rBXObBvhNzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Jun 15 07:08:38 2025 GMT Not After : Jun 22 07:08:38 2025 GMT Subject: CN=684e7176-e703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:94:12:b8:18:b4:78:58:75:fd:90:c0:74: c7:d4:ec:83:35:46:a7:29:7b:0b:78:d0:37:df:ee: a0:e1:0b:e7:98:55:10:a5:28:4a:03:21:4e:68:73: b4:59:ff:99:4c:e1:03:d8:e1:92:4c:17:86:6d:25: ba:85:bf:b2:85:a6:bd:b2:71:e7:a8:2d:9d:56:e3: db:24:83:16:ab:99:39:ef:ad:0a:78:95:36:3d:3d: 8a:05:c5:4c:57:88:cd:7b:59:55:2d:fa:c9:bf:59: ec:6f:83:13:48:df:4a:ac:0b:ad:ab:0d:1f:61:6f: f5:d7:57:9a:c9:08:b9:24:9d:63:c4:b8:41:04:a6: b0:66:61:68:f9:69:27:02:89:2a:5a:fb:bd:0a:c3: 9d:67:4a:2e:f0:90:36:2d:74:80:93:c0:a8:53:28: 81:fb:88:f7:40:7c:5f:34:cb:21:92:39:97:8d:3a: 85:9c:bb:25:79:e2:ba:1f:d9:cb:66:13:5d:83:06: 0a:ab:51:f3:99:82:e9:1b:d3:53:43:84:36:0b:d7: 01:ee:15:ce:63:a2:34:06:cd:67:16:be:57:95:48: fa:55:f4:00:91:3b:3f:89:a7:d0:c4:b7:e4:cf:b3: 55:ef:20:c0:c5:f2:de:89:1e:7a:aa:c4:28:00:3e: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A7:24:64:32:14:A9:57:16:04:2B:7F:DE:6C:FE:11:5F:76:47:24 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:21:4c:8e:9f:51:7d:92:20:85:67:00:a1:4d:60:07:cb:aa: 78:f8:1c:2b:38:bd:61:59:93:53:33:d9:5d:77:7e:17:ca:f8: fc:49:04:01:51:be:7c:12:12:d2:57:2f:b6:b1:98:38:f8:9e: fe:18:1d:c3:8e:18:9a:cc:65:25:0d:8e:bc:22:94:bc:5f:77: 02:4b:fd:3b:0d:5c:a1:c8:cb:f9:0a:32:84:8d:05:ed:51:21: 56:ad:c8:28:fa:b1:dc:ba:47:e8:59:58:5a:1f:3c:19:e2:e2: 15:45:de:cb:18:c6:dc:e9:b0:99:cf:f7:55:66:7b:cf:fd:1f: b2:27:c1:cb:ec:f4:13:fc:33:26:a3:4d:7c:2e:d4:2d:e4:cd: 5a:1a:14:24:02:cb:ba:f9:2d:5a:70:85:e5:c9:95:7a:ee:87: 5e:d9:ac:83:c1:aa:bf:0e:98:0b:88:9e:26:49:90:f7:81:f7: 05:a3:cc:27:47:98:ab:04:a2:f7:4c:0a:a7:cc:cc:be:c3:5e: d0:8b:81:60:9b:88:e5:2e:e2:e0:bb:c9:59:1a:24:3d:72:37: a6:62:40:ab:66:bd:b0:1e:2d:40:70:b8:cc:38:8b:42:fa:87: f8:fa:70:7e:36:c0:33:1a:04:c1:61:b4:9e:5d:5e:66:99:0b: 76:84:31:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA2MTUwNzA4MzhaFw0yNTA2MjIwNzA4MzhaMBgxFjAUBgNV BAMTDTY4NGU3MTc2LWU3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOApQSuBi0eFh1/ZDAdMfU7IM1Rqcpewt40Dff7qDhC+eYVRClKEoDIU5oc7RZ /5lM4QPY4ZJMF4ZtJbqFv7KFpr2yceeoLZ1W49skgxarmTnvrQp4lTY9PYoFxUxX iM17WVUt+sm/WexvgxNI30qsC62rDR9hb/XXV5rJCLkknWPEuEEEprBmYWj5aScC iSpa+70Kw51nSi7wkDYtdICTwKhTKIH7iPdAfF80yyGSOZeNOoWcuyV54rof2ctm E12DBgqrUfOZgukb01NDhDYL1wHuFc5jojQGzWcWvleVSPpV9ACROz+Jp9DEt+TP s1XvIMDF8t6JHnqqxCgAPi4FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqqckZDIU qVcWBCt/3mz+EV92RyQwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJYhTI6fUX2SIIVnAKFNYAfLqnj4HCs4vWFZk1Mz2V13fhfK+PxJBAFR vnwSEtJXL7axmDj4nv4YHcOOGJrMZSUNjrwilLxfdwJL/TsNXKHIy/kKMoSNBe1R IVatyCj6sdy6R+hZWFofPBni4hVF3ssYxtzpsJnP91Vme8/9H7Inwcvs9BP8Myaj TXwu1C3kzVoaFCQCy7r5LVpwheXJlXruh17ZrIPBqr8OmAuIniZJkPeB9wWjzCdH mKsEovdMCqfMzL7DXtCLgWCbiOUu4uC7yVkaJD1yN6ZiQKtmvbAeLUBwuMw4i0L6 h/j6cH42wDMaBMFhtJ5dXmaZC3aEMR8= -----END CERTIFICATE-----Generated at Tue Jun 17 04:38:05 2025 by rpki-client