$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: MVR8yz44Cpwj/pro+7P66mzGTbYoTyJNrCL5NEM0Yl0= Subject key identifier: D1:41:44:B5:84:CE:B1:9C:98:7A:DC:04:8E:D0:FE:14:3C:73:8D:3B Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 56 Signing time: Mon 03 Nov 2025 07:11:07 +0000 Manifest this update: Mon 03 Nov 2025 07:11:07 +0000 Manifest next update: Mon 10 Nov 2025 07:11:07 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: ybCOVshST2aC8FIs+TkSgf7Tr0JnD4wh+x9uf/Fuiho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Nov 3 07:11:07 2025 GMT Not After : Nov 10 07:11:07 2025 GMT Subject: CN=6908558b-4927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:64:6f:a0:f8:3f:ca:58:4f:85:66:fe:73: fd:96:b3:5f:23:c8:c9:a7:be:9d:32:46:3c:da:7c: 2c:25:04:e0:ce:19:2c:30:49:86:09:78:b8:cc:3e: be:f6:04:87:60:a0:b7:95:d6:6c:97:6b:4d:1d:bf: d4:a2:3e:a6:8b:d8:02:ca:a5:92:72:7b:c3:f0:df: 03:9a:38:e3:16:a3:12:78:cf:3a:98:1c:d6:8c:54: ad:4c:e6:6c:2c:e9:4d:00:5b:39:d0:d5:27:f4:7e: 86:43:18:fe:3f:cd:d0:b0:6f:64:af:44:9c:d9:79: e7:44:ee:b6:76:5a:c7:71:c0:a7:52:11:0c:33:53: 83:f9:17:8c:8c:dc:72:eb:8c:cd:6a:48:7a:ca:1c: db:e1:0a:83:88:c3:e9:a0:d8:3e:b1:56:ad:d2:29: 6d:6e:fa:33:32:cf:4e:a5:b6:82:f9:11:12:0c:89: d5:e6:fe:8d:61:f6:97:f9:a8:5f:a4:6a:d7:60:b4: e4:74:c3:7c:e5:69:50:f6:43:c4:2d:19:0d:89:58: f2:15:e1:35:e0:3c:02:bc:a7:7f:c1:da:55:e8:85: 50:09:fe:25:f2:4f:3a:ad:34:1d:c4:ed:fa:68:cf: 50:a0:4e:d7:72:69:3a:e9:a7:b3:d7:58:2f:67:f6: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:44:B5:84:CE:B1:9C:98:7A:DC:04:8E:D0:FE:14:3C:73:8D:3B X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:64:9b:7f:6c:7d:9b:cc:fc:5f:f7:f4:69:30:a7:71:37:d8: a7:54:ab:d9:73:1b:a5:10:b9:ad:20:5f:9b:a3:21:62:b7:4f: e6:72:9a:14:6c:0b:45:c8:2d:1f:eb:74:be:52:6b:d3:f4:40: 98:7c:a9:af:9d:ac:07:d8:51:32:e0:d1:e7:26:8a:2a:6d:67: b7:3e:b0:c5:66:62:7b:fd:fc:64:ee:e5:bc:82:24:9c:f3:73: 72:2d:46:a5:4e:2d:b7:9f:f8:f2:88:dc:ef:63:01:80:85:5d: 48:36:92:3e:fa:31:2f:80:29:90:5b:dc:50:6f:cf:6f:12:97: 73:3b:ef:5f:7d:b2:0d:19:23:1b:f7:45:9a:37:8c:6c:7a:09: 59:72:db:45:9a:e9:fc:e7:c1:ac:01:0b:59:d2:ba:ea:60:9f: df:9d:d5:58:ad:01:9b:46:ce:cc:84:05:58:31:20:d7:fa:f0: 9a:1d:87:42:b8:e9:ac:63:da:22:80:92:f1:a2:c2:5c:48:3f: bc:e9:d5:d5:1d:b3:0c:e2:31:3d:0b:c1:9b:dd:ef:f1:7d:dd: 9b:53:07:53:ac:ba:33:83:dc:79:e9:83:a0:9f:1e:31:a0:22: 5c:2b:90:1b:ef:12:25:7e:0c:dd:f7:5e:8e:f8:ef:4e:c6:e8: 18:44:af:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTExMDMwNzExMDdaFw0yNTExMTAwNzExMDdaMBgxFjAUBgNV BAMTDTY5MDg1NThiLTQ5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPg2RvoPg/ylhPhWb+c/2Ws18jyMmnvp0yRjzafCwlBODOGSwwSYYJeLjMPr72 BIdgoLeV1myXa00dv9SiPqaL2ALKpZJye8Pw3wOaOOMWoxJ4zzqYHNaMVK1M5mws 6U0AWznQ1Sf0foZDGP4/zdCwb2SvRJzZeedE7rZ2WsdxwKdSEQwzU4P5F4yM3HLr jM1qSHrKHNvhCoOIw+mg2D6xVq3SKW1u+jMyz06ltoL5ERIMidXm/o1h9pf5qF+k atdgtOR0w3zlaVD2Q8QtGQ2JWPIV4TXgPAK8p3/B2lXohVAJ/iXyTzqtNB3E7fpo z1CgTtdyaTrpp7PXWC9n9jdxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0UFEtYTO sZyYetwEjtD+FDxzjTswHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1km39sfZvM/F/39Gkwp3E32KdUq9lzG6UQua0gX5ujIWK3T+ZymhRs C0XILR/rdL5Sa9P0QJh8qa+drAfYUTLg0ecmiiptZ7c+sMVmYnv9/GTu5byCJJzz c3ItRqVOLbef+PKI3O9jAYCFXUg2kj76MS+AKZBb3FBvz28Sl3M77199sg0ZIxv3 RZo3jGx6CVly20Wa6fznwawBC1nSuupgn9+d1VitAZtGzsyEBVgxINf68Jodh0K4 6axj2iKAkvGiwlxIP7zp1dUdswziMT0LwZvd7/F93ZtTB1OsujOD3Hnpg6CfHjGg IlwrkBvvEiV+DN33Xo74707G6BhEr+4= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:02 2025 by rpki-client