$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json) Hash identifier: UzbLI7Lkw+MDCbD/pUukiaKQ9J2PKbQV+w2IWVhMJpk= Subject key identifier: DB:A8:71:AA:95:64:44:F6:AA:1D:2F:4F:76:A0:6A:85:66:D6:0F:FD Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Certificate serial: 103F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft Manifest number: 1030 Signing time: Thu 24 Jul 2025 17:34:53 +0000 Manifest this update: Thu 24 Jul 2025 17:34:53 +0000 Manifest next update: Thu 31 Jul 2025 17:34:53 +0000 Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: YG5FAwhwaxxiQe24gCGFvthL3jdtq3CLpnnnak1ClkA=) 2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2 Validity Not Before: Jul 24 17:34:53 2025 GMT Not After : Jul 31 17:34:53 2025 GMT Subject: CN=68826ebd-f67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:f6:93:55:45:e8:c8:02:f5:2c:ce:4f:28: 67:ae:9c:f5:6b:6e:93:87:b5:72:7a:37:10:a6:51: 59:cf:7c:6c:56:8e:18:a2:f5:69:f6:75:1b:35:fc: 62:8f:4d:8b:4d:ed:10:5d:d0:9e:2b:0d:a4:27:f4: 66:15:c7:39:29:71:4c:85:9a:fa:03:e2:8c:e5:b7: 79:95:43:9d:0a:d6:2d:ef:57:09:fa:59:12:dc:f2: 2c:3a:e9:e3:80:9a:52:6d:c6:da:7c:7e:cc:07:e8: 06:f4:4c:10:42:0c:f2:83:13:be:e0:5e:bf:0d:cf: 7b:7d:0f:ac:60:58:ce:72:ab:c5:ae:b4:52:17:4d: bd:05:42:55:25:75:c9:8d:b1:5b:1a:0a:6d:57:05: 89:50:3a:fc:35:20:7d:54:ca:82:c0:6a:97:16:19: 3e:51:01:72:2a:b2:37:9e:2d:b8:fe:db:5e:93:82: 11:ee:08:63:a9:d6:aa:88:3a:64:78:be:8b:13:0f: 5b:86:5a:07:d7:2a:c0:fc:6f:4f:ba:7a:f6:9f:53: 05:2b:67:70:3a:1d:83:65:d3:ea:c9:30:03:cb:7b: bb:22:a5:17:8f:bf:01:e1:8e:76:2f:96:3d:a2:d0: 7e:ea:85:66:d6:11:c9:5b:af:87:a0:9b:1c:e5:e2: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A8:71:AA:95:64:44:F6:AA:1D:2F:4F:76:A0:6A:85:66:D6:0F:FD X509v3 Authority Key Identifier: keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:74:13:19:c1:41:8f:e0:e1:9c:86:1f:b3:85:b6:72:b2:bd: 48:a1:85:b6:e0:9c:b1:45:06:6b:e7:9b:ca:7a:9c:b9:82:e4: 77:9c:fe:78:fa:67:0b:ca:2a:ab:7c:9b:cb:8d:25:eb:15:0f: d4:6f:6a:d9:1e:6f:ca:8c:16:3a:6a:83:23:80:92:51:21:4e: 67:43:0e:76:1f:e1:fb:38:6f:77:2d:c7:6b:bb:83:30:c1:ee: f8:97:77:3d:8f:78:74:eb:5b:cb:11:89:96:3c:96:ca:b0:7d: 14:d7:07:5a:e5:93:3f:30:21:5b:70:31:a5:63:9c:91:a7:da: e3:b8:06:08:f5:7b:fd:48:f4:21:2e:d0:ef:66:07:7b:15:9a: 09:c0:b6:1b:62:c4:9a:ad:07:04:1e:5a:1d:a7:50:c5:07:aa: 28:d4:fb:06:f4:8d:39:a2:65:c9:a3:9c:4c:9b:33:15:e9:e5: d2:ca:63:22:b0:0b:64:e5:3d:35:13:43:c5:cd:4b:dd:b0:62: d8:fb:f3:c4:91:a5:aa:dd:a7:a7:8f:5c:ca:03:c5:90:d9:ab: 3d:e0:b5:c9:e1:17:ca:19:ca:cd:42:e2:4f:5e:6f:a1:05:ca: 3b:58:c8:fa:63:85:b3:7f:83:ba:b3:ef:ac:7b:4e:94:9c:72: 68:a8:df:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx MDk4RTVERjIwHhcNMjUwNzI0MTczNDUzWhcNMjUwNzMxMTczNDUzWjAYMRYwFAYD VQQDEw02ODgyNmViZC1mNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Y72k1VF6MgC9SzOTyhnrpz1a26Th7VyejcQplFZz3xsVo4YovVp9nUbNfxi j02LTe0QXdCeKw2kJ/RmFcc5KXFMhZr6A+KM5bd5lUOdCtYt71cJ+lkS3PIsOunj gJpSbcbafH7MB+gG9EwQQgzygxO+4F6/Dc97fQ+sYFjOcqvFrrRSF029BUJVJXXJ jbFbGgptVwWJUDr8NSB9VMqCwGqXFhk+UQFyKrI3ni24/ttek4IR7ghjqdaqiDpk eL6LEw9bhloH1yrA/G9Punr2n1MFK2dwOh2DZdPqyTADy3u7IqUXj78B4Y52L5Y9 otB+6oVm1hHJW6+HoJsc5eI80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuocaqV ZET2qh0vT3agaoVm1g/9MB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3 QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/dBMZwUGP4OGchh+zhbZysr1IoYW24JyxRQZr55vKepy5guR3nP54 +mcLyiqrfJvLjSXrFQ/Ub2rZHm/KjBY6aoMjgJJRIU5nQw52H+H7OG93Lcdru4Mw we74l3c9j3h061vLEYmWPJbKsH0U1wda5ZM/MCFbcDGlY5yRp9rjuAYI9Xv9SPQh LtDvZgd7FZoJwLYbYsSarQcEHlodp1DFB6oo1PsG9I05omXJo5xMmzMV6eXSymMi sAtk5T01E0PFzUvdsGLY+/PEkaWq3aenj1zKA8WQ2as94LXJ4RfKGcrNQuJPXm+h Bco7WMj6Y4Wzf4O6s++se06UnHJoqN8C -----END CERTIFICATE-----Generated at Sat Jul 26 15:02:58 2025 by rpki-client