$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft File: nePaegrGlA0yq7nP_LBh8q7lZh0.mft (raw, json) Hash identifier: PxtjS8y0nscz5GQH7TiUyBCbqFzureNukl4u7JpePdo= Subject key identifier: BB:03:9F:F9:E9:A4:05:F6:9C:A1:93:2F:4F:49:BB:DE:74:69:3B:58 Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft Manifest number: 0492 Signing time: Sat 31 May 2025 00:13:21 +0000 Manifest this update: Sat 31 May 2025 00:13:20 +0000 Manifest next update: Sat 07 Jun 2025 00:13:20 +0000 Files and hashes: 1: nePaegrGlA0yq7nP_LBh8q7lZh0.crl (hash: dGTwUZLGgGFgPZwxzoaPA4vHGjrCIS5+UWm+7Ew2wZs=) 2: 4AD39148A91511ED9E2AC948C4F9AE02.roa (hash: lV86FgcjhujyEw+tqQZA5LVzdbV5o2JfVCvKZDvrKH8=) 3: 0FB7DCDA321D11EF81C6FB83C4F9AE02.roa (hash: YNerQgMu/lgswTLCzZkkLpc3iA2UGIEgvOOW994Z9L0=) 4: 4A2FAA9CA91511ED9E2AC948C4F9AE02.roa (hash: 4yfWRgYWyN+Mv4gIICmnpB2EvTMNs4jSY+Jh+PPBGG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Validity Not Before: May 31 00:13:20 2025 GMT Not After : Jun 7 00:13:20 2025 GMT Subject: CN=683a49a1-920c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:62:55:d3:cc:9b:f7:a9:89:3e:6e:21:e1: 5b:c2:35:9c:6c:bd:29:9e:a0:d2:98:46:9d:23:ef: 12:6e:13:82:38:1b:32:46:e4:24:fa:b2:97:04:16: 05:81:4b:a7:da:6a:8e:eb:1c:70:0b:1c:6a:8f:fa: e3:80:b6:22:67:97:77:bb:7e:cc:ce:cd:e9:8b:72: 11:06:0e:78:d7:8f:cc:ba:37:63:52:0c:91:23:d2: 93:44:6c:69:85:72:e5:a6:ab:67:3b:17:df:9b:86: d3:b2:6a:b6:03:d8:01:5e:94:f2:66:83:e4:8f:16: 1a:fa:1a:87:52:ca:19:0d:50:6a:dd:01:5a:b7:d9: 3b:cb:33:6a:b4:0b:c9:82:95:81:e1:86:e8:3f:f7: d3:54:80:9a:2b:e9:7f:22:16:09:be:98:d0:4d:d5: 8a:2e:1a:97:ea:be:55:92:5d:e3:f2:d5:f7:b7:4f: 8e:95:07:66:f3:64:1d:4d:49:78:98:03:fc:97:4d: 18:a4:65:88:a1:18:da:63:5c:8b:e5:fe:9c:98:d1: 40:4f:a7:c6:73:f8:59:4d:fb:83:53:b0:17:94:07: e9:3a:b3:54:f7:5e:a9:07:00:ef:03:2d:0a:ac:34: 73:ad:e9:bd:98:ff:fd:14:48:b4:08:a8:b8:2f:7e: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:03:9F:F9:E9:A4:05:F6:9C:A1:93:2F:4F:49:BB:DE:74:69:3B:58 X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:54:e2:d3:fc:1f:a7:61:1f:8f:a0:51:0e:3f:0d:ae:0a:ba: d1:57:6d:85:6b:74:23:31:a6:d5:bb:ef:3b:3c:1c:e4:43:79: da:2e:64:40:5e:ad:29:de:07:2c:6e:22:80:fa:26:a6:84:65: 6a:96:3c:db:74:c4:3b:2a:52:7d:56:55:c3:97:e0:12:91:90: 1c:27:02:de:bd:34:55:81:68:01:b1:f9:21:fc:45:24:b6:85: 5f:d0:a0:dd:e8:5b:cd:21:6c:e5:0a:ba:bf:0b:c1:63:61:c8: 8e:0e:0f:ff:e6:f5:f7:b9:24:16:b9:27:91:9a:5d:57:3c:0a: 0d:e7:d2:f8:af:15:4f:eb:22:3b:fc:fe:a7:74:5b:a8:e1:16: 65:c7:11:a5:b3:24:6e:d0:be:88:70:ba:ef:9e:6d:3c:98:88: 51:9b:9b:d1:6e:89:7a:5c:05:05:cd:23:b0:c1:56:be:9d:81: 00:49:f2:21:a3:2d:f8:b0:86:07:5c:29:0e:56:41:31:12:fd: 1d:e0:ef:53:1b:af:f8:59:3c:fd:7b:04:ba:f0:12:7a:24:b1: 00:b9:99:ad:9e:56:3a:63:34:f8:0f:d6:9a:28:b8:be:36:52: 2f:6b:2a:80:30:2f:8a:94:63:1a:8b:f1:f0:6c:55:55:73:58: dd:d4:57:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUwNTMxMDAxMzIwWhcNMjUwNjA3MDAxMzIwWjAYMRYwFAYD VQQDEw02ODNhNDlhMS05MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW1iVdPMm/epiT5uIeFbwjWcbL0pnqDSmEadI+8SbhOCOBsyRuQk+rKXBBYF gUun2mqO6xxwCxxqj/rjgLYiZ5d3u37Mzs3pi3IRBg5414/MujdjUgyRI9KTRGxp hXLlpqtnOxffm4bTsmq2A9gBXpTyZoPkjxYa+hqHUsoZDVBq3QFat9k7yzNqtAvJ gpWB4YboP/fTVICaK+l/IhYJvpjQTdWKLhqX6r5Vkl3j8tX3t0+OlQdm82QdTUl4 mAP8l00YpGWIoRjaY1yL5f6cmNFAT6fGc/hZTfuDU7AXlAfpOrNU916pBwDvAy0K rDRzrem9mP/9FEi0CKi4L36IgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsDn/np pAX2nKGTL09Ju950aTtYMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI4RS9GRjgwMjc2QzNCQ0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xB MHlxN25QX0xCaDhxN2xaaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChVOLT/B+nYR+PoFEOPw2uCrrRV22Fa3QjMabVu+87PBzkQ3naLmRA Xq0p3gcsbiKA+iamhGVqljzbdMQ7KlJ9VlXDl+ASkZAcJwLevTRVgWgBsfkh/EUk toVf0KDd6FvNIWzlCrq/C8FjYciODg//5vX3uSQWuSeRml1XPAoN59L4rxVP6yI7 /P6ndFuo4RZlxxGlsyRu0L6IcLrvnm08mIhRm5vRbol6XAUFzSOwwVa+nYEASfIh oy34sIYHXCkOVkExEv0d4O9TG6/4WTz9ewS68BJ6JLEAuZmtnlY6YzT4D9aaKLi+ NlIvayqAMC+KlGMai/HwbFVVc1jd1Feb -----END CERTIFICATE-----Generated at Sat May 31 16:45:50 2025 by rpki-client