$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft File: neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json) Hash identifier: 0mcLRwTXitKo21T5vOClIkwJQj6grBNi4QsXMHYZMq0= Subject key identifier: B3:37:B1:16:6D:FA:05:61:4F:E5:08:BE:F3:AF:ED:1A:7D:16:D4:B3 Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05 Certificate issuer: /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft Manifest number: 01D8 Signing time: Thu 21 Aug 2025 02:51:30 +0000 Manifest this update: Thu 21 Aug 2025 02:51:30 +0000 Manifest next update: Thu 28 Aug 2025 02:51:30 +0000 Files and hashes: 1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: SUzjwqyY2TSlPy2yYEn7GYLljFg5KGm13YDcl+ePrno=) 2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: z1DiM+Sb1v9sxtvB7lwEWlS9RqjVAOPpk9d0UUYugp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E81, serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005 Validity Not Before: Aug 21 02:51:30 2025 GMT Not After : Aug 28 02:51:30 2025 GMT Subject: CN=68a689b2-3cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:b0:c0:61:20:21:99:d1:cc:49:6a:3a:32: 21:6f:fd:74:fa:84:f6:6c:72:7d:5b:2c:b0:b8:4c: 4a:18:f6:4b:57:ac:9c:91:7f:0f:ba:65:0a:7f:c9: 5e:c7:ff:af:2a:8e:4f:e9:2b:ce:01:b1:41:1e:e8: 92:9f:43:ec:fc:57:15:f6:a7:7b:4e:69:40:3c:4b: e2:cf:49:11:74:5b:dc:03:3c:08:18:6f:87:46:ef: 75:0f:8d:29:7b:89:3f:a4:75:00:9c:36:80:b2:02: 53:25:a8:d8:92:5c:7b:f8:10:1d:12:0b:19:b0:1f: 67:5e:04:67:f9:46:d7:c9:f5:02:96:49:35:28:7d: ce:2f:08:28:d8:36:8d:18:d0:72:af:30:48:3b:44: ca:a8:35:5e:95:a5:f4:39:67:40:d9:cf:c4:06:4b: a7:85:b0:5a:9e:db:69:42:5c:59:0c:1c:4e:b0:38: cc:f3:bb:27:58:eb:7c:7c:ae:ed:84:28:da:6a:c6: bd:42:1e:ad:fc:2f:ef:b9:c4:bf:78:32:79:5b:de: 77:18:e7:26:ea:91:f7:cb:a2:7c:ef:f0:16:6e:dc: 5e:53:b3:28:d3:65:66:84:0e:2e:79:03:87:84:a2: 55:f6:f0:64:99:74:01:13:65:6e:e4:62:47:29:d5: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:B1:16:6D:FA:05:61:4F:E5:08:BE:F3:AF:ED:1A:7D:16:D4:B3 X509v3 Authority Key Identifier: keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c1:e4:7d:b6:18:69:b6:12:40:15:d7:f1:85:f1:97:81:c3: 38:06:b9:18:91:e4:e0:32:3d:27:79:c9:44:f5:31:20:6f:6e: 2f:4b:ee:71:ce:99:51:9c:c1:3e:64:58:64:ef:00:17:5a:a3: 83:55:cb:41:79:03:e2:9d:aa:42:6c:94:d3:4e:ce:0c:a5:81: 78:09:0b:7c:ca:ae:86:78:14:e5:f3:ea:2a:ba:9b:e7:b2:ed: bd:ab:a9:08:a7:9b:e0:96:34:42:c4:25:c3:42:44:74:ef:dd: 06:03:25:b8:83:ed:9a:37:aa:7e:47:6d:c5:3d:8d:0a:0a:ba: 8c:83:5d:3c:18:fd:0d:fa:f9:fd:75:cb:ef:e8:04:b8:a4:99: e8:34:85:ac:3a:33:06:bc:7a:fb:dc:0a:2a:51:a4:58:52:80: 26:da:c9:63:65:9e:3e:26:59:28:05:b9:cb:7d:50:ae:1b:73: b2:5b:bc:78:99:52:ec:b0:c9:2e:0f:a5:e2:af:f1:33:52:65: 55:11:46:04:8f:21:a4:d9:b6:8a:a6:ec:e7:71:bd:79:fa:b8: 73:45:9c:db:7d:dd:41:99:59:d7:57:d4:13:6a:8b:b6:d8:3a: 07:64:36:9c:41:d2:ba:fa:3b:f3:c3:01:1c:3a:94:58:da:e4: 0f:1b:d4:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFODExMTAvBgNVBAUTKDlERTQ0NDhBRDlGQ0M3M0ZBQTJEMjc1NUY0QkY1NDlE MzE0MjcwMDUwHhcNMjUwODIxMDI1MTMwWhcNMjUwODI4MDI1MTMwWjAYMRYwFAYD VQQDEw02OGE2ODliMi0zY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi+wwGEgIZnRzElqOjIhb/10+oT2bHJ9WyywuExKGPZLV6yckX8PumUKf8le x/+vKo5P6SvOAbFBHuiSn0Ps/FcV9qd7TmlAPEviz0kRdFvcAzwIGG+HRu91D40p e4k/pHUAnDaAsgJTJajYklx7+BAdEgsZsB9nXgRn+UbXyfUClkk1KH3OLwgo2DaN GNByrzBIO0TKqDVelaX0OWdA2c/EBkunhbBanttpQlxZDBxOsDjM87snWOt8fK7t hCjaasa9Qh6t/C/vucS/eDJ5W953GOcm6pH3y6J87/AWbtxeU7Mo02VmhA4ueQOH hKJV9vBkmXQBE2Vu5GJHKdXDiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM3sRZt +gVhT+UIvvOv7Rp9FtSzMB8GA1UdIwQYMBaAFJ3kRIrZ/Mc/qi0nVfS/VJ0xQnAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4MS8xNkNGNzU2NkIx N0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6LXFMU2RWOUw5VW5URkNj QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUkVpdG44eHotcUxTZFY5TDlVblRGQ2NBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4MS8xNkNGNzU2NkIxN0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6 LXFMU2RWOUw5VW5URkNjQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAweR9thhpthJAFdfxhfGXgcM4BrkYkeTgMj0neclE9TEgb24vS+5x zplRnME+ZFhk7wAXWqODVctBeQPinapCbJTTTs4MpYF4CQt8yq6GeBTl8+oqupvn su29q6kIp5vgljRCxCXDQkR0790GAyW4g+2aN6p+R23FPY0KCrqMg108GP0N+vn9 dcvv6AS4pJnoNIWsOjMGvHr73AoqUaRYUoAm2sljZZ4+JlkoBbnLfVCuG3OyW7x4 mVLssMkuD6Xir/EzUmVVEUYEjyGk2baKpuzncb15+rhzRZzbfd1BmVnXV9QTaou2 2DoHZDacQdK6+jvzwwEcOpRY2uQPG9RS -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:48 2025 by rpki-client