$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: G9xobrnhcpGackHzKP7aXexCgw1Q6yt+lL3qphU6IA8= Subject key identifier: B2:CB:50:7E:33:E0:B9:4B:34:58:4F:68:8C:12:2E:A2:2E:E3:E6:47 Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 5301 Signing time: Wed 20 Aug 2025 15:04:52 +0000 Manifest this update: Wed 20 Aug 2025 15:04:51 +0000 Manifest next update: Wed 27 Aug 2025 15:04:51 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 9UTU0dnBnvE3gZPIC7Ezvcxjjc3eYD92TleF1saVh+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: Aug 20 15:04:51 2025 GMT Not After : Aug 27 15:04:51 2025 GMT Subject: CN=68a5e414-aaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:e1:3e:3f:e5:9c:8e:1c:f7:f5:8e:8e:4c: 27:9f:76:d6:5e:ea:9f:73:dc:7f:f9:8e:d0:6f:8f: ea:40:b3:67:45:42:1a:10:39:0a:4d:ca:04:30:f0: 64:dd:f1:81:7a:c5:ad:c9:5d:f9:9d:df:9f:b8:f2: 8c:d7:c5:5b:c9:91:9e:50:80:6e:42:f0:2f:63:0c: 63:8e:96:2d:97:78:ee:fa:1f:c0:cd:f4:f8:14:0a: fe:69:ac:0d:38:6d:04:e1:8c:f3:84:d6:71:3e:2d: 4c:3a:a7:f7:ff:7f:19:13:3b:1a:da:8f:ec:66:d7: 07:15:c2:a4:e2:ee:2c:30:a6:9c:a7:73:b0:d1:bd: 6f:a7:d9:9a:d9:8d:87:e8:54:58:1e:06:3f:9b:1f: 58:09:80:83:1d:81:ff:ce:74:bf:5e:8c:14:97:1d: 95:06:cb:5d:ca:11:9a:5f:2d:45:3d:54:5e:7d:c3: 64:86:9b:27:6a:d3:61:33:f6:73:64:f4:26:1e:d1: 4b:da:ad:9f:10:66:66:8f:5e:cd:0e:4e:84:f4:ac: 56:64:2b:c8:f1:0a:ad:2a:ae:86:34:94:fe:c6:9c: da:32:dc:f8:04:f8:f6:1b:be:84:89:ee:5d:a8:14: 3f:ed:80:75:60:51:0a:dd:c1:a2:ec:a0:47:ac:09: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CB:50:7E:33:E0:B9:4B:34:58:4F:68:8C:12:2E:A2:2E:E3:E6:47 X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ba:5a:e3:39:c3:4d:ee:3b:c8:c1:32:88:cb:57:2d:e6:f8: 2c:00:50:90:38:d4:cd:f7:e3:ea:11:e1:08:c3:54:e6:82:c0: 2d:ba:eb:90:6b:95:17:00:f4:e2:ed:fe:83:c8:60:dc:ef:b7: c5:78:23:1b:93:a4:89:db:70:29:04:36:1d:8e:ae:07:c7:eb: 54:ad:8c:8c:56:51:56:de:4e:5d:c7:55:64:39:31:77:29:b4: e2:08:57:38:64:70:81:d3:18:c4:1d:2a:87:e4:26:47:68:15: 6e:b0:8f:e0:15:59:2c:84:80:a4:52:df:e0:65:73:cd:d5:37: 12:84:d8:21:f8:95:2e:37:f1:43:64:cc:12:32:2c:0a:9e:b9: c8:b4:1f:5f:dc:3f:d6:6a:b7:b4:87:b8:29:f9:b3:7c:cd:14: 99:c4:2b:94:95:70:f2:02:b0:ad:16:4e:0e:60:ec:04:21:f6: 40:c9:a7:b3:7c:6d:bb:a6:80:06:8c:2d:54:29:14:b4:cf:7e: bf:f1:e3:6a:b2:97:17:b4:b6:cd:bb:12:bc:dd:76:03:2d:6c: c6:b4:19:3a:72:e7:69:2d:64:a8:fe:75:2b:f6:a5:a0:b3:a0: bb:8e:e5:96:30:0d:42:12:42:22:71:cc:00:27:b9:98:bd:5d: f7:2d:3e:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjUwODIwMTUwNDUxWhcNMjUwODI3MTUwNDUxWjAYMRYwFAYD VQQDEw02OGE1ZTQxNC1hYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurnhPj/lnI4c9/WOjkwnn3bWXuqfc9x/+Y7Qb4/qQLNnRUIaEDkKTcoEMPBk 3fGBesWtyV35nd+fuPKM18VbyZGeUIBuQvAvYwxjjpYtl3ju+h/AzfT4FAr+aawN OG0E4YzzhNZxPi1MOqf3/38ZEzsa2o/sZtcHFcKk4u4sMKacp3Ow0b1vp9ma2Y2H 6FRYHgY/mx9YCYCDHYH/znS/XowUlx2VBstdyhGaXy1FPVRefcNkhpsnatNhM/Zz ZPQmHtFL2q2fEGZmj17NDk6E9KxWZCvI8QqtKq6GNJT+xpzaMtz4BPj2G76Eie5d qBQ/7YB1YFEK3cGi7KBHrAnBqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLLUH4z 4LlLNFhPaIwSLqIu4+ZHMB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6ulrjOcNN7jvIwTKIy1ct5vgsAFCQONTN9+PqEeEIw1TmgsAtuuuQ a5UXAPTi7f6DyGDc77fFeCMbk6SJ23ApBDYdjq4Hx+tUrYyMVlFW3k5dx1VkOTF3 KbTiCFc4ZHCB0xjEHSqH5CZHaBVusI/gFVkshICkUt/gZXPN1TcShNgh+JUuN/FD ZMwSMiwKnrnItB9f3D/Ware0h7gp+bN8zRSZxCuUlXDyArCtFk4OYOwEIfZAyaez fG27poAGjC1UKRS0z36/8eNqspcXtLbNuxK83XYDLWzGtBk6cudpLWSo/nUr9qWg s6C7juWWMA1CEkIiccwAJ7mYvV33LT66 -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:15 2025 by rpki-client