$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: MEeAHr0PynDzC+bTbYEfv/ZmIxX08FPjS8CLDxQAF1g= Subject key identifier: 0B:F7:87:B4:FA:23:A4:65:A4:92:93:B3:00:96:77:27:A6:BF:05:BB Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 036E Signing time: Fri 05 Sep 2025 01:12:35 +0000 Manifest this update: Fri 05 Sep 2025 01:12:34 +0000 Manifest next update: Fri 12 Sep 2025 01:12:34 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: Rvo9kcHXd9S1kgDjvc4XpuGnovqlpPvDTeME0bxezuk=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: WBPEzwrRJmEQao59jsv0p03EV57EGiVD2LS1uQaSE9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Sep 5 01:12:34 2025 GMT Not After : Sep 12 01:12:34 2025 GMT Subject: CN=68ba3902-4871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:dd:6e:3e:35:81:f9:34:dd:06:5c:e8:04: 13:7e:15:73:04:97:58:be:4a:04:48:87:e5:57:64: 7e:37:a1:9a:61:17:98:a6:1b:2b:53:dd:c6:89:0a: ce:4a:8d:5c:1a:91:54:a7:58:03:3c:16:d3:1d:e7: 77:c0:4f:84:73:7c:f6:9d:90:61:50:64:2b:21:b1: 6a:0b:cd:90:1c:55:47:85:43:f2:1b:8d:32:88:92: 59:ad:63:c8:c4:8d:6d:86:03:4b:a0:29:fa:24:d2: 0b:3a:27:61:2e:69:be:15:f2:f7:10:53:4f:02:59: 14:49:ab:8b:7d:7c:14:79:44:d7:a5:ca:3f:84:78: 3a:af:4a:11:45:f4:cb:41:e5:5c:fe:fe:48:2d:06: c2:42:1c:d3:2b:ff:26:47:75:6e:06:ed:e3:ca:65: a0:f5:4a:8b:df:b9:65:fa:cf:5f:6a:0c:d9:db:ed: 40:01:81:66:5d:d8:47:f2:4f:66:9d:c0:ee:5e:75: c4:9f:67:be:30:92:af:e4:75:a7:fc:85:83:16:51: 6e:f0:d2:93:93:53:3a:e0:e4:f2:68:a1:e6:a4:5b: d2:e7:bf:ac:61:15:20:e7:af:d5:af:bf:37:c5:1f: 23:99:a6:19:ca:ae:8a:9b:50:da:c6:c1:35:1e:6b: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F7:87:B4:FA:23:A4:65:A4:92:93:B3:00:96:77:27:A6:BF:05:BB X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e9:91:f9:07:9b:26:48:1a:e6:93:e7:51:5c:70:15:36:77: 97:2c:e6:3a:6a:ef:14:f4:ad:86:4e:03:7d:c4:a4:13:8c:8e: 18:4f:8f:eb:b7:61:56:c3:2b:25:d0:be:00:6d:4b:36:54:ce: e2:f1:d4:ac:b3:95:8a:dc:0c:f9:0d:70:97:e9:d8:06:38:26: 3e:12:18:58:d3:25:d6:9a:e7:76:6b:cf:08:40:46:34:ce:4d: f8:9a:59:03:a2:ee:0f:43:1a:4b:90:ce:06:a3:be:c7:3e:3f: 43:67:c2:d6:e9:fd:a6:ec:72:c5:f8:94:cd:f2:07:57:24:7b: 08:35:48:0c:e6:da:e1:06:a6:da:2e:69:4d:b3:71:02:da:b5: f7:40:08:29:85:45:5c:b2:72:33:5a:79:2f:a7:45:13:6b:5e: ea:fe:3d:74:45:77:51:76:24:77:91:6b:89:8e:05:3f:16:b0: c3:ae:92:81:0d:f0:71:09:48:ac:5c:cb:f5:7c:ce:f2:e8:b8: 73:4e:d7:f4:8d:af:04:d8:fb:79:77:f3:0c:a1:69:47:e6:23: ed:62:5f:9e:40:87:b8:b0:d1:f5:cd:82:65:51:d8:1a:04:12: ce:12:45:06:9a:77:d6:b9:00:42:36:a1:b4:f1:7c:45:9e:df: a7:d3:30:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjUwOTA1MDExMjM0WhcNMjUwOTEyMDExMjM0WjAYMRYwFAYD VQQDEw02OGJhMzkwMi00ODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgPdbj41gfk03QZc6AQTfhVzBJdYvkoESIflV2R+N6GaYReYphsrU93GiQrO So1cGpFUp1gDPBbTHed3wE+Ec3z2nZBhUGQrIbFqC82QHFVHhUPyG40yiJJZrWPI xI1thgNLoCn6JNILOidhLmm+FfL3EFNPAlkUSauLfXwUeUTXpco/hHg6r0oRRfTL QeVc/v5ILQbCQhzTK/8mR3VuBu3jymWg9UqL37ll+s9fagzZ2+1AAYFmXdhH8k9m ncDuXnXEn2e+MJKv5HWn/IWDFlFu8NKTk1M64OTyaKHmpFvS57+sYRUg56/Vr783 xR8jmaYZyq6Km1DaxsE1Hmtj/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAv3h7T6 I6RlpJKTswCWdyemvwW7MB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn6ZH5B5smSBrmk+dRXHAVNneXLOY6au8U9K2GTgN9xKQTjI4YT4/r t2FWwysl0L4AbUs2VM7i8dSss5WK3Az5DXCX6dgGOCY+EhhY0yXWmud2a88IQEY0 zk34mlkDou4PQxpLkM4Go77HPj9DZ8LW6f2m7HLF+JTN8gdXJHsINUgM5trhBqba LmlNs3EC2rX3QAgphUVcsnIzWnkvp0UTa17q/j10RXdRdiR3kWuJjgU/FrDDrpKB DfBxCUisXMv1fM7y6LhzTtf0ja8E2Pt5d/MMoWlH5iPtYl+eQIe4sNH1zYJlUdga BBLOEkUGmnfWuQBCNqG08XxFnt+n0zAX -----END CERTIFICATE-----Generated at Fri Sep 5 10:44:19 2025 by rpki-client