$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: xJQjpMOmFK3/MPEeEKswbXhogu9NWXhz86BAY0U2dnQ= Subject key identifier: 9B:61:C8:71:14:83:D3:A2:54:83:CA:DF:3D:E3:A6:A0:85:93:1D:20 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 39 Signing time: Fri 05 Sep 2025 08:03:45 +0000 Manifest this update: Fri 05 Sep 2025 08:03:45 +0000 Manifest next update: Fri 12 Sep 2025 08:03:45 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: eBSICGDH3rNe+rs1OF09CvLN9gbCsx+kr6zTndy30us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Sep 5 08:03:45 2025 GMT Not After : Sep 12 08:03:45 2025 GMT Subject: CN=68ba9961-b97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:04:57:04:39:a4:75:7f:42:90:a5:e1:79: a1:e6:da:e4:27:82:a7:07:4b:34:f2:bd:07:c6:e4: be:6f:df:6e:34:84:07:b7:e2:d6:69:d3:d1:9a:23: 7e:31:75:25:66:52:f6:b5:14:03:97:c0:67:0a:52: 18:81:dd:a8:29:5a:bc:9b:6f:31:a1:53:61:b1:38: db:29:c5:10:66:01:81:d9:72:53:bd:44:a9:f0:b5: c0:b6:8f:97:32:67:79:cf:01:08:b2:ce:80:9f:0c: 17:c1:2f:87:18:f0:9e:59:aa:5b:d3:50:03:7b:9a: 56:8e:56:b6:95:3d:bb:bd:3c:5e:bc:e9:15:d1:9d: ad:d2:45:7f:39:b4:53:19:55:89:1d:7d:f9:a9:b3: f2:19:1b:b0:a1:36:71:6e:34:60:de:f5:4f:21:92: d7:74:5e:e6:c1:74:83:f1:a7:6c:27:81:da:89:e4: 30:4f:dd:f7:20:a3:07:0b:1b:eb:eb:a8:6e:a1:55: 1c:f6:71:87:27:f4:95:f6:d5:69:c3:27:15:06:07: 83:13:06:07:a0:07:d7:3d:0f:52:e6:bb:6f:fd:85: 35:4a:81:5d:92:20:11:a9:0e:8e:f5:bb:46:a2:97: 00:e9:11:39:1c:d1:01:63:30:b5:5a:ce:7e:a2:c6: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:C8:71:14:83:D3:A2:54:83:CA:DF:3D:E3:A6:A0:85:93:1D:20 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a1:0e:15:7c:08:83:96:0d:fa:08:42:6a:16:9e:29:0c:3e: 63:88:b1:ff:b3:04:34:04:02:c7:97:58:c8:b2:6e:0c:7a:87: 0d:42:cb:16:ab:f6:a3:eb:02:cb:da:64:32:0a:5b:d8:22:54: 3e:11:da:2c:43:9a:b5:f7:97:85:84:52:5e:fd:6e:17:7a:fe: d6:43:a7:d7:be:46:dc:6c:e4:99:7d:c1:cf:17:23:a1:07:4d: 6b:6d:9c:3f:59:7c:dd:66:94:09:ad:84:a9:d1:99:a1:bf:9f: a1:b3:25:22:d6:7a:7b:15:7f:48:13:96:a4:1b:8e:4a:c4:ed: 85:26:33:82:c0:4a:62:cb:cf:56:30:1e:d8:96:95:42:76:88: d0:6c:4e:ef:c9:2c:13:40:53:66:a8:f4:31:9d:1a:c2:23:a1: 39:8c:c3:55:9f:ce:36:a2:48:35:1f:1d:88:2a:69:af:38:80: d6:fa:20:06:5c:8b:c3:0c:8d:f3:6d:f9:d8:64:97:66:54:03: 6d:d3:59:69:86:55:ee:5a:ee:ce:d8:bb:1d:ee:3f:e0:e2:48: 19:f8:e0:4a:8f:8b:eb:ef:d8:b7:a3:c2:6f:4e:de:9e:50:37: 25:3d:b0:46:2b:8d:62:2f:60:da:bf:85:88:59:0a:fd:b7:be: 16:24:85:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA5MDUwODAzNDVaFw0yNTA5MTIwODAzNDVaMBgxFjAUBgNV BAMTDTY4YmE5OTYxLWI5N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZKARXBDmkdX9CkKXheaHm2uQngqcHSzTyvQfG5L5v3240hAe34tZp09GaI34x dSVmUva1FAOXwGcKUhiB3agpWrybbzGhU2GxONspxRBmAYHZclO9RKnwtcC2j5cy Z3nPAQiyzoCfDBfBL4cY8J5ZqlvTUAN7mlaOVraVPbu9PF686RXRna3SRX85tFMZ VYkdffmps/IZG7ChNnFuNGDe9U8hktd0XubBdIPxp2wngdqJ5DBP3fcgowcLG+vr qG6hVRz2cYcn9JX21WnDJxUGB4MTBgegB9c9D1Lmu2/9hTVKgV2SIBGpDo71u0ai lwDpETkc0QFjMLVazn6ixrLvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm2HIcRSD 06JUg8rfPeOmoIWTHSAwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKhDhV8CIOWDfoIQmoWnikMPmOIsf+zBDQEAseXWMiybgx6hw1Cyxar 9qPrAsvaZDIKW9giVD4R2ixDmrX3l4WEUl79bhd6/tZDp9e+Rtxs5Jl9wc8XI6EH TWttnD9ZfN1mlAmthKnRmaG/n6GzJSLWensVf0gTlqQbjkrE7YUmM4LASmLLz1Yw HtiWlUJ2iNBsTu/JLBNAU2ao9DGdGsIjoTmMw1WfzjaiSDUfHYgqaa84gNb6IAZc i8MMjfNt+dhkl2ZUA23TWWmGVe5a7s7Yux3uP+DiSBn44EqPi+vv2Lejwm9O3p5Q NyU9sEYrjWIvYNq/hYhZCv23vhYkhYE= -----END CERTIFICATE-----Generated at Sat Sep 6 21:38:30 2025 by rpki-client