$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: 0oFipM38DR7fjl6JZ3xNSXfK9YTrHSXFR5G13Q8JGa4= Subject key identifier: F6:00:6F:3E:23:7A:10:4E:E9:8B:17:8B:48:F0:37:09:55:E5:A4:39 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 20 Signing time: Sat 19 Jul 2025 08:07:54 +0000 Manifest this update: Sat 19 Jul 2025 08:07:54 +0000 Manifest next update: Sat 26 Jul 2025 08:07:54 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: oY6eHAI641yOGdGXgmwSg8qjX0/NbV/+ZqV0za6Fazs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Jul 19 08:07:54 2025 GMT Not After : Jul 26 08:07:54 2025 GMT Subject: CN=687b525a-6fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:ad:64:3f:dd:bc:2b:84:88:d2:04:28:c1: d2:d9:86:d0:b0:5d:b1:ac:97:c8:0a:db:ba:4e:fe: 89:bc:a3:2e:80:74:b2:d9:77:a8:77:e6:22:74:d5: ec:e2:16:c7:89:e0:40:0d:99:eb:f2:b1:76:39:f6: 7d:2d:48:61:f7:80:b6:fe:23:73:51:2e:81:56:47: 81:65:92:8c:86:66:4c:60:a7:15:fa:c8:f2:34:56: cd:ec:20:da:40:f4:96:cd:a8:90:96:03:38:a6:16: 1a:5a:04:aa:89:35:27:6a:2f:c6:a6:73:4d:66:f2: c1:ac:dd:bb:37:ca:5c:7f:7e:55:53:6c:9c:dd:45: ab:62:fb:87:fe:33:56:ea:70:b7:dd:b3:81:bf:e9: 20:35:ea:f0:03:7e:da:1c:f5:43:64:36:2c:04:a0: d5:89:05:c7:02:e9:24:36:f5:2e:14:86:62:ba:16: 05:c6:69:6c:83:b2:de:7e:07:70:7d:b0:84:e2:a2: 20:e3:35:fc:ca:c5:0d:7b:07:04:9a:8c:dc:1e:db: 8e:08:2d:d6:d5:33:75:93:5b:b8:5b:34:32:37:d7: 95:da:fe:52:9b:0f:7c:7c:29:02:90:11:65:db:2f: 94:44:2e:fa:e6:ff:02:04:4d:13:30:34:c4:13:08: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:00:6F:3E:23:7A:10:4E:E9:8B:17:8B:48:F0:37:09:55:E5:A4:39 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:14:92:a0:53:a7:86:8a:39:a3:de:9c:3b:c0:ea:6a:03:f8: 0b:39:0e:73:05:3a:6e:f7:b5:9d:b6:73:0f:f8:ff:64:ae:e6: 49:6c:f6:ba:e0:60:9a:8b:b0:27:69:30:6e:8f:95:e2:5c:6b: 09:eb:56:c2:89:77:dd:4a:9f:79:67:03:98:5d:4e:68:b5:b2: 64:dc:d6:82:2e:be:7d:74:9c:5f:43:50:ca:94:e6:db:04:96: ba:30:e8:ae:85:c5:24:a8:aa:83:66:f3:04:65:c9:92:41:ed: f1:3c:ae:0e:e5:f0:08:37:60:52:3b:29:1d:04:1f:b9:d1:2c: c8:e3:6e:ab:b4:35:cc:80:8e:6f:89:98:06:2c:69:fd:53:31: 19:5c:1c:8a:ed:90:d5:a5:49:da:21:9b:02:50:99:ff:d8:25: 97:c9:4b:8d:27:58:7d:43:e5:61:a5:c8:0f:f6:22:e2:8f:4f: 63:16:1d:b0:a8:08:b8:6f:cd:40:b2:35:bc:c3:b2:df:fb:64: f7:da:76:99:e8:6a:7b:fc:09:1f:05:cf:09:83:9d:3a:d3:d3: fd:98:a6:6d:ef:38:38:23:cc:cf:50:c5:30:28:f1:dc:fe:00: 47:c0:0f:71:f9:bf:71:ac:dd:68:28:a7:a9:4d:83:67:e6:47: 90:91:9c:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA3MTkwODA3NTRaFw0yNTA3MjYwODA3NTRaMBgxFjAUBgNV BAMTDTY4N2I1MjVhLTZmY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGHa1kP928K4SI0gQowdLZhtCwXbGsl8gK27pO/om8oy6AdLLZd6h35iJ01ezi FseJ4EANmevysXY59n0tSGH3gLb+I3NRLoFWR4FlkoyGZkxgpxX6yPI0Vs3sINpA 9JbNqJCWAzimFhpaBKqJNSdqL8amc01m8sGs3bs3ylx/flVTbJzdRati+4f+M1bq cLfds4G/6SA16vADftoc9UNkNiwEoNWJBccC6SQ29S4UhmK6FgXGaWyDst5+B3B9 sITioiDjNfzKxQ17BwSajNwe244ILdbVM3WTW7hbNDI315Xa/lKbD3x8KQKQEWXb L5RELvrm/wIETRMwNMQTCJChAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9gBvPiN6 EE7pixeLSPA3CVXlpDkwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIcUkqBTp4aKOaPenDvA6moD+As5DnMFOm73tZ22cw/4/2Su5kls9rrg YJqLsCdpMG6PleJcawnrVsKJd91Kn3lnA5hdTmi1smTc1oIuvn10nF9DUMqU5tsE lrow6K6FxSSoqoNm8wRlyZJB7fE8rg7l8Ag3YFI7KR0EH7nRLMjjbqu0NcyAjm+J mAYsaf1TMRlcHIrtkNWlSdohmwJQmf/YJZfJS40nWH1D5WGlyA/2IuKPT2MWHbCo CLhvzUCyNbzDst/7ZPfadpnoanv8CR8FzwmDnTrT0/2Ypm3vODgjzM9QxTAo8dz+ AEfAD3H5v3Gs3Wgop6lNg2fmR5CRnMQ= -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:02 2025 by rpki-client