$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft File: NEG9O2ntc3NN-3NQWpXySCGmHoE.mft (raw, json) Hash identifier: Pc7LVmuFbcdE2fDdax+Bvipe6JajvOThDfJRYfTSKv8= Subject key identifier: B9:B9:13:15:8B:03:12:F8:AD:86:F8:65:61:1A:4C:57:2D:94:5C:16 Authority key identifier: 34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 Certificate issuer: /CN=A91FEC1E/serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft Manifest number: 09 Signing time: Tue 03 Jun 2025 08:01:38 +0000 Manifest this update: Tue 03 Jun 2025 08:01:37 +0000 Manifest next update: Tue 10 Jun 2025 08:01:37 +0000 Files and hashes: 1: NEG9O2ntc3NN-3NQWpXySCGmHoE.crl (hash: 77zwMf36NiTZwJyZospWUs5AIp3Msl9r2wnmemu/kHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=3441BD3B69ED73734DFB73505A95F24821A61E81 Validity Not Before: Jun 3 08:01:37 2025 GMT Not After : Jun 10 08:01:37 2025 GMT Subject: CN=683eabe1-e549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:f8:16:ba:0b:43:64:02:7b:b2:5c:34:8f: bc:c1:8f:b5:7b:af:b5:03:4a:9a:75:d5:bf:f4:db: 24:57:6b:79:f7:38:b0:5b:cd:40:64:a1:c7:77:53: cd:1f:64:bd:fa:e6:d1:02:a9:95:3d:42:f1:0f:fe: 1d:e3:cb:d0:7e:5c:14:1b:7f:a9:1b:42:56:2a:5f: ad:08:21:be:51:c6:06:b6:5b:94:4c:a5:8d:8c:b1: d2:36:d0:32:ac:43:ff:c3:ad:f0:ca:98:2f:52:1e: bc:5f:52:10:a6:08:ec:e8:82:8f:c0:ab:82:4b:be: 18:34:1f:a6:a1:60:8c:d1:f9:fd:8b:bc:70:16:95: cc:4e:a6:9f:c3:59:c7:8b:e0:87:23:c5:57:c8:28: d4:8b:21:0b:ec:06:65:c6:af:96:60:90:1e:86:8c: ba:37:3c:11:3e:99:f1:90:d3:4a:79:16:99:58:a4: 4d:66:62:99:14:6f:96:9c:70:fd:03:15:85:e4:f6: 0f:58:67:a4:2c:5e:3b:10:18:a7:27:0e:16:0e:8b: f1:57:dc:67:e7:b2:f2:37:14:83:86:79:c7:49:4c: ce:00:e3:65:24:e2:69:8e:34:79:a6:22:f9:03:34: fc:d7:82:32:9a:39:4b:4e:c4:76:f8:e7:13:33:33: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B9:13:15:8B:03:12:F8:AD:86:F8:65:61:1A:4C:57:2D:94:5C:16 X509v3 Authority Key Identifier: keyid:34:41:BD:3B:69:ED:73:73:4D:FB:73:50:5A:95:F2:48:21:A6:1E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NEG9O2ntc3NN-3NQWpXySCGmHoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/DE51EC40353A11F08C95C067C4F9AE02/NEG9O2ntc3NN-3NQWpXySCGmHoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:01:dd:0c:a3:06:d3:b3:4c:cd:db:97:5f:89:fb:f1:bb:b4: f6:1c:e7:9f:77:2e:38:91:4e:4d:a6:22:c1:ef:77:15:d7:14: df:ae:ac:e4:89:0c:87:b1:fc:a7:f1:f2:cc:8a:a6:9e:20:ad: 2a:2c:c6:65:69:c8:26:f7:4f:8d:ee:2c:c5:21:1c:bf:13:b3: 65:f6:dd:9f:15:05:fa:f2:8a:ef:48:b6:69:fb:76:5a:84:0b: fe:a8:37:f7:bd:c5:32:08:0e:52:60:50:b1:ee:b3:cd:25:12: 30:61:46:8a:0d:5a:7b:15:11:2b:7a:da:d4:34:56:ac:f0:d2: 98:e4:18:0c:67:db:12:f8:aa:77:65:74:db:b3:86:57:fd:c2: 25:69:30:97:41:6a:88:c2:12:f8:fc:e3:f1:36:52:25:f3:09: df:16:80:97:b6:f4:fa:9e:94:fe:57:62:35:5d:9b:2c:3e:16: 4c:fe:85:95:5c:bd:70:07:be:67:e7:4f:4f:4f:e6:f9:13:59: 31:18:62:8f:ca:dc:6f:b2:76:82:1e:3e:24:2d:60:bb:95:73: ae:8d:58:1d:83:6a:3b:1c:c3:b4:05:cc:06:e9:a2:6a:84:38: 5b:29:f8:f6:0f:87:f7:f5:21:de:ac:47:5a:fa:95:4a:52:be: fd:7d:de:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMzQ0MUJEM0I2OUVENzM3MzRERkI3MzUwNUE5NUYyNDgy MUE2MUU4MTAeFw0yNTA2MDMwODAxMzdaFw0yNTA2MTAwODAxMzdaMBgxFjAUBgNV BAMTDTY4M2VhYmUxLWU1NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrnvgWugtDZAJ7slw0j7zBj7V7r7UDSpp11b/02yRXa3n3OLBbzUBkocd3U80f ZL365tECqZU9QvEP/h3jy9B+XBQbf6kbQlYqX60IIb5Rxga2W5RMpY2MsdI20DKs Q//DrfDKmC9SHrxfUhCmCOzogo/Aq4JLvhg0H6ahYIzR+f2LvHAWlcxOpp/DWceL 4IcjxVfIKNSLIQvsBmXGr5ZgkB6GjLo3PBE+mfGQ00p5FplYpE1mYpkUb5accP0D FYXk9g9YZ6QsXjsQGKcnDhYOi/FX3GfnsvI3FIOGecdJTM4A42Uk4mmONHmmIvkD NPzXgjKaOUtOxHb45xMzM32BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUubkTFYsD EvithvhlYRpMVy2UXBYwHwYDVR0jBBgwFoAUNEG9O2ntc3NN+3NQWpXySCGmHoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0RFNTFFQzQwMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNOTi0zTlFXcFh5U0NHbUhv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkVHOU8ybnRjM05OLTNOUVdwWHlTQ0dtSG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0RFNTFFQzQwMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL05FRzlPMm50YzNO Ti0zTlFXcFh5U0NHbUhvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4B3QyjBtOzTM3bl1+J+/G7tPYc5593LjiRTk2mIsHvdxXXFN+urOSJ DIex/Kfx8syKpp4grSosxmVpyCb3T43uLMUhHL8Ts2X23Z8VBfryiu9Itmn7dlqE C/6oN/e9xTIIDlJgULHus80lEjBhRooNWnsVESt62tQ0Vqzw0pjkGAxn2xL4qndl dNuzhlf9wiVpMJdBaojCEvj84/E2UiXzCd8WgJe29PqelP5XYjVdmyw+Fkz+hZVc vXAHvmfnT09P5vkTWTEYYo/K3G+ydoIePiQtYLuVc66NWB2Dajscw7QFzAbpomqE OFsp+PYPh/f1Id6sR1r6lUpSvv193nE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:28 2025 by rpki-client