$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json) Hash identifier: GwASU6WU6nGSj/0khMIO3FJCHqT44tZc1yd8G53wZUA= Subject key identifier: 2E:54:8A:EB:CD:B6:68:09:F2:2F:66:A7:B7:3B:21:31:39:62:2E:98 Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft Manifest number: D7 Signing time: Mon 11 Aug 2025 05:46:22 +0000 Manifest this update: Mon 11 Aug 2025 05:46:21 +0000 Manifest next update: Mon 18 Aug 2025 05:46:21 +0000 Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: t5p/4WNGOF+QKXXLsHLkMjU5xG+e+jqbaVo+eiYDKA4=) 2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: jZ8rK9Cjwbx5cGtSyivoYRd59H87vJYDWLCVXZK0EWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Validity Not Before: Aug 11 05:46:21 2025 GMT Not After : Aug 18 05:46:21 2025 GMT Subject: CN=689983ad-e124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f3:c3:f4:7e:a5:82:97:bb:ab:f7:8b:a2:25: 0b:8d:ab:4b:92:8c:13:7e:f0:e4:3c:45:6c:d4:44: 69:14:7d:5e:7a:19:6b:59:1b:70:93:e3:f3:e5:6a: df:c0:ab:12:eb:fe:06:48:bb:60:c4:8b:8c:2a:2c: be:83:36:55:24:c0:68:16:61:f4:f8:a1:ab:6a:5e: 55:0b:e5:f9:b8:c2:c9:5b:aa:7d:06:e2:a5:a6:19: d7:ff:12:49:3a:91:e4:a0:96:b0:93:3d:79:6b:38: 59:a5:86:71:80:53:f4:23:e6:7e:03:8a:83:1b:b5: 38:1d:2b:0e:8f:de:b0:1b:e7:62:88:e5:ab:7f:99: c1:47:9c:8b:df:e2:4f:96:63:61:d3:35:11:16:cc: df:fd:6e:9d:82:86:61:da:ca:45:f9:f1:62:80:32: 9c:b3:b6:da:11:60:ff:68:33:ec:19:f3:2e:05:1e: 43:86:27:e0:94:cb:b1:4f:b5:02:6d:ed:3e:96:8d: 92:9f:33:c4:a4:cc:80:02:af:b1:fd:31:68:f6:ce: 18:d9:fe:ce:36:c3:e4:86:ef:04:5d:27:63:42:81: 6f:2e:e3:43:c0:11:21:a0:a7:e6:cb:93:fc:14:c7: e3:1d:8a:e6:9e:f9:76:f7:65:d7:8f:91:81:85:4b: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:8A:EB:CD:B6:68:09:F2:2F:66:A7:B7:3B:21:31:39:62:2E:98 X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:02:11:a9:ab:5e:7e:e0:c5:41:1d:a1:13:cb:0d:73:c5:88: 0b:14:ad:a5:5b:fb:2c:bc:e8:4c:97:99:53:21:18:9f:66:9f: 3c:9f:28:d3:53:ce:50:3c:01:fb:4e:a5:d7:92:6b:e4:bd:35: 90:28:85:40:b3:92:68:46:ab:d2:b6:e7:a6:1d:66:26:d0:45: e6:70:bd:67:2f:20:4a:48:f0:1f:47:ed:78:aa:47:3a:41:c5: 3a:18:c8:53:73:b4:55:cb:b0:89:d3:78:ab:3f:d6:4c:d5:ed: d3:e0:19:be:82:bb:3d:f3:e6:5a:37:11:71:10:3c:b1:1e:81: 13:7a:72:0d:5c:8d:9e:2d:f2:88:8e:52:70:bd:47:57:7a:7e: 79:fa:aa:66:70:aa:91:f8:d8:91:a3:4f:7d:92:22:02:a4:74: 70:24:b1:f3:85:66:a2:e5:3a:a1:ab:fa:24:f9:a3:c9:3d:3c: 78:5f:e2:bc:00:5c:bc:74:12:d2:10:e3:91:7a:63:6f:23:4d: e2:44:d2:e9:22:ed:23:97:0e:a8:a9:ee:c2:d8:cc:2e:90:4c: 3c:56:a0:03:1b:ef:64:bf:48:8d:1d:e4:90:51:5f:10:7b:d8: 86:13:d7:ef:60:0e:a1:77:66:a3:f7:db:c4:82:29:e6:07:6d: 41:b7:03:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjUwODExMDU0NjIxWhcNMjUwODE4MDU0NjIxWjAYMRYwFAYD VQQDEw02ODk5ODNhZC1lMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PPD9H6lgpe7q/eLoiULjatLkowTfvDkPEVs1ERpFH1eehlrWRtwk+Pz5Wrf wKsS6/4GSLtgxIuMKiy+gzZVJMBoFmH0+KGral5VC+X5uMLJW6p9BuKlphnX/xJJ OpHkoJawkz15azhZpYZxgFP0I+Z+A4qDG7U4HSsOj96wG+diiOWrf5nBR5yL3+JP lmNh0zURFszf/W6dgoZh2spF+fFigDKcs7baEWD/aDPsGfMuBR5DhifglMuxT7UC be0+lo2SnzPEpMyAAq+x/TFo9s4Y2f7ONsPkhu8EXSdjQoFvLuNDwBEhoKfmy5P8 FMfjHYrmnvl292XXj5GBhUt6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5UiuvN tmgJ8i9mp7c7ITE5Yi6YMB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5AhGpq15+4MVBHaETyw1zxYgLFK2lW/ssvOhMl5lTIRifZp88nyjT U85QPAH7TqXXkmvkvTWQKIVAs5JoRqvStuemHWYm0EXmcL1nLyBKSPAfR+14qkc6 QcU6GMhTc7RVy7CJ03irP9ZM1e3T4Bm+grs98+ZaNxFxEDyxHoETenINXI2eLfKI jlJwvUdXen55+qpmcKqR+NiRo099kiICpHRwJLHzhWai5Tqhq/ok+aPJPTx4X+K8 AFy8dBLSEOORemNvI03iRNLpIu0jlw6oqe7C2MwukEw8VqADG+9kv0iNHeSQUV8Q e9iGE9fvYA6hd2aj99vEginmB21BtwM9 -----END CERTIFICATE-----Generated at Wed Aug 13 05:33:46 2025 by rpki-client