$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: Ti5X7K+g8zwJLXZEZJ3xkQkXOhTJH9vuKP0G812TmDI= Subject key identifier: 09:E1:07:E0:AE:F6:5C:E1:21:CF:83:17:22:C0:8B:D2:AD:F9:76:92 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 25C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 25AB Signing time: Fri 08 Aug 2025 15:48:05 +0000 Manifest this update: Fri 08 Aug 2025 15:48:04 +0000 Manifest next update: Fri 15 Aug 2025 15:48:04 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: 69GPgRqKkyBXA58A5mDLLYlKic2BDGk6Ymo4A9Qwlsc=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: TDCyPfvl14GmlvtvPX3j8FfT9kdUWeZZya5/K7phv9Q=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: Qmsz/kc6vCM5AVnwbPEOkvoDKpojajE1SGhMXZiiAis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9666 (0x25c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Aug 8 15:48:04 2025 GMT Not After : Aug 15 15:48:04 2025 GMT Subject: CN=68961c34-59d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:b9:48:43:0c:a6:4b:fe:18:cd:51:df:80: f7:6d:9e:c8:af:12:d3:ef:29:33:d7:3d:86:ab:24: e5:33:f3:2d:10:69:b4:14:5a:cd:c1:78:16:ee:59: e5:b7:92:98:9f:c3:f6:4c:d7:a8:aa:af:8e:c5:65: 12:fe:37:fb:6a:de:f3:8c:ce:17:3a:4c:1c:f7:b8: f1:dd:04:6d:d5:89:c0:1c:f9:b3:ec:dd:51:26:19: c4:12:3c:fc:f5:c8:80:8e:72:09:0f:07:ee:5b:b1: 5e:47:a1:70:68:6e:ef:7c:74:84:7b:5e:8a:0d:7e: 57:14:67:75:d2:81:34:0b:27:88:d2:2c:34:a6:32: 94:90:9c:72:db:09:dc:a5:57:6d:08:59:53:30:e2: 3c:62:9c:ee:60:7d:7b:3a:ce:a0:9c:0c:de:bb:b8: 44:c3:db:59:4c:a0:34:1f:3b:e6:ba:1b:be:11:de: e0:83:b5:34:2b:b2:66:0f:2b:ac:cc:e5:a0:bf:e6: a0:97:88:42:ff:b7:18:28:75:61:3b:04:15:75:a8: 2b:0f:d4:de:1c:d7:32:02:57:2b:8e:c6:6b:6f:fa: 61:e4:b5:2a:d7:4a:75:ec:79:40:d1:cf:d1:6d:47: 24:f4:e1:7d:33:66:bc:a6:61:ed:1e:b2:bf:4e:5a: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E1:07:E0:AE:F6:5C:E1:21:CF:83:17:22:C0:8B:D2:AD:F9:76:92 X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:eb:27:7f:7e:42:79:ea:cf:e7:5f:78:40:6d:67:d2:8f:5d: 77:6a:59:d1:6c:4d:ef:ec:22:fe:85:cc:89:db:df:b0:2d:2e: 87:b3:b0:30:e3:11:16:a0:ac:77:79:21:94:26:6e:21:99:4b: 50:52:ad:06:97:96:87:4d:23:6e:00:ad:dd:f5:88:73:e8:02: 76:3a:92:4e:8d:8c:1d:58:6b:25:59:35:05:73:cd:d9:44:19: 84:ef:97:5b:1f:b1:20:fa:db:82:ae:75:94:e3:58:21:16:fb: 23:a9:1c:24:98:38:6e:30:67:e3:21:66:45:2f:b3:ce:99:17: 9a:21:88:35:e8:2b:87:6f:bf:77:af:7f:7f:fe:cd:43:15:af: 6f:05:d7:bc:89:52:4f:ea:78:65:10:98:c1:2a:e8:e2:22:fb: 34:56:72:74:c9:a0:c0:38:0f:71:60:11:e9:69:93:cd:d1:eb: b1:05:f6:66:0e:89:91:44:46:64:72:35:3b:26:d9:9d:fa:98: 0f:5a:fb:ad:25:ed:2c:cd:4e:7d:9f:fa:de:cb:08:e8:17:8a: 06:5e:20:f2:01:e3:d9:05:5c:53:23:fd:11:ec:4f:33:54:a8: 92:e4:08:d2:5f:66:ec:d8:48:29:44:04:3a:01:60:46:92:c3: 94:60:33:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwODA4MTU0ODA0WhcNMjUwODE1MTU0ODA0WjAYMRYwFAYD VQQDEw02ODk2MWMzNC01OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9S5SEMMpkv+GM1R34D3bZ7IrxLT7ykz1z2GqyTlM/MtEGm0FFrNwXgW7lnl t5KYn8P2TNeoqq+OxWUS/jf7at7zjM4XOkwc97jx3QRt1YnAHPmz7N1RJhnEEjz8 9ciAjnIJDwfuW7FeR6FwaG7vfHSEe16KDX5XFGd10oE0CyeI0iw0pjKUkJxy2wnc pVdtCFlTMOI8YpzuYH17Os6gnAzeu7hEw9tZTKA0Hzvmuhu+Ed7gg7U0K7JmDyus zOWgv+agl4hC/7cYKHVhOwQVdagrD9TeHNcyAlcrjsZrb/ph5LUq10p17HlA0c/R bUck9OF9M2a8pmHtHrK/TloB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnhB+Cu 9lzhIc+DFyLAi9Kt+XaSMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU6yd/fkJ56s/nX3hAbWfSj113alnRbE3v7CL+hcyJ29+wLS6Hs7Aw 4xEWoKx3eSGUJm4hmUtQUq0Gl5aHTSNuAK3d9Yhz6AJ2OpJOjYwdWGslWTUFc83Z RBmE75dbH7Eg+tuCrnWU41ghFvsjqRwkmDhuMGfjIWZFL7POmReaIYg16CuHb793 r39//s1DFa9vBde8iVJP6nhlEJjBKujiIvs0VnJ0yaDAOA9xYBHpaZPN0euxBfZm DomRREZkcjU7Jtmd+pgPWvutJe0szU59n/reywjoF4oGXiDyAePZBVxTI/0R7E8z VKiS5AjSX2bs2EgpRAQ6AWBGksOUYDOm -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:49 2025 by rpki-client