$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json) Hash identifier: DV85bk3jvLlSQh8dMUdG7K9xa0hWVwnnSc2q1CYfIWM= Subject key identifier: 8A:C5:84:F4:C3:B1:AE:0D:0E:FD:C1:3D:D7:A2:50:9D:43:5A:C6:0F Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft Manifest number: 70 Signing time: Tue 05 Aug 2025 07:27:21 +0000 Manifest this update: Tue 05 Aug 2025 07:27:21 +0000 Manifest next update: Tue 12 Aug 2025 07:27:21 +0000 Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: 4OSkRdCT+BXwL5xRiIHs9RjmKrjGbutq1cTXL3qzmLA=) 2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Validity Not Before: Aug 5 07:27:21 2025 GMT Not After : Aug 12 07:27:21 2025 GMT Subject: CN=6891b259-a054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7e:49:35:b6:8f:ad:57:2c:e8:4e:ff:00:b9: 87:59:1b:71:9f:c5:77:fa:18:e5:e2:c6:c4:94:5d: f5:84:f7:eb:f5:62:89:ec:36:f2:be:0a:c8:6f:eb: c8:1e:27:b7:18:d4:d3:96:49:c9:e8:75:44:c4:18: db:41:9d:5d:11:37:f9:dd:a6:b9:03:38:64:cf:13: a0:a3:46:69:eb:2d:b9:b3:02:00:e5:53:99:0f:e9: 34:14:07:f6:57:5d:e8:67:87:9c:d0:90:43:21:59: cd:b4:aa:4b:9e:13:47:79:67:80:2d:b9:98:22:ab: 44:15:30:9d:b4:52:4a:c2:fb:e5:74:0a:4d:cb:87: c8:7e:40:98:27:ec:bb:3b:58:46:72:3e:6c:9a:6c: cf:1f:14:f6:9c:ad:b1:72:1b:a3:52:1e:bf:03:90: 35:06:c3:e7:66:ad:c4:0b:3f:23:2e:a9:f0:d9:5d: d7:f1:e9:97:9b:96:ed:19:04:f2:3c:1d:23:ef:d8: 3d:c7:36:07:3d:4c:75:e1:a5:75:01:58:af:3e:35: a7:32:76:4d:d5:19:62:f6:27:dc:45:68:9a:af:46: ec:6a:e3:a1:23:ed:cf:d5:dd:d2:17:a5:da:3e:15: 62:2b:5b:e5:e4:a7:69:54:d6:91:46:95:94:77:aa: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:84:F4:C3:B1:AE:0D:0E:FD:C1:3D:D7:A2:50:9D:43:5A:C6:0F X509v3 Authority Key Identifier: keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c4:4f:ad:5d:b8:3c:64:4e:b2:b2:9d:9f:41:d3:c6:5c:b2: 32:50:06:ae:c3:4f:ac:2d:9b:ec:3e:6f:5e:23:df:9e:21:8b: 4a:99:74:e3:34:e4:95:1b:d4:cc:85:1b:ba:9a:26:c7:6e:9f: de:81:94:72:ca:52:91:61:bc:98:33:84:b3:95:3a:d3:1b:d2: 6d:88:2e:ed:d5:87:5d:74:a2:ae:41:38:d1:9f:81:a4:a0:38: a8:1f:73:d0:12:0d:46:cb:02:df:06:f7:4c:39:d3:4a:38:c6: ef:51:8c:1f:72:c8:5c:62:26:0b:9f:92:08:6b:22:59:54:87: 51:84:30:69:12:ed:89:02:ed:65:d3:92:12:87:bd:94:24:48: c2:90:56:dd:50:1f:c9:2a:76:7f:a9:5f:0a:c3:29:9c:ca:c3: 53:81:4b:23:0e:f0:e6:22:a5:03:22:e3:ec:f7:5a:63:04:9b: 34:53:b9:e9:05:2b:f8:48:3d:00:49:b0:c1:6d:1f:97:4b:59: fa:5a:37:cc:6f:8e:54:76:f3:09:0f:e5:52:d3:f1:2d:a1:d7: ce:71:5c:17:b6:91:bf:12:df:0b:c9:71:28:de:ab:f7:c0:04: 2a:a5:ad:75:da:67:1c:25:26:70:26:3e:ea:4b:ef:ce:d5:ee: 66:dd:2c:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MThCQjExMC8GA1UEBRMoMzFBQzk2NDdDN0Y4NzBBNjZCQTJERTc4ODU0NENEOEMz MjZCREZGOTAeFw0yNTA4MDUwNzI3MjFaFw0yNTA4MTIwNzI3MjFaMBgxFjAUBgNV BAMTDTY4OTFiMjU5LWEwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSfkk1to+tVyzoTv8AuYdZG3GfxXf6GOXixsSUXfWE9+v1YonsNvK+Cshv68ge J7cY1NOWScnodUTEGNtBnV0RN/ndprkDOGTPE6CjRmnrLbmzAgDlU5kP6TQUB/ZX Xehnh5zQkEMhWc20qkueE0d5Z4AtuZgiq0QVMJ20UkrC++V0Ck3Lh8h+QJgn7Ls7 WEZyPmyabM8fFPacrbFyG6NSHr8DkDUGw+dmrcQLPyMuqfDZXdfx6Zeblu0ZBPI8 HSPv2D3HNgc9THXhpXUBWK8+Nacydk3VGWL2J9xFaJqvRuxq46Ej7c/V3dIXpdo+ FWIrW+Xkp2lU1pFGlZR3qmopAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUisWE9MOx rg0O/cE916JQnUNaxg8wHwYDVR0jBBgwFoAUMayWR8f4cKZrot54hUTNjDJr3/kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxOEJCLzZBMEIyMDU0QzhD NTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNf ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWF5V1I4ZjRjS1pyb3Q1NGhVVE5qREpyM19rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx OEJCLzZBMEIyMDU0QzhDNTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0ta cm90NTRoVVROakRKcjNfay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALbET61duDxkTrKynZ9B08ZcsjJQBq7DT6wtm+w+b14j354hi0qZdOM0 5JUb1MyFG7qaJsdun96BlHLKUpFhvJgzhLOVOtMb0m2ILu3Vh110oq5BONGfgaSg OKgfc9ASDUbLAt8G90w500o4xu9RjB9yyFxiJgufkghrIllUh1GEMGkS7YkC7WXT khKHvZQkSMKQVt1QH8kqdn+pXwrDKZzKw1OBSyMO8OYipQMi4+z3WmMEmzRTuekF K/hIPQBJsMFtH5dLWfpaN8xvjlR28wkP5VLT8S2h185xXBe2kb8S3wvJcSjeq/fA BCqlrXXaZxwlJnAmPupL787V7mbdLJY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:31 2025 by rpki-client