$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: NHsdiRTsOV2SFKPQby3A6m7KcgAheF2p0IFrhVTSAog= Subject key identifier: D6:C8:BA:26:7F:2A:D4:30:57:A5:51:EF:61:B1:39:6D:5F:FD:EF:22 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 15 Signing time: Sat 09 Aug 2025 08:31:10 +0000 Manifest this update: Sat 09 Aug 2025 08:31:09 +0000 Manifest next update: Sat 16 Aug 2025 08:31:09 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: q7CN6fFD+KZ7XNNwDejQlZAWwfVIrFHuQ6g3zlpXpMA=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: O8Z/SaLnBNWGRjL6AfyE+33fscQi14WCCS2K6DsHHDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Aug 9 08:31:09 2025 GMT Not After : Aug 16 08:31:09 2025 GMT Subject: CN=6897074d-8604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:31:37:53:61:f8:6d:19:b0:53:1f:75:6a: 51:f1:48:52:d8:88:6d:c9:63:30:ab:b8:8e:7a:3f: fd:fd:e1:14:a3:fe:b1:42:42:db:6b:a6:3e:b2:d5: ee:01:f5:c2:8d:78:09:0f:9b:04:81:82:39:64:32: 1b:ff:07:d0:94:bf:3c:f1:24:d1:a4:88:a6:aa:ff: e3:3b:4b:1c:dd:67:a7:ae:93:32:28:be:91:db:12: 90:20:5c:6d:51:0a:61:73:1f:34:c2:dc:37:4b:b8: c0:17:c7:82:94:eb:49:60:59:4f:17:ab:16:ef:3f: 6f:a1:6a:1a:41:e2:5d:ec:96:75:d8:54:9b:5d:6b: 08:40:25:51:e9:17:10:bd:d6:3c:01:d5:56:5f:d2: db:22:ee:51:a1:fa:c8:2d:be:05:cf:b0:5d:30:d7: e0:40:e6:94:6d:c3:48:fb:d7:29:31:13:15:63:48: 21:46:64:14:b3:c1:4a:9b:b8:1b:f2:e5:b9:62:c2: f3:d5:a5:a5:16:b5:be:ee:5d:e4:fa:f9:3a:48:60: 0c:69:69:16:a9:d6:a0:a7:80:20:9d:d1:87:01:10: b0:8d:33:08:b3:cb:c0:d6:1a:b0:23:8c:42:bd:a5: 4a:ac:c6:80:3f:1e:0c:00:5e:58:7e:65:cd:06:d1: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:BA:26:7F:2A:D4:30:57:A5:51:EF:61:B1:39:6D:5F:FD:EF:22 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:57:55:75:44:0e:5d:a1:f9:09:f6:b9:0d:7d:c4:a7:95:4e: 37:57:2e:89:22:bb:40:e7:3f:dd:50:f5:57:43:6b:ab:d9:22: ae:dd:50:50:f0:10:b5:1d:3a:15:b3:5a:71:fe:f0:91:e7:6c: c3:8c:0e:67:9d:0e:ad:b2:85:00:06:bd:82:23:b5:21:11:16: 73:17:2b:44:a5:fd:4a:fb:f4:39:f5:b5:e2:aa:b8:79:2b:3e: 0a:2d:24:97:71:dd:09:e8:0a:1a:ad:46:61:ed:27:97:74:1a: ab:07:fb:af:2d:04:6b:60:49:14:26:e8:00:95:f1:07:3e:e7: 79:30:9f:e6:b7:43:1c:9b:73:8c:12:d9:d0:d8:af:f2:ff:81: 1a:b2:18:6d:2d:18:e1:66:a5:8b:67:ed:09:03:5f:c0:4e:05: 5c:b7:b7:79:a9:51:18:41:70:29:d6:e7:72:c0:b5:a1:7c:e4: a5:9d:ea:d0:3b:25:6c:d4:3d:85:7e:80:49:0f:71:df:23:5a: af:bf:2c:9d:f1:cd:7d:48:a3:33:44:22:76:d6:5a:28:c3:9d: 73:be:4e:9d:a3:37:ee:ea:12:be:ab:e5:86:95:81:20:c2:6a: c2:21:20:26:13:22:c2:c1:cc:6b:16:59:92:d0:ad:3e:20:be: 38:6c:bb:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoMzBENzE5RjlDNkQzN0UyQUM5RjRENkQ0QjFGN0Q5NzhF QzJBMzI4OTAeFw0yNTA4MDkwODMxMDlaFw0yNTA4MTYwODMxMDlaMBgxFjAUBgNV BAMTDTY4OTcwNzRkLTg2MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUmTE3U2H4bRmwUx91alHxSFLYiG3JYzCruI56P/394RSj/rFCQttrpj6y1e4B 9cKNeAkPmwSBgjlkMhv/B9CUvzzxJNGkiKaq/+M7SxzdZ6eukzIovpHbEpAgXG1R CmFzHzTC3DdLuMAXx4KU60lgWU8XqxbvP2+hahpB4l3slnXYVJtdawhAJVHpFxC9 1jwB1VZf0tsi7lGh+sgtvgXPsF0w1+BA5pRtw0j71ykxExVjSCFGZBSzwUqbuBvy 5bliwvPVpaUWtb7uXeT6+TpIYAxpaRap1qCngCCd0YcBELCNMwizy8DWGrAjjEK9 pUqsxoA/HgwAXlh+Zc0G0VdBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1si6Jn8q 1DBXpVHvYbE5bV/97yIwHwYDVR0jBBgwFoAUMNcZ+cbTfirJ9NbUsffZeOwqMokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzREL0ZDMjA5MTM4NThE RDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1v ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTU5jWi1jYlRmaXJKOU5iVXNmZlplT3dxTW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzREL0ZDMjA5MTM4NThERDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmly SjlOYlVzZmZaZU93cU1vay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVXVXVEDl2h+Qn2uQ19xKeVTjdXLokiu0DnP91Q9VdDa6vZIq7dUFDw ELUdOhWzWnH+8JHnbMOMDmedDq2yhQAGvYIjtSERFnMXK0Sl/Ur79Dn1teKquHkr PgotJJdx3QnoChqtRmHtJ5d0GqsH+68tBGtgSRQm6ACV8Qc+53kwn+a3Qxybc4wS 2dDYr/L/gRqyGG0tGOFmpYtn7QkDX8BOBVy3t3mpURhBcCnW53LAtaF85KWd6tA7 JWzUPYV+gEkPcd8jWq+/LJ3xzX1IozNEInbWWijDnXO+Tp2jN+7qEr6r5YaVgSDC asIhICYTIsLBzGsWWZLQrT4gvjhsuwc= -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:37 2025 by rpki-client