$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: M90ats1JYPdib4VJJAgJGSTWUVXNl3Xpv8Vz4ehpEW4= Subject key identifier: 3C:19:ED:42:7D:37:0A:58:D6:14:44:05:0E:DF:13:65:4E:31:B9:A6 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03B7 Signing time: Sat 09 Aug 2025 01:13:21 +0000 Manifest this update: Sat 09 Aug 2025 01:13:20 +0000 Manifest next update: Sat 16 Aug 2025 01:13:20 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: kMO/2xt9pz595HKkxMiHs4cdQGKZH0M57fMXJ3fGoT8=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Aug 9 01:13:20 2025 GMT Not After : Aug 16 01:13:20 2025 GMT Subject: CN=6896a0b0-843a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:9a:6f:c6:aa:19:c3:75:69:2d:eb:12:f4: 43:56:b8:43:be:2e:e3:5c:23:b1:d6:0b:d2:5b:fe: 8b:72:43:06:a7:a4:15:f6:ca:b1:d5:15:8b:44:8d: a5:5d:33:48:54:c8:5e:0c:a3:ee:c6:f8:c4:7d:1e: a3:24:bd:5e:3f:ce:cc:52:5f:95:6e:d4:86:ba:72: d9:98:2f:31:70:09:f6:b4:b7:aa:ec:05:5c:63:9c: f7:88:78:41:a0:ed:6c:bd:31:27:1f:af:eb:6f:6c: 56:62:f7:1b:a7:92:1d:d5:fc:f4:5a:e3:7b:b6:14: 47:b9:15:43:79:ee:5f:e1:c1:b2:ed:1e:bf:95:a2: 55:fc:42:93:2d:3c:14:d5:77:bb:d9:70:fc:5a:27: 91:2c:d7:da:9a:38:d9:ab:e2:de:9a:d3:bb:21:31: e1:63:f5:ce:91:9a:ac:d0:dc:31:24:34:1a:af:8d: 29:47:50:b6:e2:fe:5b:11:b1:d6:81:c3:bd:1a:42: fb:0b:b2:74:d4:0b:26:06:6b:03:97:1c:bc:1f:c5: f0:e7:01:73:af:0a:79:03:0e:34:9b:5d:42:ba:b0: 43:ba:92:65:c9:5a:df:7d:ff:7a:13:a0:c0:9a:87: 57:81:bf:79:68:03:1f:6f:03:0f:fb:7b:a4:85:c2: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:ED:42:7D:37:0A:58:D6:14:44:05:0E:DF:13:65:4E:31:B9:A6 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:5b:41:d0:19:fc:3b:7b:e2:cd:89:4f:93:47:16:0f:6b: cc:2d:13:5f:f7:c2:47:e4:21:be:2f:ad:11:6c:83:1f:8e:18: b5:39:02:67:4e:0b:de:2f:6e:66:4c:3f:2c:a7:19:c4:25:ca: 5b:b8:88:43:f6:6e:b8:73:b9:a7:82:57:dc:6c:a1:08:1a:a6: a8:73:56:54:c8:62:66:06:fb:b9:b1:4a:a2:28:a6:a1:a7:de: 58:b9:3d:ea:e2:74:76:c3:9c:89:20:18:63:08:f4:3e:b7:92: 47:fd:cd:06:0c:8f:59:84:91:d5:6c:8b:cc:61:9a:31:2a:94: d3:24:ec:7f:ee:ad:8e:47:3a:eb:c8:8a:75:ad:44:28:4d:67: 1b:7c:74:df:19:a5:b6:94:ad:8d:7d:cf:dc:6a:79:28:12:d7: a4:ff:cf:3c:8b:f0:36:78:24:9f:e3:7b:ee:f5:75:e1:a2:c5: 92:79:26:64:00:83:7f:18:0a:16:7c:88:dc:a2:64:42:27:fc: e2:6e:9e:fd:31:6e:fb:f5:a9:6f:7d:54:ab:40:4a:42:0c:9f: 58:04:f8:06:ed:b6:69:65:82:ad:fd:33:6e:e0:3e:09:c9:d9: 13:80:8e:4e:77:a0:f3:78:69:bd:76:a6:c5:46:da:92:6f:44: 99:6f:ea:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwODA5MDExMzIwWhcNMjUwODE2MDExMzIwWjAYMRYwFAYD VQQDEw02ODk2YTBiMC04NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsOab8aqGcN1aS3rEvRDVrhDvi7jXCOx1gvSW/6LckMGp6QV9sqx1RWLRI2l XTNIVMheDKPuxvjEfR6jJL1eP87MUl+VbtSGunLZmC8xcAn2tLeq7AVcY5z3iHhB oO1svTEnH6/rb2xWYvcbp5Id1fz0WuN7thRHuRVDee5f4cGy7R6/laJV/EKTLTwU 1Xe72XD8WieRLNfamjjZq+LemtO7ITHhY/XOkZqs0NwxJDQar40pR1C24v5bEbHW gcO9GkL7C7J01AsmBmsDlxy8H8Xw5wFzrwp5Aw40m11CurBDupJlyVrfff96E6DA modXgb95aAMfbwMP+3ukhcIhWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwZ7UJ9 NwpY1hREBQ7fE2VOMbmmMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhCFtB0Bn8O3vizYlPk0cWD2vMLRNf98JH5CG+L60RbIMfjhi1OQJn TgveL25mTD8spxnEJcpbuIhD9m64c7mnglfcbKEIGqaoc1ZUyGJmBvu5sUqiKKah p95YuT3q4nR2w5yJIBhjCPQ+t5JH/c0GDI9ZhJHVbIvMYZoxKpTTJOx/7q2ORzrr yIp1rUQoTWcbfHTfGaW2lK2Nfc/cankoEtek/888i/A2eCSf43vu9XXhosWSeSZk AIN/GAoWfIjcomRCJ/zibp79MW779alvfVSrQEpCDJ9YBPgG7bZpZYKt/TNu4D4J ydkTgI5Od6DzeGm9dqbFRtqSb0SZb+qG -----END CERTIFICATE-----Generated at Sat Aug 9 15:08:45 2025 by rpki-client