$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: NctIuy5Prjt5ZujIF5imyb8SDMS35A5mByjyww1f5A0= Subject key identifier: 9C:6E:8A:A3:EB:AE:AD:06:EA:02:FF:03:33:87:F5:AE:E1:C5:FA:39 Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 0500 Signing time: Tue 05 Aug 2025 00:06:35 +0000 Manifest this update: Tue 05 Aug 2025 00:06:34 +0000 Manifest next update: Tue 12 Aug 2025 00:06:34 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: Agt1GCt5eaTd67Zo1MhgZl6LvYLeC/j4dhBJC6utJ8k=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: Aug 5 00:06:34 2025 GMT Not After : Aug 12 00:06:34 2025 GMT Subject: CN=68914b0b-7a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:bd:b1:88:4c:92:7f:8e:d2:a0:13:51:ae: 0d:d8:46:26:d3:7e:eb:ac:cd:40:d1:8c:9d:2a:55: e8:e4:90:c9:ae:b0:95:9e:5f:77:99:6d:04:eb:e3: 36:ea:5e:55:49:6b:79:26:24:0f:6f:dc:58:42:66: f4:63:66:65:60:c0:f9:8d:3e:d1:2b:3b:e0:5c:94: e2:d6:8b:67:ce:31:14:ce:7e:57:53:d6:78:57:a9: ed:dd:a5:2d:fd:24:e3:d2:c4:23:30:df:6c:5d:ac: e0:82:f8:6d:a3:fb:d4:0b:c4:da:ea:25:ee:a9:47: 6f:3f:21:af:01:a5:ae:cc:2a:5e:c8:8a:fc:d9:e2: 52:38:11:de:cb:1f:22:03:97:67:31:c6:cd:fd:ac: 90:69:68:87:f6:f8:3c:af:74:36:13:7f:a2:1c:57: 26:a9:7d:25:ed:7e:96:ec:65:3b:53:7d:32:ae:68: 60:b1:c3:b8:07:d2:f7:eb:e1:f7:7a:71:0a:1c:a0: 9a:18:98:53:10:85:0d:d9:53:3b:e2:6a:77:dd:bc: 72:b7:6f:7c:c0:58:a3:6d:68:99:a8:d7:c3:ba:e3: 1b:13:26:01:63:f4:4a:db:98:1f:18:d9:94:07:8c: 58:c0:a5:d1:77:46:02:88:dd:04:24:e2:bd:22:30: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6E:8A:A3:EB:AE:AD:06:EA:02:FF:03:33:87:F5:AE:E1:C5:FA:39 X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ae:04:4a:62:b6:fe:0b:3a:f8:7f:86:28:a9:9a:71:09:05: 81:d9:5f:0c:91:f5:9d:9a:0b:19:bc:b4:e6:57:db:c6:1f:16: 68:5d:7a:c6:1d:2a:b9:29:89:83:fe:11:63:c2:39:fc:ed:94: 80:2c:76:d1:c3:7b:d4:8e:b3:c5:29:f0:38:27:09:04:ef:ee: b0:ec:3c:fb:1a:15:2c:26:4a:38:8b:82:c3:d9:35:0b:dc:6c: c1:0c:47:0f:4b:f4:3d:7e:ee:63:71:d1:96:32:92:47:5d:45: 34:2c:8f:e0:55:d7:69:f4:ec:c1:f2:fe:d5:41:03:45:cf:55: 46:fd:f9:12:61:1f:41:b6:3f:72:2b:1c:a3:45:6d:38:fe:3a: ef:74:50:d1:cf:fe:6f:7c:8b:c8:8a:55:94:e6:55:07:61:1d: 90:da:6e:19:98:e2:2b:7b:65:0f:7f:42:43:92:eb:4b:f5:11: 83:43:3d:31:de:4a:e5:84:46:a3:d3:4f:b4:fb:57:51:a0:60: ac:63:c0:d3:73:c3:23:ed:36:6a:fe:b0:91:fe:32:33:de:13: 15:c2:64:57:a5:ac:54:78:f2:6d:9d:9a:50:b2:9a:c5:2e:ce: 87:1b:a1:7a:2f:e4:cf:f9:73:54:34:b7:27:6e:67:61:97:36: 3e:13:77:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUwODA1MDAwNjM0WhcNMjUwODEyMDAwNjM0WjAYMRYwFAYD VQQDEw02ODkxNGIwYi03YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu369sYhMkn+O0qATUa4N2EYm037rrM1A0YydKlXo5JDJrrCVnl93mW0E6+M2 6l5VSWt5JiQPb9xYQmb0Y2ZlYMD5jT7RKzvgXJTi1otnzjEUzn5XU9Z4V6nt3aUt /STj0sQjMN9sXazggvhto/vUC8Ta6iXuqUdvPyGvAaWuzCpeyIr82eJSOBHeyx8i A5dnMcbN/ayQaWiH9vg8r3Q2E3+iHFcmqX0l7X6W7GU7U30yrmhgscO4B9L36+H3 enEKHKCaGJhTEIUN2VM74mp33bxyt298wFijbWiZqNfDuuMbEyYBY/RK25gfGNmU B4xYwKXRd0YCiN0EJOK9IjBAiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxuiqPr rq0G6gL/AzOH9a7hxfo5MB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnrgRKYrb+Czr4f4YoqZpxCQWB2V8MkfWdmgsZvLTmV9vGHxZoXXrG HSq5KYmD/hFjwjn87ZSALHbRw3vUjrPFKfA4JwkE7+6w7Dz7GhUsJko4i4LD2TUL 3GzBDEcPS/Q9fu5jcdGWMpJHXUU0LI/gVddp9OzB8v7VQQNFz1VG/fkSYR9Btj9y KxyjRW04/jrvdFDRz/5vfIvIilWU5lUHYR2Q2m4ZmOIre2UPf0JDkutL9RGDQz0x 3krlhEaj00+0+1dRoGCsY8DTc8Mj7TZq/rCR/jIz3hMVwmRXpaxUePJtnZpQsprF Ls6HG6F6L+TP+XNUNLcnbmdhlzY+E3fz -----END CERTIFICATE-----Generated at Thu Aug 7 01:22:22 2025 by rpki-client