$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: l9aIy5hROX2RyfAuF06EjGTA2h0YHiC/mTbHwNpFVDc= Subject key identifier: 61:DF:8B:48:E4:63:43:EE:F2:BC:FE:2D:21:D8:1A:CE:1A:4B:51:69 Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 07E1 Signing time: Fri 08 Aug 2025 21:31:53 +0000 Manifest this update: Fri 08 Aug 2025 21:31:53 +0000 Manifest next update: Fri 15 Aug 2025 21:31:53 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: V0CTknbWhsMWbr7VUruvUxpp1yVGG3GueEh8bdi9X7I=) 2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: LwB2LqDOhHIBTqs2GBEUbqXjt3VBU4kWjANTbQ1spqo=) 3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +6R7bMqMqpzAOMYELOdkWclWKRtU/auj18n3CAr0V2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: Aug 8 21:31:53 2025 GMT Not After : Aug 15 21:31:53 2025 GMT Subject: CN=68966cc9-4109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:92:aa:85:36:ce:da:d8:ea:f6:76:1b:57: e6:c2:fc:2a:28:91:0a:9f:9b:8f:81:64:9a:b6:36: 0d:33:00:6c:f6:1c:d4:4c:1d:0a:39:8c:de:1d:f3: dd:52:49:b4:03:f8:33:34:65:8e:65:5e:7e:3d:93: 21:ee:f0:1b:ab:e5:fc:7c:f4:8d:e1:39:6f:fa:4a: 40:b7:6c:71:df:20:8f:c7:6c:ed:3a:3a:d6:76:7a: 7e:22:72:b8:8e:79:94:03:4f:9d:fd:fd:a7:69:13: ef:7a:2c:64:38:0a:b8:4a:e1:bf:ee:30:74:20:1b: 60:b2:2a:65:ef:78:0f:52:d1:48:23:70:9d:b1:7b: 4f:43:71:70:52:23:eb:1a:6d:6d:29:2e:fc:c2:4f: e1:e3:00:f4:38:6a:42:bd:38:7d:93:a5:fa:c8:87: b8:79:2e:89:d4:00:80:72:47:aa:73:03:80:d5:85: 10:2e:37:2a:89:9e:85:f0:a9:67:4e:94:bc:f6:c3: 24:62:94:b5:1a:86:b8:2a:99:19:f6:9e:b3:10:d1: 28:92:7d:86:3a:42:52:26:2e:fb:dd:45:38:d6:fb: eb:bf:72:f3:c7:f3:74:f9:f2:fb:5c:7b:63:32:a6: ab:76:87:5e:0a:2a:7f:dc:84:12:c6:a4:da:e2:1c: 87:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DF:8B:48:E4:63:43:EE:F2:BC:FE:2D:21:D8:1A:CE:1A:4B:51:69 X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:aa:83:ff:c1:7b:0c:46:3c:5c:34:e4:d4:e8:c5:9c:b2:b1: f7:ce:aa:0a:63:ca:da:95:a3:4e:5b:df:03:6e:c7:a7:e9:01: 1f:ba:41:85:9e:d5:14:c8:a8:93:2f:75:7c:9e:dc:c2:22:70: 3b:2d:82:00:41:16:49:e0:37:16:4e:24:90:e2:18:b7:29:df: 3c:e2:ac:35:c4:c6:1a:e6:e6:a3:c9:f1:36:62:83:36:9c:e7: 6e:98:cb:97:1b:86:b1:f8:b4:2b:15:60:53:eb:6f:5d:9a:00: 08:b0:e1:fb:78:d8:57:7a:01:87:f1:35:fa:ca:80:c0:d4:f5: 73:12:e8:98:cc:af:50:7d:f8:16:0f:53:0b:39:d1:cd:30:0c: 43:63:7c:00:9f:0f:19:01:dd:4e:c7:61:20:b2:f9:f7:4b:dc: 1e:95:41:05:bb:2e:46:b6:3c:65:7c:03:45:b0:4d:af:af:46: 5e:77:8a:85:ea:f3:11:26:82:9a:67:ac:02:ba:d3:eb:3a:32: 56:20:71:b4:4e:3d:15:3f:91:5f:86:99:2b:c8:2a:46:5a:2d: ce:3b:24:73:2b:60:26:a3:68:af:df:ae:34:7f:29:18:63:0c: 67:03:c5:f3:14:ec:0f:cf:5c:72:9e:09:72:d3:03:ca:8a:fc: 40:37:97:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjUwODA4MjEzMTUzWhcNMjUwODE1MjEzMTUzWjAYMRYwFAYD VQQDEw02ODk2NmNjOS00MTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNOSqoU2ztrY6vZ2G1fmwvwqKJEKn5uPgWSatjYNMwBs9hzUTB0KOYzeHfPd Ukm0A/gzNGWOZV5+PZMh7vAbq+X8fPSN4Tlv+kpAt2xx3yCPx2ztOjrWdnp+InK4 jnmUA0+d/f2naRPveixkOAq4SuG/7jB0IBtgsipl73gPUtFII3CdsXtPQ3FwUiPr Gm1tKS78wk/h4wD0OGpCvTh9k6X6yIe4eS6J1ACAckeqcwOA1YUQLjcqiZ6F8Kln TpS89sMkYpS1Goa4KpkZ9p6zENEokn2GOkJSJi773UU41vvrv3Lzx/N0+fL7XHtj MqardodeCip/3IQSxqTa4hyHXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHfi0jk Y0Pu8rz+LSHYGs4aS1FpMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0qoP/wXsMRjxcNOTU6MWcsrH3zqoKY8ralaNOW98Dbsen6QEfukGF ntUUyKiTL3V8ntzCInA7LYIAQRZJ4DcWTiSQ4hi3Kd884qw1xMYa5uajyfE2YoM2 nOdumMuXG4ax+LQrFWBT629dmgAIsOH7eNhXegGH8TX6yoDA1PVzEuiYzK9QffgW D1MLOdHNMAxDY3wAnw8ZAd1Ox2Egsvn3S9welUEFuy5GtjxlfANFsE2vr0Zed4qF 6vMRJoKaZ6wCutPrOjJWIHG0Tj0VP5FfhpkryCpGWi3OOyRzK2Amo2iv3640fykY YwxnA8XzFOwPz1xyngly0wPKivxAN5ca -----END CERTIFICATE-----Generated at Sat Aug 9 05:39:10 2025 by rpki-client