$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: NHOQ8d3FeUp4MjU5K1/XGYFKc1nKGkjDrcWlzXJ/FPg= Subject key identifier: 0F:DE:C7:BD:0E:07:0E:D6:ED:7A:2E:25:D4:63:34:84:F2:EC:6E:9D Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 0276 Signing time: Mon 11 Aug 2025 01:57:43 +0000 Manifest this update: Mon 11 Aug 2025 01:57:42 +0000 Manifest next update: Mon 18 Aug 2025 01:57:42 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: lDRzlw+c0oXEaWSrg8696XfREL9K1k21ufikT6GEb3I=) 2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: omp1fXUs+vDBv/MaKIuGTrmCJ5TEGYnfoKG3I8GKsAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Aug 11 01:57:42 2025 GMT Not After : Aug 18 01:57:42 2025 GMT Subject: CN=68994e16-b9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:71:3f:28:89:32:d1:98:05:0d:12:87:2e: b2:78:4a:2c:47:7d:c1:19:03:44:9d:50:d9:d2:55: 46:04:55:73:d9:7d:41:a2:be:a0:0f:70:b3:2c:37: 15:30:8f:3b:90:17:7f:ac:f2:04:22:63:d3:18:d6: 69:7d:c1:b4:69:6e:d4:89:a3:3c:44:bc:db:fb:31: 59:01:3c:81:2e:90:3a:38:34:95:43:9c:4f:b8:69: ad:99:e4:32:72:82:b8:2a:85:f6:c7:67:81:0b:ac: a2:2b:39:19:51:1e:90:b4:e5:f4:90:76:de:a8:ec: 91:c9:48:a7:9e:1a:4a:ad:de:72:a5:b8:53:1c:8e: 2e:27:18:ff:ea:69:35:b4:25:03:e9:6a:8f:12:3d: a1:ba:81:45:85:5d:f6:f3:77:b9:1c:ca:07:c1:8a: a4:a7:ef:81:61:54:86:6f:96:7a:01:7b:70:f4:50: c0:8a:e5:b2:e4:db:5a:5d:a0:6b:84:a0:21:9e:3a: 9c:fa:5b:a8:20:36:0b:bb:6d:dd:4b:75:25:fa:b3: bd:b0:9a:c8:d9:63:89:59:93:1e:e1:e6:de:33:3c: 57:a8:33:da:02:ea:5c:6e:16:bf:17:ac:4a:a1:c8: e3:18:db:82:d2:a0:75:fe:cc:64:03:22:47:bc:09: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DE:C7:BD:0E:07:0E:D6:ED:7A:2E:25:D4:63:34:84:F2:EC:6E:9D X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2b:2b:75:00:42:fb:e1:40:bc:5f:34:10:32:e6:58:4e:df: 6d:0a:7a:13:bd:6e:82:f1:7c:67:24:23:8a:bb:4d:83:47:8f: c5:eb:01:01:9d:69:87:18:27:64:09:c2:80:97:6f:9f:c3:37: e5:f4:f9:56:e7:a0:5c:7d:45:12:58:84:d8:96:d0:b8:c3:63: d2:12:74:33:b4:2a:f9:be:1d:82:2c:08:64:6d:15:01:c3:ae: c6:73:84:eb:d5:51:4b:a3:5d:f5:8e:d9:7a:dd:9a:98:10:9d: 8b:2d:53:ec:b5:f2:aa:4a:21:ac:0a:dd:6a:94:c6:75:7a:7a: 55:13:ec:41:4c:bb:5f:be:f4:c9:cf:15:a2:bc:d1:5e:dd:e7: cd:c8:27:5b:de:38:aa:b1:40:30:6e:7b:b1:df:72:9a:a9:b3: 17:f4:7a:88:43:30:11:63:b3:93:0d:51:46:dd:98:8d:17:d9: 7b:ba:0a:6d:b0:07:b0:b8:10:e0:97:bd:af:12:ae:82:6b:2c: 1a:2a:cf:e6:ba:e9:32:2b:f1:f1:bf:54:dd:b3:6a:9d:9f:46: ae:6b:b6:4a:53:d1:c5:03:8e:40:fa:22:74:5d:d4:d9:22:47: 30:e3:ee:ad:07:bc:c7:4d:e5:66:c4:3a:fc:8e:26:94:98:1a: a9:ea:57:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjUwODExMDE1NzQyWhcNMjUwODE4MDE1NzQyWjAYMRYwFAYD VQQDEw02ODk5NGUxNi1iOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxZxPyiJMtGYBQ0Shy6yeEosR33BGQNEnVDZ0lVGBFVz2X1Bor6gD3CzLDcV MI87kBd/rPIEImPTGNZpfcG0aW7UiaM8RLzb+zFZATyBLpA6ODSVQ5xPuGmtmeQy coK4KoX2x2eBC6yiKzkZUR6QtOX0kHbeqOyRyUinnhpKrd5ypbhTHI4uJxj/6mk1 tCUD6WqPEj2huoFFhV3283e5HMoHwYqkp++BYVSGb5Z6AXtw9FDAiuWy5NtaXaBr hKAhnjqc+luoIDYLu23dS3Ul+rO9sJrI2WOJWZMe4ebeMzxXqDPaAupcbha/F6xK ocjjGNuC0qB1/sxkAyJHvAk/1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/ex70O Bw7W7XouJdRjNITy7G6dMB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvKyt1AEL74UC8XzQQMuZYTt9tCnoTvW6C8XxnJCOKu02DR4/F6wEB nWmHGCdkCcKAl2+fwzfl9PlW56BcfUUSWITYltC4w2PSEnQztCr5vh2CLAhkbRUB w67Gc4Tr1VFLo131jtl63ZqYEJ2LLVPstfKqSiGsCt1qlMZ1enpVE+xBTLtfvvTJ zxWivNFe3efNyCdb3jiqsUAwbnux33KaqbMX9HqIQzARY7OTDVFG3ZiNF9l7ugpt sAewuBDgl72vEq6CaywaKs/muukyK/Hxv1Tds2qdn0aua7ZKU9HFA45A+iJ0XdTZ Ikcw4+6tB7zHTeVmxDr8jiaUmBqp6leS -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:41 2025 by rpki-client