$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: nNMyzEb8bZrTFl43rdzhtFhfDBBraBt5WYYrH8dOi7k= Subject key identifier: DF:4F:A8:8A:52:04:75:97:08:F2:B0:69:CE:DD:44:B4:52:FD:FC:2F Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: 0126 Signing time: Sat 09 Aug 2025 05:09:48 +0000 Manifest this update: Sat 09 Aug 2025 05:09:47 +0000 Manifest next update: Sat 16 Aug 2025 05:09:47 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: n60IzMe+UtDE44ZsqtsMnQIms9fL7bKGpdRMCg5Bqqs=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: Aug 9 05:09:47 2025 GMT Not After : Aug 16 05:09:47 2025 GMT Subject: CN=6896d81c-0eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:13:ef:88:85:6b:52:4d:a7:3f:41:8b:6e:eb: 8f:7f:9b:66:68:93:21:0c:81:ae:bb:48:e0:a0:58: c2:7e:29:03:cc:c0:2c:00:10:22:77:58:4e:c9:26: 43:40:4a:40:54:17:36:ac:ff:92:a1:4c:8d:ba:de: e2:c4:67:83:ee:d9:8e:8f:38:cc:5b:8b:54:7c:49: dc:5e:6e:2b:8b:b9:07:1b:b3:ab:e6:cd:28:45:30: 8c:1d:07:13:ca:f0:31:0b:b3:7f:09:19:fd:58:84: b2:da:a7:87:4d:a0:82:f5:62:0d:58:83:a4:5f:bd: 4a:70:dd:5b:d6:55:ef:12:ed:c3:0e:fe:52:c3:1f: 10:19:15:ad:30:ed:65:03:27:c4:f9:48:7c:10:0f: bf:a6:42:a4:e7:a9:f6:f0:a1:ce:ec:83:aa:93:50: 46:b5:bc:83:bb:17:1b:ed:ed:d0:0e:fe:7e:36:a2: db:fe:fc:97:ea:1f:5d:b5:94:16:64:e7:43:9c:18: b0:53:0e:ce:17:db:09:06:65:6c:1f:ff:bd:56:8b: a9:a5:7a:ba:51:23:42:50:14:32:8e:02:3f:92:f5: d6:56:1b:c6:43:3d:ad:30:65:26:78:2e:89:5d:26: 07:49:22:16:e5:03:9c:98:53:08:1d:1e:bb:f1:ff: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4F:A8:8A:52:04:75:97:08:F2:B0:69:CE:DD:44:B4:52:FD:FC:2F X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a3:ca:bd:bd:81:3b:59:39:25:c1:f2:61:c5:63:d0:8e:f1: 73:4b:84:42:c9:bb:8d:e7:ec:15:ed:38:75:25:14:21:c9:03: 0d:a8:23:c9:f7:aa:92:18:a8:5a:10:b6:1f:a5:32:fa:9e:85: d6:a0:63:eb:b3:fc:96:e3:d1:04:63:bb:0d:3a:f8:e7:1e:43: 26:9a:4e:24:70:96:dc:ea:ff:a3:2c:b6:30:39:3f:f3:99:e4: ae:0b:83:5e:ee:90:06:5e:7b:3b:34:5b:56:97:65:bc:4d:ac: ea:0a:d6:df:29:f0:f2:c1:34:17:fa:90:ac:6a:66:62:75:e7: fa:73:02:38:9b:ae:ab:21:e6:b5:57:11:e3:ce:f6:26:8c:f4: 45:e9:20:b2:a6:ab:f3:b6:9a:dd:ed:38:32:f2:43:4a:8c:77: f8:dc:87:84:3b:43:6f:43:be:14:cf:70:d9:91:4c:f9:16:ee: 97:7b:c6:d8:97:55:f5:b0:98:2b:da:08:9c:05:8c:f5:cf:30: dd:46:a7:cd:74:1d:da:98:a8:83:51:28:bd:90:7d:54:47:3b: c3:87:fc:35:3c:f3:bb:51:70:fc:aa:12:10:a6:97:4f:95:77: 9a:ff:bd:93:93:af:a4:42:4d:1c:08:19:8f:e2:1a:78:57:b9: d4:fe:80:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUwODA5MDUwOTQ3WhcNMjUwODE2MDUwOTQ3WjAYMRYwFAYD VQQDEw02ODk2ZDgxYy0wZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xPviIVrUk2nP0GLbuuPf5tmaJMhDIGuu0jgoFjCfikDzMAsABAid1hOySZD QEpAVBc2rP+SoUyNut7ixGeD7tmOjzjMW4tUfEncXm4ri7kHG7Or5s0oRTCMHQcT yvAxC7N/CRn9WISy2qeHTaCC9WINWIOkX71KcN1b1lXvEu3DDv5Swx8QGRWtMO1l AyfE+Uh8EA+/pkKk56n28KHO7IOqk1BGtbyDuxcb7e3QDv5+NqLb/vyX6h9dtZQW ZOdDnBiwUw7OF9sJBmVsH/+9VouppXq6USNCUBQyjgI/kvXWVhvGQz2tMGUmeC6J XSYHSSIW5QOcmFMIHR678f+RrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9PqIpS BHWXCPKwac7dRLRS/fwvMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBko8q9vYE7WTklwfJhxWPQjvFzS4RCybuN5+wV7Th1JRQhyQMNqCPJ 96qSGKhaELYfpTL6noXWoGPrs/yW49EEY7sNOvjnHkMmmk4kcJbc6v+jLLYwOT/z meSuC4Ne7pAGXns7NFtWl2W8TazqCtbfKfDywTQX+pCsamZidef6cwI4m66rIea1 VxHjzvYmjPRF6SCypqvztprd7Tgy8kNKjHf43IeEO0NvQ74Uz3DZkUz5Fu6Xe8bY l1X1sJgr2gicBYz1zzDdRqfNdB3amKiDUSi9kH1URzvDh/w1PPO7UXD8qhIQppdP lXea/72Tk6+kQk0cCBmP4hp4V7nU/oBC -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:07 2025 by rpki-client