$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft File: MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json) Hash identifier: OJBlEx0OLYMfGxSsq2RERg9cxW+dz3yXkeo7PTIeCrE= Subject key identifier: 12:66:99:94:3E:CB:E7:CB:13:45:8E:4B:24:8B:95:AC:FB:B5:2B:EE Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft Manifest number: 0152 Signing time: Mon 11 Aug 2025 04:17:13 +0000 Manifest this update: Mon 11 Aug 2025 04:17:13 +0000 Manifest next update: Mon 18 Aug 2025 04:17:13 +0000 Files and hashes: 1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: slIFD/v+X0iE0tofTNMlWCdoLyA7HevMqosj65e4Oe0=) 2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: 4nQ3/xG4CFEbotiusShRvyeKgM0UbijAal8OSC/u9HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Validity Not Before: Aug 11 04:17:13 2025 GMT Not After : Aug 18 04:17:13 2025 GMT Subject: CN=68996ec9-50c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:f1:b3:dd:0f:1c:c5:c1:6e:79:7e:14:78: 1e:23:a3:6b:13:fb:8a:61:98:92:a0:a8:6e:2e:4e: 38:34:8b:05:4c:f7:11:59:cf:54:c0:bb:6d:6b:52: 98:80:a9:2f:b2:2f:57:f1:58:a7:3a:d1:70:38:95: a7:41:d9:23:13:f5:ed:1c:3f:47:e7:4d:85:1d:25: 74:21:ec:80:7d:d6:43:e3:bc:65:e2:18:bb:cd:29: 5a:f9:13:22:16:54:4a:5e:7e:d6:7c:3c:18:6e:d9: 03:8a:72:29:03:27:49:5e:aa:b8:1d:ee:9a:18:28: ef:f6:bd:10:17:ed:66:7c:5e:47:e0:22:4b:80:e7: ef:b3:7d:64:f1:e9:22:db:93:24:a1:e3:05:21:84: 31:52:80:4e:2e:fb:b8:6b:1c:da:7a:23:b3:e4:cb: fd:6b:7f:21:fa:16:05:61:33:09:81:73:ee:33:15: 6d:47:30:a1:8e:46:8c:c8:0d:b0:c5:f3:ac:9b:09: e9:0f:d8:65:19:06:b5:48:a8:aa:3c:6e:1f:d8:c8: 53:3e:a4:3d:f7:cb:9f:69:8f:43:bd:f3:22:30:4b: d7:70:cb:48:c3:3d:1b:b1:13:f6:3b:ca:3b:72:83: 77:14:4e:c3:05:ef:c2:85:a5:9c:51:5b:54:45:2e: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:66:99:94:3E:CB:E7:CB:13:45:8E:4B:24:8B:95:AC:FB:B5:2B:EE X509v3 Authority Key Identifier: keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6d:90:a3:b9:4a:e0:53:ea:9b:6a:8a:e1:f5:e1:c7:f5:a6: 87:d5:45:9a:fb:b8:88:c9:4d:d0:06:31:a1:15:7d:8f:86:37: a4:6d:c6:35:a0:ab:14:c9:da:33:ea:f7:0e:40:54:9c:56:23: 38:29:44:28:dd:f4:d2:d6:2d:1a:b8:5b:39:2a:20:07:29:2d: 38:cc:2f:22:30:15:95:d4:2a:1c:c2:d9:f8:d7:cb:35:81:6a: e3:93:f6:e9:2a:45:55:7e:13:c6:f4:28:c1:5d:63:e7:8b:d8: e1:df:51:83:3f:af:8d:f2:06:48:e3:91:99:e7:d3:99:98:05: 6e:68:af:79:bd:fe:f7:f6:14:cd:aa:28:2d:c0:89:69:93:25: 73:38:9b:af:16:44:7e:e5:d1:97:59:5d:94:05:04:08:aa:a4: 3e:7a:5a:a8:ea:31:31:be:55:92:92:22:e3:93:be:a3:e4:b9: e4:3b:c0:39:f2:c6:b6:4c:bd:68:c3:da:53:37:14:44:d4:86: c4:b3:1f:bc:4a:9b:f1:10:44:61:aa:0b:01:ac:dd:6b:72:e2: ef:41:03:13:83:2c:7d:5a:f7:96:4f:b7:81:53:cd:e6:9b:77: 67:18:c7:86:f0:7e:74:9d:53:8b:2b:37:d7:40:58:f1:2a:f2: 02:b3:a5:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwQzgxMTAvBgNVBAUTKDMzMThFODc1NDEzNjQyMUUyNDRBNkM0MUREQTVERUND MTBEQThGODEwHhcNMjUwODExMDQxNzEzWhcNMjUwODE4MDQxNzEzWjAYMRYwFAYD VQQDEw02ODk5NmVjOS01MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Yjxs90PHMXBbnl+FHgeI6NrE/uKYZiSoKhuLk44NIsFTPcRWc9UwLtta1KY gKkvsi9X8VinOtFwOJWnQdkjE/XtHD9H502FHSV0IeyAfdZD47xl4hi7zSla+RMi FlRKXn7WfDwYbtkDinIpAydJXqq4He6aGCjv9r0QF+1mfF5H4CJLgOfvs31k8eki 25MkoeMFIYQxUoBOLvu4axzaeiOz5Mv9a38h+hYFYTMJgXPuMxVtRzChjkaMyA2w xfOsmwnpD9hlGQa1SKiqPG4f2MhTPqQ998ufaY9DvfMiMEvXcMtIwz0bsRP2O8o7 coN3FE7DBe/ChaWcUVtURS7iawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJmmZQ+ y+fLE0WOSySLlaz7tSvuMB8GA1UdIwQYMBaAFDMY6HVBNkIeJEpsQd2l3swQ2o+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBDOC9DQzIzMzhEQzZF NTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFoNGtTbXhCM2FYZXpCRGFq NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014am9kVUUyUWg0a1NteEIzYVhlekJEYWo0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBDOC9DQzIzMzhEQzZFNTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFo NGtTbXhCM2FYZXpCRGFqNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAebZCjuUrgU+qbaorh9eHH9aaH1UWa+7iIyU3QBjGhFX2PhjekbcY1 oKsUydoz6vcOQFScViM4KUQo3fTS1i0auFs5KiAHKS04zC8iMBWV1Cocwtn418s1 gWrjk/bpKkVVfhPG9CjBXWPni9jh31GDP6+N8gZI45GZ59OZmAVuaK95vf739hTN qigtwIlpkyVzOJuvFkR+5dGXWV2UBQQIqqQ+elqo6jExvlWSkiLjk76j5LnkO8A5 8sa2TL1ow9pTNxRE1IbEsx+8SpvxEERhqgsBrN1rcuLvQQMTgyx9WveWT7eBU83m m3dnGMeG8H50nVOLKzfXQFjxKvICs6Wp -----END CERTIFICATE-----Generated at Mon Aug 11 10:42:44 2025 by rpki-client