$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: xWVnpTCTO1l7X5qdjaXv+fu7lJqpup+n91xpQzOwum4= Subject key identifier: B1:CF:A1:E6:60:CF:67:C6:85:6D:EC:7F:7C:FA:AC:87:5D:43:DE:F5 Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: C8 Signing time: Sat 09 Aug 2025 06:09:09 +0000 Manifest this update: Sat 09 Aug 2025 06:09:08 +0000 Manifest next update: Sat 16 Aug 2025 06:09:08 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: EzJk7Z5J80J/afpFed2GAMhQxxWx+ykAp+u0urHjeNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Aug 9 06:09:08 2025 GMT Not After : Aug 16 06:09:08 2025 GMT Subject: CN=6896e604-5cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:64:4c:3f:ba:a1:47:68:65:dc:67:56:69: e7:44:6a:af:cc:8d:af:1f:ec:0e:42:f5:6b:a3:82: 61:cc:1e:35:13:28:bf:68:fa:79:84:45:7c:23:e1: db:47:a9:6c:08:25:0e:4f:52:fd:ce:24:34:08:6f: 5f:0b:93:c6:a8:25:e7:b4:a6:cf:a1:d2:26:ca:3e: d0:b8:18:98:15:9e:d2:b2:2f:c5:d1:5a:59:f9:ad: 4e:c8:56:83:ef:4a:8f:05:a6:46:dc:0c:a6:ea:27: b2:2c:e8:30:0a:5a:ee:00:fa:f0:fb:69:3f:e2:f1: c2:ed:48:f0:c9:e9:8d:75:20:f7:16:77:f3:e6:2d: c3:45:ef:91:04:06:68:2d:b2:81:51:6f:5a:3f:83: 55:b4:59:43:b8:47:99:f6:5c:48:50:97:83:a4:3c: 27:75:2a:39:50:b0:1c:3d:57:8c:67:6a:40:54:12: 12:08:ca:17:60:d9:af:42:14:27:5f:7f:c1:e6:96: ea:93:53:57:35:da:10:44:86:7b:59:15:11:e9:63: 00:e1:79:bb:cc:0e:ec:1c:83:a0:34:7c:5a:e7:be: 24:74:a6:69:76:aa:64:02:73:92:76:36:2e:0d:92: f8:5d:5b:ae:fd:ce:b1:d2:a8:63:c1:9c:4e:03:c1: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:A1:E6:60:CF:67:C6:85:6D:EC:7F:7C:FA:AC:87:5D:43:DE:F5 X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3c:46:28:9e:92:f6:24:86:6d:20:8d:9f:d8:c0:e4:09:ff: 6e:f6:14:b5:8c:30:e8:73:0f:2c:83:14:8a:78:83:21:bd:96: a5:c4:34:fa:95:31:c7:d1:09:4b:8b:31:fa:b3:a7:ba:e4:34: 39:e7:90:f5:81:6c:01:bc:e1:dd:51:5c:97:7f:f2:41:10:bc: da:20:11:1d:19:cb:9c:09:ba:f0:92:71:88:af:7d:c1:dd:29: 59:12:f7:24:63:78:65:d4:9f:17:0d:0e:6f:9e:2a:10:fd:61: a4:f4:c1:06:5e:7f:0f:4a:93:97:74:7b:4c:c0:1f:2d:8c:2e: 46:dd:bc:63:78:51:fb:5a:40:15:30:3b:b2:da:af:13:6a:87: b2:37:a5:4b:f9:ea:47:7b:a5:78:b7:65:50:00:02:e6:77:5f: 4a:c2:7a:cb:64:a3:8d:bf:5e:63:55:fa:61:0b:2d:cd:57:a1: 99:e2:35:1c:fb:53:77:35:cd:dc:f4:8f:59:e2:92:de:94:cf: bc:76:1a:06:fe:fd:cc:7e:84:1a:db:4a:1a:95:90:a3:a2:94: a6:e9:fc:a6:8f:6c:9d:1c:04:d6:c3:04:d0:31:33:68:10:18: f6:a1:eb:78:86:8c:41:03:1d:e9:e4:33:af:74:ef:1a:22:ec: b6:3f:47:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDk5QzEwNkU4N0ZFMUQ2NDExQUVDNzFGODAzOTQ2MjJD ODgxQUFBRDkwHhcNMjUwODA5MDYwOTA4WhcNMjUwODE2MDYwOTA4WjAYMRYwFAYD VQQDEw02ODk2ZTYwNC01Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ1kTD+6oUdoZdxnVmnnRGqvzI2vH+wOQvVro4JhzB41Eyi/aPp5hEV8I+Hb R6lsCCUOT1L9ziQ0CG9fC5PGqCXntKbPodImyj7QuBiYFZ7Ssi/F0VpZ+a1OyFaD 70qPBaZG3Aym6ieyLOgwClruAPrw+2k/4vHC7UjwyemNdSD3Fnfz5i3DRe+RBAZo LbKBUW9aP4NVtFlDuEeZ9lxIUJeDpDwndSo5ULAcPVeMZ2pAVBISCMoXYNmvQhQn X3/B5pbqk1NXNdoQRIZ7WRUR6WMA4Xm7zA7sHIOgNHxa574kdKZpdqpkAnOSdjYu DZL4XVuu/c6x0qhjwZxOA8G5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHPoeZg z2fGhW3sf3z6rIddQ971MB8GA1UdIwQYMBaAFJnBBuh/4dZBGuxx+AOUYiyIGqrZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8zNjUxNDBFRTQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFrRWE3SEg0QTVSaUxJZ2Fx dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8zNjUxNDBFRTQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFr RWE3SEg0QTVSaUxJZ2FxdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKPEYonpL2JIZtII2f2MDkCf9u9hS1jDDocw8sgxSKeIMhvZalxDT6 lTHH0QlLizH6s6e65DQ555D1gWwBvOHdUVyXf/JBELzaIBEdGcucCbrwknGIr33B 3SlZEvckY3hl1J8XDQ5vnioQ/WGk9MEGXn8PSpOXdHtMwB8tjC5G3bxjeFH7WkAV MDuy2q8TaoeyN6VL+epHe6V4t2VQAALmd19KwnrLZKONv15jVfphCy3NV6GZ4jUc +1N3Nc3c9I9Z4pLelM+8dhoG/v3MfoQa20oalZCjopSm6fymj2ydHATWwwTQMTNo EBj2oet4hoxBAx3p5DOvdO8aIuy2P0el -----END CERTIFICATE-----Generated at Sun Aug 10 10:35:54 2025 by rpki-client