$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: ck/ha7O3aGQoHjlwdHAd7kRpz3DPT8AiaBpEY0e0e/k= Subject key identifier: 7D:B2:70:94:20:B8:2B:EF:B2:15:40:E9:DB:26:D5:F3:59:A9:2E:4A Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0AD1 Signing time: Fri 08 Aug 2025 19:47:56 +0000 Manifest this update: Fri 08 Aug 2025 19:47:56 +0000 Manifest next update: Fri 15 Aug 2025 19:47:56 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: WhVObZP6N25n/QeLJkqraTFuqEyae0qgRSPt/LUTCag=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: eLp4LMqTQQ7wQVmCxd5TEfP0lAEMCR6K3GMmHN2veeg=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: nM4RVZvgitji8IESGu68cVeu1tVBkthAHqzvYlTiCPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: Aug 8 19:47:56 2025 GMT Not After : Aug 15 19:47:56 2025 GMT Subject: CN=6896546c-bb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:3b:67:ef:a3:32:03:e6:a5:ad:2e:8f:1e: c7:54:74:bd:69:89:1a:a9:69:1f:de:2b:2f:bb:25: fc:f8:9a:cb:7b:32:59:1a:64:68:af:d6:5b:9f:57: c2:67:70:76:dd:29:1b:85:7e:59:56:87:a6:40:eb: 71:0c:5e:5f:4c:1d:e5:e2:0e:7b:3f:5c:7f:73:41: 42:9d:d2:34:b2:3d:ab:c6:e6:6b:50:fd:8a:e0:14: 6f:ec:b6:9b:e8:a2:1f:90:70:63:ee:46:a8:7a:17: 70:61:7b:de:6d:48:af:c9:6d:31:23:ed:ae:43:34: e2:c7:91:e1:4d:d4:62:f0:28:e8:4e:06:ec:5f:c8: 59:e7:ea:e4:40:93:92:ef:98:e8:ed:fe:1f:5c:52: 87:33:a3:6d:ff:38:93:99:40:32:4b:3f:9c:c4:34: cf:d7:c8:28:75:65:71:ff:c9:22:cc:9e:ea:eb:da: f0:d9:0b:3d:47:ac:6d:fd:67:10:90:5e:2e:b8:89: 32:3b:48:3e:39:2e:ca:b0:bf:cb:e0:8a:7a:7c:d2: 73:5b:b8:67:a9:b5:ec:78:89:26:d0:9f:ee:cb:0f: 46:5f:2b:66:e4:bb:14:49:df:f4:f3:28:c5:23:2a: c1:1f:96:2c:84:dc:44:e7:c1:26:ee:4a:c5:b1:99: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B2:70:94:20:B8:2B:EF:B2:15:40:E9:DB:26:D5:F3:59:A9:2E:4A X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f0:41:4f:e8:ac:0b:20:4a:0c:41:cc:3a:95:8a:87:9c:83: 78:9c:bf:41:00:93:25:f8:a1:84:fa:31:c5:aa:0f:66:a1:5f: 70:4d:73:3d:5f:d1:f0:55:71:ff:bf:40:b2:73:9e:f7:f4:53: 50:eb:fb:92:71:46:ec:16:5f:f6:2c:53:7b:9e:31:78:93:16: fe:d6:9a:4e:e4:96:1e:ea:28:2e:ad:4d:93:fd:ef:2f:c2:83: 3d:22:11:f8:cc:44:e1:bd:30:fa:ad:21:dc:8d:4e:48:7f:67: 21:10:d8:4b:46:12:32:10:2a:5b:97:99:01:0d:a0:1b:ce:64: c9:54:e9:24:e9:9a:8c:2e:0a:4d:3f:ab:51:66:e4:77:a9:67: 51:b7:50:4a:02:5d:26:72:ba:95:48:5d:94:d8:23:e2:33:c7: 5d:e0:5c:e8:2c:38:1b:c0:26:2a:90:e9:fb:5e:63:ab:15:e0: 2e:6c:31:c5:07:3d:c0:79:c8:71:49:d8:cd:11:78:29:6b:47: 46:ed:87:52:b8:bc:60:89:c5:d4:a5:5d:7f:a2:60:49:6c:3e: 9e:e7:ee:e3:e5:9e:c6:66:19:d7:e5:2c:b7:5f:ed:69:9c:bb: 79:8c:ad:29:93:b3:f4:6d:25:22:53:2e:38:30:3f:7f:39:4a: 9d:fe:90:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjUwODA4MTk0NzU2WhcNMjUwODE1MTk0NzU2WjAYMRYwFAYD VQQDEw02ODk2NTQ2Yy1iYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/w7Z++jMgPmpa0ujx7HVHS9aYkaqWkf3isvuyX8+JrLezJZGmRor9Zbn1fC Z3B23SkbhX5ZVoemQOtxDF5fTB3l4g57P1x/c0FCndI0sj2rxuZrUP2K4BRv7Lab 6KIfkHBj7kaoehdwYXvebUivyW0xI+2uQzTix5HhTdRi8CjoTgbsX8hZ5+rkQJOS 75jo7f4fXFKHM6Nt/ziTmUAySz+cxDTP18godWVx/8kizJ7q69rw2Qs9R6xt/WcQ kF4uuIkyO0g+OS7KsL/L4Ip6fNJzW7hnqbXseIkm0J/uyw9GXytm5LsUSd/08yjF IyrBH5YshNxE58Em7krFsZn3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2ycJQg uCvvshVA6dsm1fNZqS5KMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL8EFP6KwLIEoMQcw6lYqHnIN4nL9BAJMl+KGE+jHFqg9moV9wTXM9 X9HwVXH/v0Cyc5739FNQ6/uScUbsFl/2LFN7njF4kxb+1ppO5JYe6igurU2T/e8v woM9IhH4zEThvTD6rSHcjU5If2chENhLRhIyECpbl5kBDaAbzmTJVOkk6ZqMLgpN P6tRZuR3qWdRt1BKAl0mcrqVSF2U2CPiM8dd4FzoLDgbwCYqkOn7XmOrFeAubDHF Bz3AechxSdjNEXgpa0dG7YdSuLxgicXUpV1/omBJbD6e5+7j5Z7GZhnX5Sy3X+1p nLt5jK0pk7P0bSUiUy44MD9/OUqd/pDC -----END CERTIFICATE-----Generated at Sun Aug 10 18:24:22 2025 by rpki-client