$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: Aqp4gRPfDkMUJGCilfakINOcxzhuSnHWIx+Y/6Q+gvg= Subject key identifier: EB:8B:7E:D1:EA:01:D8:63:21:7A:41:CC:C9:EB:B0:6E:6C:F3:2E:B5 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03DE Signing time: Sat 09 Aug 2025 01:04:52 +0000 Manifest this update: Sat 09 Aug 2025 01:04:52 +0000 Manifest next update: Sat 16 Aug 2025 01:04:52 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: GOt8g6z+QJU7it8pLDTc4RuKVRxntUuE+oPNdbLaeqQ=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: J9o/h2HcCF6AGcDij2ORSiNowMdc+62JwdcPSLdmYdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Aug 9 01:04:52 2025 GMT Not After : Aug 16 01:04:52 2025 GMT Subject: CN=68969eb4-fe06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:4a:83:6a:92:28:74:54:8b:d8:96:32:38: e4:36:eb:50:7b:df:33:b7:e4:a3:7b:5a:e5:e5:d0: 64:0f:7e:03:b9:34:10:87:91:1e:a0:a5:7b:0b:ff: 39:8d:e1:0b:1c:75:45:15:fc:e0:58:44:18:2e:06: ef:02:c1:10:8d:e9:0f:62:db:92:3f:0e:f5:e1:70: 8d:74:6c:65:cd:21:50:ff:1e:9d:cb:88:2a:62:46: b2:5c:2a:0c:63:d4:d0:d3:08:30:a3:ec:c9:04:68: 94:59:64:59:68:7d:2d:33:48:c1:3f:72:90:f7:19: 6b:09:6e:e3:e8:9a:d5:30:a0:cb:1b:dd:2d:e4:ad: 1e:2a:52:e8:8a:bf:8d:7a:0c:5b:75:82:12:a9:8c: 39:3e:a4:7e:cf:f2:c7:58:1a:db:71:9b:80:0d:cf: 7e:36:d3:ee:c9:3a:e3:ac:9c:33:8c:1f:70:9f:fc: f6:78:aa:16:80:46:55:17:d8:53:89:ae:7a:63:e2: 03:0c:1e:44:3e:7c:d8:db:10:53:79:b8:e6:1f:96: ce:26:11:7f:a1:55:d0:9f:9d:71:a0:88:87:9b:1f: 3b:48:93:4b:29:a9:14:d4:41:60:78:fa:44:3c:cc: ac:fd:7e:8a:5e:25:04:e8:5f:7c:2e:1f:2d:d5:b2: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8B:7E:D1:EA:01:D8:63:21:7A:41:CC:C9:EB:B0:6E:6C:F3:2E:B5 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8d:27:13:07:a3:39:d8:fc:a1:21:4b:cb:e4:27:59:3a:96: 18:1c:77:7f:a5:36:56:25:85:66:06:c1:b7:b9:37:d6:2b:34: f9:24:09:83:33:2c:30:be:76:fd:db:74:57:d3:75:cd:39:51: ba:f3:62:d4:bb:dc:70:b1:03:50:c3:1a:bb:87:de:a9:76:1a: 16:39:46:10:86:94:b0:70:2a:69:1b:6c:75:8f:94:57:c6:d1: a8:25:62:61:60:1f:b7:85:32:5d:36:6d:4a:4a:21:23:f5:ee: 32:92:e1:5a:03:8e:e6:72:3c:7a:cf:d8:59:a9:1a:2a:c6:ba: f9:fb:9b:ea:5a:7a:85:14:58:17:4a:be:d9:bc:9c:a5:13:78: d7:2f:bc:a7:70:4e:ea:ba:e2:70:07:ee:28:39:1c:11:9e:52: c6:1e:b7:67:41:d7:42:be:d4:77:5f:63:57:e1:21:57:cc:81: e2:f5:7d:6a:65:ee:eb:12:0c:ca:15:a1:f8:ed:79:99:91:17: 26:d5:63:04:e8:78:a6:cf:4d:e5:a8:02:9b:76:2d:36:83:b6: e3:4b:71:16:f1:43:20:3b:5d:2e:03:0f:f5:cb:d5:31:6e:b5: 24:43:a7:eb:3d:5c:ff:27:c8:35:17:22:e8:1a:27:69:3c:c2: 44:76:dc:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwODA5MDEwNDUyWhcNMjUwODE2MDEwNDUyWjAYMRYwFAYD VQQDEw02ODk2OWViNC1mZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfhKg2qSKHRUi9iWMjjkNutQe98zt+Sje1rl5dBkD34DuTQQh5EeoKV7C/85 jeELHHVFFfzgWEQYLgbvAsEQjekPYtuSPw714XCNdGxlzSFQ/x6dy4gqYkayXCoM Y9TQ0wgwo+zJBGiUWWRZaH0tM0jBP3KQ9xlrCW7j6JrVMKDLG90t5K0eKlLoir+N egxbdYISqYw5PqR+z/LHWBrbcZuADc9+NtPuyTrjrJwzjB9wn/z2eKoWgEZVF9hT ia56Y+IDDB5EPnzY2xBTebjmH5bOJhF/oVXQn51xoIiHmx87SJNLKakU1EFgePpE PMys/X6KXiUE6F98Lh8t1bI6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuLftHq AdhjIXpBzMnrsG5s8y61MB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPjScTB6M52PyhIUvL5CdZOpYYHHd/pTZWJYVmBsG3uTfWKzT5JAmD Mywwvnb923RX03XNOVG682LUu9xwsQNQwxq7h96pdhoWOUYQhpSwcCppG2x1j5RX xtGoJWJhYB+3hTJdNm1KSiEj9e4ykuFaA47mcjx6z9hZqRoqxrr5+5vqWnqFFFgX Sr7ZvJylE3jXL7yncE7quuJwB+4oORwRnlLGHrdnQddCvtR3X2NX4SFXzIHi9X1q Ze7rEgzKFaH47XmZkRcm1WME6Himz03lqAKbdi02g7bjS3EW8UMgO10uAw/1y9Ux brUkQ6frPVz/J8g1FyLoGidpPMJEdtwz -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:43 2025 by rpki-client