$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: 6w+XNZ4QBTxyBKB2RN2gsJW/6bteiWDlCUqiZ6LeYhQ= Subject key identifier: 66:8B:B8:C2:CA:20:A1:C1:12:46:DA:FF:49:26:5B:E2:FB:EC:B0:98 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 017F Signing time: Sat 09 Aug 2025 04:07:30 +0000 Manifest this update: Sat 09 Aug 2025 04:07:30 +0000 Manifest next update: Sat 16 Aug 2025 04:07:30 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: Br3iQX1/M6GlKmTBEusantu6rwDgcnE7AlnH4slT2y4=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=) 8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Aug 9 04:07:30 2025 GMT Not After : Aug 16 04:07:30 2025 GMT Subject: CN=6896c982-638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:01:06:b8:1d:b9:4c:de:e3:db:9d:3a:41: 0f:18:9c:df:eb:69:60:ca:3c:07:36:9e:cd:6b:c2: 54:e6:26:6a:d8:0d:68:ae:a7:98:1d:a7:fc:30:ac: b5:a2:87:ec:5a:0e:11:a3:19:5f:6e:7d:e6:bb:23: ac:8b:5b:e8:45:4e:eb:de:7c:7b:b6:bb:c3:56:d8: 41:29:0c:b4:67:22:07:2e:c9:9c:22:a6:e3:fe:3e: c2:fa:1a:7e:2d:23:90:70:1f:61:9c:ae:21:e5:8c: 37:7f:1e:db:0d:b2:33:dc:0d:05:cb:9d:00:b6:9c: 73:b9:e1:6b:b5:a1:b4:c6:c4:26:71:1e:ae:fc:a2: 8f:43:12:9a:45:c0:c8:78:0a:0b:78:46:c7:a4:e6: f8:4b:24:c3:c6:f9:18:1d:17:a5:bb:a2:2c:99:c0: e6:4a:a2:82:b5:01:d4:64:28:1d:1f:e2:84:89:22: 8c:a9:e6:a1:79:d5:8b:6e:5a:83:0a:a2:e3:cf:45: c7:d1:e9:de:36:52:61:de:f6:3e:e6:68:da:b3:7b: fd:50:43:aa:c9:89:75:ac:df:dd:c6:61:29:70:1b: cb:1f:88:26:5f:ce:39:8d:9a:7e:7d:c7:3e:32:cb: ea:ff:7a:b7:40:4c:33:8a:c3:71:7d:bc:59:62:a9: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:B8:C2:CA:20:A1:C1:12:46:DA:FF:49:26:5B:E2:FB:EC:B0:98 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ae:aa:1c:49:1a:5f:e5:85:da:70:80:20:64:0c:3e:8f:8a: ca:e6:c0:87:f8:15:9a:dc:cc:16:c1:a2:57:12:c2:8a:ba:82: e4:70:19:b6:b3:26:e5:45:e4:84:d5:0d:ea:43:12:3e:a6:c2: 93:b4:28:89:57:78:b3:b1:fd:68:f4:7c:d6:fc:bc:42:f6:59: d7:f9:cc:e1:6a:6f:82:ad:0d:c5:52:26:e1:cf:e2:c2:81:60: ba:81:9a:3e:4b:97:2d:db:8d:c6:28:a7:40:26:2f:27:b4:0c: 85:f5:96:6c:a6:c7:a0:d1:f6:45:db:58:f3:3f:e3:69:e9:1a: cf:69:78:8f:e1:b5:b8:db:7f:78:10:b9:be:b0:63:f7:5d:58: 62:48:13:49:35:ed:6b:62:4a:4e:67:5f:35:a8:7e:2b:f4:56: 0f:b9:a3:e8:8e:fc:5a:07:60:07:24:cd:04:33:36:7c:d2:41: 90:b6:ac:d2:21:a4:d9:1e:a2:bc:6f:61:db:d6:33:42:28:da: 39:52:df:01:f0:1f:d9:45:d7:49:a7:2d:ac:d6:64:50:75:b6: fa:5c:ee:0b:de:61:bc:07:68:5a:5f:de:49:77:47:8e:fa:34: 72:1f:f1:24:4c:74:b2:f9:13:67:26:d0:ee:42:44:1d:4f:e4: 13:28:ee:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwODA5MDQwNzMwWhcNMjUwODE2MDQwNzMwWjAYMRYwFAYD VQQDEw02ODk2Yzk4Mi02MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd0BBrgduUze49udOkEPGJzf62lgyjwHNp7Na8JU5iZq2A1orqeYHaf8MKy1 oofsWg4Roxlfbn3muyOsi1voRU7r3nx7trvDVthBKQy0ZyIHLsmcIqbj/j7C+hp+ LSOQcB9hnK4h5Yw3fx7bDbIz3A0Fy50AtpxzueFrtaG0xsQmcR6u/KKPQxKaRcDI eAoLeEbHpOb4SyTDxvkYHRelu6IsmcDmSqKCtQHUZCgdH+KEiSKMqeahedWLblqD CqLjz0XH0eneNlJh3vY+5mjas3v9UEOqyYl1rN/dxmEpcBvLH4gmX845jZp+fcc+ Msvq/3q3QEwzisNxfbxZYqmBxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaLuMLK IKHBEkba/0kmW+L77LCYMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxrqocSRpf5YXacIAgZAw+j4rK5sCH+BWa3MwWwaJXEsKKuoLkcBm2 syblReSE1Q3qQxI+psKTtCiJV3izsf1o9HzW/LxC9lnX+czham+CrQ3FUibhz+LC gWC6gZo+S5ct243GKKdAJi8ntAyF9ZZspseg0fZF21jzP+Np6RrPaXiP4bW42394 ELm+sGP3XVhiSBNJNe1rYkpOZ181qH4r9FYPuaPojvxaB2AHJM0EMzZ80kGQtqzS IaTZHqK8b2Hb1jNCKNo5Ut8B8B/ZRddJpy2s1mRQdbb6XO4L3mG8B2haX95Jd0eO +jRyH/EkTHSy+RNnJtDuQkQdT+QTKO4d -----END CERTIFICATE-----Generated at Sun Aug 10 04:21:15 2025 by rpki-client