$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: mhhUz2EU11m++W7mrkJo0Xb5CTehTXmVBTK3qu+1Ass= Subject key identifier: 18:83:62:10:51:BF:73:F9:E8:6A:9A:D5:A8:9A:E6:F8:18:B1:FB:C9 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0161 Signing time: Sun 15 Jun 2025 03:15:45 +0000 Manifest this update: Sun 15 Jun 2025 03:15:44 +0000 Manifest next update: Sun 22 Jun 2025 03:15:44 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: WX4xlRoKRlqYCPAEAPFy2GJyZCQprH5YJl0HX0qdNK8=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: kgaZFM6PEa7OxBpQNYQJyC2BXzh6kZmUunDtbxoanho=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: vxzRpo3gFHIybngZJMla9i3xRZ+JSBWrRy4xi4ckalM=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: D8dAG/9CmCMBEAtiY945ZqCN3MyX7EsagCsHQSrxDDU=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: uxmO0Zu81b9ijLgJWFAnqvmhDLc0ZfCAbuCH6EbXLi0=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: SpJD8GcSBoUz5MPi6PJr9VjMBRC58LFgHcmGttoe0yo=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: G4Dla87V8rtQVoFrowa7K0BJ1dHwJVBSq0/2lBCHVpo=) 8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: sVe/dlsdpYGwjAAFXOmmuTaA1ya2H4hHFG6dxtS3qXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Jun 15 03:15:44 2025 GMT Not After : Jun 22 03:15:44 2025 GMT Subject: CN=684e3ae0-e249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:80:6c:99:de:f2:17:ae:84:9b:aa:99:6d: 72:52:7a:dc:20:37:0c:51:67:a1:3f:ce:40:c8:5a: ca:71:86:a4:1b:bb:a9:ff:2d:53:79:d6:8d:e1:95: 4d:f6:e1:a5:77:22:64:41:44:b6:9b:8b:47:b6:84: 75:33:26:bf:98:ed:b9:74:a3:b6:29:c0:8d:0a:ee: ae:80:f3:b9:e4:61:1b:b0:9d:3a:8f:e6:42:99:37: 27:a9:2e:6c:da:31:7c:49:8c:1e:b0:ab:22:da:6c: 3b:71:b4:3f:c8:cd:24:bf:96:e4:76:e4:c4:7b:25: 62:98:d9:53:13:03:c0:3d:be:af:7e:29:58:b0:35: 8e:fa:ca:d1:62:2a:c5:50:fc:2b:54:92:b3:ab:4a: c7:7a:90:6f:58:01:8b:d4:e2:d3:88:a7:9b:80:e9: 44:e1:e3:b0:de:25:80:f2:ec:34:05:75:04:c0:9d: c6:64:f1:cf:bb:7d:c8:a5:e3:80:6d:c6:c0:20:4c: f6:01:2e:06:df:5a:37:05:b8:24:94:ec:29:3f:a7: 33:53:8a:27:cb:ce:f6:84:51:ba:45:12:da:8e:68: fd:fa:51:a1:e4:77:73:94:99:99:3b:8a:a4:c6:e5: 0d:1a:fc:70:8d:3d:8b:2e:f0:85:ee:b0:6e:95:46: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:62:10:51:BF:73:F9:E8:6A:9A:D5:A8:9A:E6:F8:18:B1:FB:C9 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:72:32:a7:1f:49:7c:f0:c6:e4:e5:9d:38:e2:6b:95:2c:e9: 9a:5d:e6:f6:27:fc:45:41:f5:f1:7c:51:3d:ac:87:67:31:a7: 23:d3:60:da:73:e7:b9:5c:b9:18:07:98:85:3c:6e:47:25:ac: 46:c3:9b:9a:6e:bd:0c:5e:5b:29:40:24:36:17:03:b5:2a:17: da:91:2c:db:73:ac:2f:2a:9d:d2:82:79:32:a5:44:c1:63:43: 09:27:c0:28:43:a1:21:bb:39:4b:12:8e:6b:20:9d:92:9b:15: b3:9a:4a:44:13:d8:94:7f:0b:5a:f3:3e:84:8d:e6:19:c0:61: 13:c9:86:8e:9d:3c:2d:2f:17:5e:ce:2b:47:89:86:23:92:9c: a7:b7:53:ef:92:8c:be:ad:88:9a:57:7d:16:20:ab:ae:bb:27: 84:01:84:ef:e0:8f:62:7b:0b:9a:8b:17:1d:66:2b:aa:41:33: 30:eb:b7:71:a1:86:1e:0f:af:dd:64:4e:c2:28:89:02:bd:f3: 88:25:b6:4f:0d:1c:8d:b7:ff:74:f9:54:fd:a7:c5:44:c2:d0: f5:67:a7:f6:76:90:c0:21:4b:cc:f4:9c:36:3e:64:3c:00:18: 64:5c:51:8a:b9:8a:fc:af:24:b4:33:c9:2b:a1:b6:3e:59:cb: 91:ae:b8:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwNjE1MDMxNTQ0WhcNMjUwNjIyMDMxNTQ0WjAYMRYwFAYD VQQDEw02ODRlM2FlMC1lMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxd+AbJne8heuhJuqmW1yUnrcIDcMUWehP85AyFrKcYakG7up/y1TedaN4ZVN 9uGldyJkQUS2m4tHtoR1Mya/mO25dKO2KcCNCu6ugPO55GEbsJ06j+ZCmTcnqS5s 2jF8SYwesKsi2mw7cbQ/yM0kv5bkduTEeyVimNlTEwPAPb6vfilYsDWO+srRYirF UPwrVJKzq0rHepBvWAGL1OLTiKebgOlE4eOw3iWA8uw0BXUEwJ3GZPHPu33IpeOA bcbAIEz2AS4G31o3BbgklOwpP6czU4ony872hFG6RRLajmj9+lGh5HdzlJmZO4qk xuUNGvxwjT2LLvCF7rBulUYJRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiDYhBR v3P56Gqa1aia5vgYsfvJMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBucjKnH0l88Mbk5Z044muVLOmaXeb2J/xFQfXxfFE9rIdnMacj02Da c+e5XLkYB5iFPG5HJaxGw5uabr0MXlspQCQ2FwO1KhfakSzbc6wvKp3SgnkypUTB Y0MJJ8AoQ6EhuzlLEo5rIJ2SmxWzmkpEE9iUfwta8z6EjeYZwGETyYaOnTwtLxde zitHiYYjkpynt1Pvkoy+rYiaV30WIKuuuyeEAYTv4I9iewuaixcdZiuqQTMw67dx oYYeD6/dZE7CKIkCvfOIJbZPDRyNt/90+VT9p8VEwtD1Z6f2dpDAIUvM9Jw2PmQ8 ABhkXFGKuYr8ryS0M8krobY+WcuRrrhj -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:55 2025 by rpki-client