$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: rjNGOYy2+kszcpWM4umTULlTMgGsz/k4miQEOdCgnUg= Subject key identifier: 6C:74:B5:AE:FC:3E:22:2F:B9:FA:CD:38:8D:92:5F:08:5B:C7:B1:A2 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 145F Signing time: Fri 08 Aug 2025 17:04:36 +0000 Manifest this update: Fri 08 Aug 2025 17:04:36 +0000 Manifest next update: Fri 15 Aug 2025 17:04:36 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: D0x+9nR8SDFntYdnp8XKhOfl/Dpkk/WfmUaLvPTwghA=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5225 (0x1469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Aug 8 17:04:36 2025 GMT Not After : Aug 15 17:04:36 2025 GMT Subject: CN=68962e24-86c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:54:b6:e9:54:aa:74:a1:e5:3c:8f:94:02: 68:84:53:22:14:a6:48:02:05:02:0c:8c:0b:93:30: 75:c7:bf:48:24:fc:70:a0:48:0f:17:f9:c1:28:22: 0e:48:59:3d:28:46:58:71:30:aa:ae:a1:f6:80:26: e1:d2:30:94:2e:ce:71:f6:25:36:46:ec:e5:fc:b9: 97:50:98:12:bc:dd:92:da:54:cb:b9:6c:37:f7:1e: f2:29:7e:24:00:52:b9:72:93:b6:37:ae:cd:31:34: 09:df:48:6e:37:0e:d9:08:d4:20:a4:be:4f:54:1b: 0f:9d:e8:26:04:9f:11:c8:42:42:61:15:c2:26:fd: a4:01:a1:35:aa:64:c0:3d:1f:c5:7d:1c:48:4e:5c: 9a:8e:96:00:66:20:ba:62:d3:34:f5:29:34:e6:69: 22:7e:c4:79:f3:0f:dd:cd:c8:5b:63:04:ea:8b:86: 4e:81:fe:4f:88:4b:a9:da:da:51:d3:e9:dc:5f:08: 22:cd:ea:9a:55:87:33:1b:3d:7e:e9:d8:76:90:ba: cd:dc:01:a7:ba:b8:74:97:aa:9b:05:c5:85:6b:0d: eb:da:cc:e2:82:e5:fd:d4:5d:73:8c:18:d6:c3:8b: 42:aa:a2:b3:0a:3a:76:23:fb:11:21:03:5a:0e:3c: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:74:B5:AE:FC:3E:22:2F:B9:FA:CD:38:8D:92:5F:08:5B:C7:B1:A2 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ac:da:8e:68:2c:1d:9e:cc:c8:0c:a9:e9:7d:ee:cd:a7:89: 88:6b:96:46:90:d1:5d:0b:ec:35:c0:4f:1d:c9:5e:99:48:dd: dd:77:d7:51:5d:43:6d:4b:cc:60:c1:5f:0a:11:d7:47:93:6d: ef:f0:2e:b0:73:3e:0d:0b:2f:73:91:71:65:4a:1c:c6:34:33: 0b:f2:01:e8:e4:49:47:3b:2b:cf:d9:0b:aa:da:06:4d:a6:21: af:c3:b7:29:01:70:fe:bd:4e:6d:0d:88:51:4b:34:06:32:84: 4c:22:a2:a4:8e:c2:72:1a:31:21:7e:71:92:be:fa:eb:99:46: 74:57:fb:bc:ad:ec:0c:4f:64:e6:1d:7a:01:bd:76:61:5d:72: 7f:34:39:a6:cd:a2:66:50:ac:dd:26:7e:b8:d9:bf:87:e2:8f: 9b:05:9d:46:28:37:6b:3e:71:af:8c:69:eb:76:69:d1:b5:17: eb:8f:dd:da:24:fb:60:70:86:95:03:c9:85:65:05:31:01:08: 77:a2:b7:e8:48:73:93:f2:b5:01:bd:3c:39:ed:fd:ff:a0:15: 66:48:cc:ca:3f:8b:3b:d9:ba:20:36:e3:d8:4d:05:3f:a9:f5: cc:31:2a:d7:0a:79:68:7e:f0:6b:94:9d:c4:43:fc:73:52:15: 5f:ee:e6:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwODA4MTcwNDM2WhcNMjUwODE1MTcwNDM2WjAYMRYwFAYD VQQDEw02ODk2MmUyNC04NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsRUtulUqnSh5TyPlAJohFMiFKZIAgUCDIwLkzB1x79IJPxwoEgPF/nBKCIO SFk9KEZYcTCqrqH2gCbh0jCULs5x9iU2Ruzl/LmXUJgSvN2S2lTLuWw39x7yKX4k AFK5cpO2N67NMTQJ30huNw7ZCNQgpL5PVBsPnegmBJ8RyEJCYRXCJv2kAaE1qmTA PR/FfRxITlyajpYAZiC6YtM09Sk05mkifsR58w/dzchbYwTqi4ZOgf5PiEup2tpR 0+ncXwgizeqaVYczGz1+6dh2kLrN3AGnurh0l6qbBcWFaw3r2sziguX91F1zjBjW w4tCqqKzCjp2I/sRIQNaDjy+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx0ta78 PiIvufrNOI2SXwhbx7GiMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGrNqOaCwdnszIDKnpfe7Np4mIa5ZGkNFdC+w1wE8dyV6ZSN3dd9dR XUNtS8xgwV8KEddHk23v8C6wcz4NCy9zkXFlShzGNDML8gHo5ElHOyvP2Quq2gZN piGvw7cpAXD+vU5tDYhRSzQGMoRMIqKkjsJyGjEhfnGSvvrrmUZ0V/u8rewMT2Tm HXoBvXZhXXJ/NDmmzaJmUKzdJn642b+H4o+bBZ1GKDdrPnGvjGnrdmnRtRfrj93a JPtgcIaVA8mFZQUxAQh3orfoSHOT8rUBvTw57f3/oBVmSMzKP4s72bogNuPYTQU/ qfXMMSrXCnlofvBrlJ3EQ/xzUhVf7ubY -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:35 2025 by rpki-client