$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft File: MIoPBCNx10Tky2KrUekE9wys03o.mft (raw, json) Hash identifier: VeETw0wTvK/1LXSbOiVv8LTWytVLCsKRlhVeMNcMoME= Subject key identifier: 1F:05:23:2F:B0:21:70:95:ED:2C:65:2E:17:2A:27:8C:BD:4E:7E:22 Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A Certificate issuer: /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft Manifest number: 07EF Signing time: Tue 12 Aug 2025 21:19:10 +0000 Manifest this update: Tue 12 Aug 2025 21:19:09 +0000 Manifest next update: Tue 19 Aug 2025 21:19:09 +0000 Files and hashes: 1: MIoPBCNx10Tky2KrUekE9wys03o.crl (hash: o9pN4Vj9V9ThnUWrqQVpBbLtaEKzwPbg70xbZQxHRXE=) 2: 727EECD2678811EF99602F53C4F9AE02.roa (hash: WvAkrs/LiVkRHkVog2xW2/ey9F5S8FH9WKoT4JG9/2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A Validity Not Before: Aug 12 21:19:09 2025 GMT Not After : Aug 19 21:19:09 2025 GMT Subject: CN=689bafcd-a183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:90:75:e7:ab:7f:4b:f6:c5:25:bd:3b:7a:3b: 8f:0b:f6:88:dc:f4:a1:6c:19:32:cc:e3:33:07:e2: ad:8e:0d:9a:14:69:8f:94:cd:cc:aa:1e:4a:eb:d8: 8b:ce:60:62:96:be:09:41:d8:e9:55:c5:0b:36:ee: ce:9b:51:51:53:a6:d4:45:22:71:57:7a:f4:3a:92: 07:66:9d:42:51:15:6c:7a:9b:80:a2:d2:e5:f9:0e: 33:74:53:07:96:d1:47:13:cb:ab:7d:6a:66:0c:9c: 5f:78:e7:66:a0:63:e0:74:71:4d:11:58:d9:72:9f: 6c:6f:5e:ae:01:71:23:88:60:15:a3:65:93:b1:15: 3f:4e:f2:b2:41:25:fe:0b:3f:49:dc:ac:87:21:a6: b3:50:ff:0f:29:32:ad:d2:14:84:3a:25:10:43:c0: 8f:65:4d:5c:81:94:84:07:ca:15:bc:bd:f5:bd:82: 36:84:f0:4f:71:7c:d6:bc:74:33:1b:bc:14:46:7b: 01:c9:67:cc:8d:51:53:da:08:60:05:f2:1f:c0:1c: 62:48:89:a6:a0:57:7b:ea:a3:1e:e0:24:58:30:2c: 2d:68:7a:dd:aa:7c:97:d5:f6:3e:c5:f4:dc:17:d5: 70:98:4e:8f:6c:69:1f:ba:5b:46:db:5a:fa:46:f6: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:23:2F:B0:21:70:95:ED:2C:65:2E:17:2A:27:8C:BD:4E:7E:22 X509v3 Authority Key Identifier: keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:cb:0a:74:6d:97:3f:a7:06:a7:07:07:7c:43:50:4c:27: 77:c7:3b:d9:24:06:7e:57:8a:63:31:f8:14:30:1c:94:f3:44: 7f:b8:47:72:c7:e4:7e:af:f5:2c:29:7a:f0:86:0c:f5:61:77: 34:e5:7f:db:d6:ad:1b:13:d3:e7:af:87:ec:6c:c8:c7:cc:64: b4:c3:d6:f1:75:5d:96:8c:f5:ff:f3:64:c6:3c:16:38:d9:fa: 24:9a:96:eb:18:fc:85:6a:60:bb:f0:2c:5e:37:78:e8:b5:87: 85:da:b2:94:7d:97:5a:b4:1d:84:95:cf:5c:f4:32:f2:4d:2a: b8:33:66:ba:c5:e7:d2:81:00:4b:93:75:fc:e2:92:5c:25:f6: 7c:ab:27:fd:e4:21:20:3f:9c:d7:e0:84:51:1a:ca:93:9b:6d: df:9e:9d:d6:32:33:73:78:63:c4:2a:53:c3:28:61:9e:8a:c4: db:63:91:ac:47:44:b8:e7:87:a0:d7:3f:d4:04:23:e3:05:3a: d6:cc:cb:20:db:b4:ae:5d:ad:23:30:30:88:6f:72:5e:6d:c2: 63:38:f1:99:1a:fd:a1:4b:c4:6d:08:a7:08:f0:b8:f8:61:3d: 31:7e:e3:ac:f3:ba:c8:ad:52:b3:40:48:92:86:c6:24:d1:9a: 17:59:f0:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIyNTIxMTAvBgNVBAUTKDMwOEEwRjA0MjM3MUQ3NDRFNENCNjJBQjUxRTkwNEY3 MENBQ0QzN0EwHhcNMjUwODEyMjExOTA5WhcNMjUwODE5MjExOTA5WjAYMRYwFAYD VQQDEw02ODliYWZjZC1hMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65B156t/S/bFJb07ejuPC/aI3PShbBkyzOMzB+Ktjg2aFGmPlM3Mqh5K69iL zmBilr4JQdjpVcULNu7Om1FRU6bURSJxV3r0OpIHZp1CURVsepuAotLl+Q4zdFMH ltFHE8urfWpmDJxfeOdmoGPgdHFNEVjZcp9sb16uAXEjiGAVo2WTsRU/TvKyQSX+ Cz9J3KyHIaazUP8PKTKt0hSEOiUQQ8CPZU1cgZSEB8oVvL31vYI2hPBPcXzWvHQz G7wURnsByWfMjVFT2ghgBfIfwBxiSImmoFd76qMe4CRYMCwtaHrdqnyX1fY+xfTc F9VwmE6PbGkfultG21r6RvbR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8FIy+w IXCV7SxlLhcqJ4y9Tn4iMB8GA1UdIwQYMBaAFDCKDwQjcddE5Mtiq1HpBPcMrNN6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjI1Mi9DNThGOEI3QUY2 M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEwVGt5MktyVWVrRTl3eXMw M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Jb1BCQ054MTBUa3kyS3JVZWtFOXd5czAzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjI1Mi9DNThGOEI3QUY2M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEw VGt5MktyVWVrRTl3eXMwM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASw8sKdG2XP6cGpwcHfENQTCd3xzvZJAZ+V4pjMfgUMByU80R/uEdy x+R+r/UsKXrwhgz1YXc05X/b1q0bE9Pnr4fsbMjHzGS0w9bxdV2WjPX/82TGPBY4 2fokmpbrGPyFamC78CxeN3jotYeF2rKUfZdatB2Elc9c9DLyTSq4M2a6xefSgQBL k3X84pJcJfZ8qyf95CEgP5zX4IRRGsqTm23fnp3WMjNzeGPEKlPDKGGeisTbY5Gs R0S454eg1z/UBCPjBTrWzMsg27SuXa0jMDCIb3JebcJjOPGZGv2hS8RtCKcI8Lj4 YT0xfuOs87rIrVKzQEiShsYk0ZoXWfB/ -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:36 2025 by rpki-client