$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: iuFHIX9ljO0UdLWybohRtyvShg2lKzSAC0/g977Fydc= Subject key identifier: E3:00:7A:8C:0A:45:69:89:30:91:39:91:12:91:4B:D4:A4:FA:BA:5A Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 047C Signing time: Sun 03 Aug 2025 00:35:46 +0000 Manifest this update: Sun 03 Aug 2025 00:35:45 +0000 Manifest next update: Sun 10 Aug 2025 00:35:45 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: q5x5Gh/bb5jq7o5oDnDPXya+35JFi6bxO12kI660GB8=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Aug 3 00:35:45 2025 GMT Not After : Aug 10 00:35:45 2025 GMT Subject: CN=688eaee1-05a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:9b:25:a3:2c:e8:c5:45:c0:3f:06:4e:ff: 6e:27:bf:e1:84:38:61:48:17:c7:ce:f3:1c:b9:70: 6f:df:6e:1c:09:3b:22:ce:96:ce:2c:02:e5:40:fb: ae:a4:2b:a5:5b:97:1a:06:da:26:fb:5a:e6:0c:58: 46:6a:3d:d5:02:9c:d7:8d:f3:fe:18:3a:42:47:1a: 23:38:93:b9:63:48:b9:ac:ca:10:22:e0:cc:51:6d: ce:2c:a6:40:53:8d:5d:43:8c:5c:0b:11:7d:25:9e: 0c:c0:aa:92:9c:a8:1e:f5:90:e6:88:96:ba:80:f8: 5c:3e:f6:28:98:f2:32:dd:39:5a:6f:a1:24:c4:f2: 29:1f:3f:ec:99:43:bb:63:da:ad:53:e4:c4:76:e3: 2f:1c:6e:dd:2d:d9:e3:9b:20:52:cf:38:7f:84:1a: fe:16:05:61:dc:a2:a8:24:17:af:77:1e:2b:ea:94: d6:28:55:21:54:b7:b7:a5:30:28:a3:6a:0a:2a:58: 4d:df:24:45:d8:ec:c2:19:57:b5:6a:04:59:17:0b: d4:b2:af:cf:d3:4a:f9:55:0c:19:00:86:a1:cf:28: d7:1f:de:c4:42:11:0a:f6:9c:01:2f:06:6b:cc:21: ea:c9:54:81:94:fb:e6:b9:07:ed:2d:cd:ba:bf:83: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:00:7A:8C:0A:45:69:89:30:91:39:91:12:91:4B:D4:A4:FA:BA:5A X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1c:b9:b7:66:e4:fc:72:23:d8:87:c4:2e:da:27:42:d4:43: e2:a7:b5:71:9c:c9:62:4f:0b:13:bf:ab:69:f9:f3:c4:0e:19: ed:b0:0c:44:f5:6e:d6:88:ec:12:e6:15:3c:38:bf:92:75:18: 82:0b:6c:17:29:4b:44:e0:8d:64:32:0c:21:23:03:8d:ac:7d: fb:67:12:35:bf:e4:e4:f7:8f:f8:04:53:8c:b6:65:2f:0f:78: ec:d7:f9:ac:f6:30:8e:19:49:ff:95:7e:21:2f:7d:97:35:e2: a9:72:82:49:76:f1:04:ef:f0:89:54:32:06:d4:45:fb:9c:bd: 81:fa:47:fd:62:58:a8:c8:4a:b2:8e:12:b8:2b:ba:0e:da:83: b4:09:45:89:21:20:de:e7:8f:c1:d1:e6:06:2d:c9:59:91:76: 46:9b:76:b1:fd:95:d6:1f:d9:8c:1a:bc:5a:30:77:40:4e:5b: 5c:ef:18:8a:3e:56:93:14:43:69:46:98:12:75:88:47:e1:50: 3f:76:31:98:4b:2e:e3:5c:7e:68:59:ad:01:76:88:27:9e:39: bb:fa:50:41:f6:a5:8a:e5:5a:e7:80:a8:89:61:c9:fc:0e:85: 3a:10:f2:76:bb:1c:0f:25:ef:b9:58:47:ee:0e:72:65:48:a1: af:53:14:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUwODAzMDAzNTQ1WhcNMjUwODEwMDAzNTQ1WjAYMRYwFAYD VQQDEw02ODhlYWVlMS0wNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycKbJaMs6MVFwD8GTv9uJ7/hhDhhSBfHzvMcuXBv324cCTsizpbOLALlQPuu pCulW5caBtom+1rmDFhGaj3VApzXjfP+GDpCRxojOJO5Y0i5rMoQIuDMUW3OLKZA U41dQ4xcCxF9JZ4MwKqSnKge9ZDmiJa6gPhcPvYomPIy3Tlab6EkxPIpHz/smUO7 Y9qtU+TEduMvHG7dLdnjmyBSzzh/hBr+FgVh3KKoJBevdx4r6pTWKFUhVLe3pTAo o2oKKlhN3yRF2OzCGVe1agRZFwvUsq/P00r5VQwZAIahzyjXH97EQhEK9pwBLwZr zCHqyVSBlPvmuQftLc26v4NfAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMAeowK RWmJMJE5kRKRS9Sk+rpaMB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfHLm3ZuT8ciPYh8Qu2idC1EPip7VxnMliTwsTv6tp+fPEDhntsAxE 9W7WiOwS5hU8OL+SdRiCC2wXKUtE4I1kMgwhIwONrH37ZxI1v+Tk94/4BFOMtmUv D3js1/ms9jCOGUn/lX4hL32XNeKpcoJJdvEE7/CJVDIG1EX7nL2B+kf9YlioyEqy jhK4K7oO2oO0CUWJISDe54/B0eYGLclZkXZGm3ax/ZXWH9mMGrxaMHdATltc7xiK PlaTFENpRpgSdYhH4VA/djGYSy7jXH5oWa0Bdognnjm7+lBB9qWK5VrngKiJYcn8 DoU6EPJ2uxwPJe+5WEfuDnJlSKGvUxQK -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:27 2025 by rpki-client