$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: ID1ZeNRv3Pf/pgO281HrHVCigSDTOMpnTTlwyaBUxqg= Subject key identifier: 1C:55:21:4E:48:F7:12:1A:A1:27:14:CA:B7:2F:79:37:CF:74:23:A8 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 34C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 34BA Signing time: Sun 10 Aug 2025 14:43:24 +0000 Manifest this update: Sun 10 Aug 2025 14:43:23 +0000 Manifest next update: Sun 17 Aug 2025 14:43:23 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: cYg95Mm/6rezSFh/2CR+SW4i/MoFxm2fJCt8/RCjVEM=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: joFpQbUhhuICq9lMSQUwGZiftmapGwfxicrZ76+a/Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13511 (0x34c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Aug 10 14:43:23 2025 GMT Not After : Aug 17 14:43:23 2025 GMT Subject: CN=6898b00b-7265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dc:ef:cd:47:64:6e:b3:b0:09:30:b7:b3:ad: 49:cb:97:17:c5:2e:46:9e:2f:84:4f:40:f7:4b:d2: a4:ab:19:70:29:10:8b:ca:4e:cc:6d:71:66:3d:4a: 9f:4c:b4:ec:d7:94:d4:51:8d:ee:ff:8b:1e:45:78: 53:3d:d5:79:65:20:ce:82:07:06:a4:90:98:5c:2d: f2:6b:05:12:01:52:c6:12:62:2d:12:bd:00:23:3e: f5:89:18:fd:9d:ba:f9:f1:4d:c4:b8:19:77:30:4e: 1b:da:b3:ee:90:56:55:16:20:3b:e6:a3:73:ab:f1: f7:b4:77:6f:e5:2b:07:30:9c:a1:10:a6:5f:e6:f8: 7c:eb:2d:ed:79:c3:78:3b:75:8d:73:6c:74:46:5a: cb:aa:82:ae:4e:ab:90:c9:db:c4:55:ee:c8:3d:60: 6d:c9:14:fd:fc:7e:05:3c:c5:8e:37:f5:ce:b6:f7: 95:2d:d5:a4:e6:d7:2b:94:5e:b4:0c:34:9c:84:a1: 75:e8:ba:8e:8e:53:8d:8c:80:99:e8:71:83:3b:3c: 2a:d8:d5:7a:38:03:c2:1d:59:7b:f0:e3:f5:95:98: 39:9c:9c:51:1b:58:92:99:07:8f:32:5c:b0:6b:66: 4c:d6:1e:53:d9:22:10:fb:4c:b5:d1:68:c9:d9:8c: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:21:4E:48:F7:12:1A:A1:27:14:CA:B7:2F:79:37:CF:74:23:A8 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1a:85:e5:fa:ff:01:39:0b:eb:e3:9d:c1:18:f3:1b:7f:87: 8b:de:6c:f9:59:46:54:9f:2e:9a:33:b9:f3:04:62:6a:84:5a: 96:b4:ad:a7:d1:32:06:5c:95:e2:f4:b1:86:43:13:e0:28:a4: 2d:44:4e:16:d5:5e:6e:a8:a6:d2:ef:c6:44:c5:54:0a:4f:1d: a1:2e:b3:26:9b:4c:c7:57:73:83:46:3a:df:ef:e9:83:07:23: cb:73:48:53:af:f5:cb:27:71:da:5d:88:d7:ed:80:07:64:4a: 79:10:da:6f:a2:83:ce:8f:62:54:8e:d8:bc:96:2a:34:c1:e5: c7:5e:98:92:7b:4e:ba:f4:45:96:6c:b0:a9:60:b8:14:0d:44: fe:96:25:bd:35:68:59:0e:07:2a:c3:62:72:c4:5f:18:01:2b: 32:79:b7:99:f3:b5:52:72:3a:35:37:52:d0:6b:12:7f:64:bf: fd:93:cf:b3:be:98:04:cc:fd:0c:9c:8c:97:a7:e5:af:a3:35: 45:b4:39:1a:2d:3e:a6:00:9c:23:1b:1f:57:93:ef:49:ec:dc: f3:25:49:38:09:ca:a7:f4:b4:57:cb:8f:cf:bd:fd:38:e2:96: cf:50:22:a0:6a:e1:29:6d:ce:4c:35:3d:55:d5:6c:eb:d3:9c: ff:f8:b6:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwODEwMTQ0MzIzWhcNMjUwODE3MTQ0MzIzWjAYMRYwFAYD VQQDEw02ODk4YjAwYi03MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dzvzUdkbrOwCTC3s61Jy5cXxS5Gni+ET0D3S9KkqxlwKRCLyk7MbXFmPUqf TLTs15TUUY3u/4seRXhTPdV5ZSDOggcGpJCYXC3yawUSAVLGEmItEr0AIz71iRj9 nbr58U3EuBl3ME4b2rPukFZVFiA75qNzq/H3tHdv5SsHMJyhEKZf5vh86y3tecN4 O3WNc2x0RlrLqoKuTquQydvEVe7IPWBtyRT9/H4FPMWON/XOtveVLdWk5tcrlF60 DDSchKF16LqOjlONjICZ6HGDOzwq2NV6OAPCHVl78OP1lZg5nJxRG1iSmQePMlyw a2ZM1h5T2SIQ+0y10WjJ2YzxgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxVIU5I 9xIaoScUyrcveTfPdCOoMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmGoXl+v8BOQvr453BGPMbf4eL3mz5WUZUny6aM7nzBGJqhFqWtK2n 0TIGXJXi9LGGQxPgKKQtRE4W1V5uqKbS78ZExVQKTx2hLrMmm0zHV3ODRjrf7+mD ByPLc0hTr/XLJ3HaXYjX7YAHZEp5ENpvooPOj2JUjti8lio0weXHXpiSe0669EWW bLCpYLgUDUT+liW9NWhZDgcqw2JyxF8YASsyebeZ87VScjo1N1LQaxJ/ZL/9k8+z vpgEzP0MnIyXp+WvozVFtDkaLT6mAJwjGx9Xk+9J7NzzJUk4Ccqn9LRXy4/Pvf04 4pbPUCKgauEpbc5MNT1V1Wzr05z/+LYp -----END CERTIFICATE-----Generated at Mon Aug 11 04:33:28 2025 by rpki-client