$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: Mb99eUItFzplp0xmOVJ7hVMb8gyT4Hb4KciqY70LXDU= Subject key identifier: 7F:8C:75:24:48:20:58:58:D1:17:61:ED:34:56:6F:60:22:2B:77:4F Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 40E0 Signing time: Fri 08 Aug 2025 15:06:06 +0000 Manifest this update: Fri 08 Aug 2025 15:06:05 +0000 Manifest next update: Fri 15 Aug 2025 15:06:05 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: oNLscoYvsKUcY3uaXCWDuRuVjxyBzj3DMRMZ6BmqkwU=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: Aug 8 15:06:05 2025 GMT Not After : Aug 15 15:06:05 2025 GMT Subject: CN=6896125d-6d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:97:8c:01:b6:3c:59:24:83:ed:58:6f:d8: 4a:36:b6:63:93:16:b2:c2:fb:08:4c:cd:cf:85:94: d8:f7:31:ef:4a:28:ce:ea:18:59:52:12:6b:b0:b2: 89:fc:47:89:4d:76:a4:be:fd:21:a4:27:82:82:d2: 57:7c:2c:21:ca:0b:ba:f9:4a:ee:a0:82:c8:d7:b0: 85:89:f3:59:de:3d:da:41:f4:2d:e0:41:08:49:40: 0c:70:e0:ef:18:dc:6c:01:3a:aa:50:92:0b:60:6f: 70:36:23:38:e2:92:2a:79:54:b6:11:77:26:77:0f: da:8d:2d:57:d0:14:fb:88:33:50:ec:d8:dd:a1:d8: ec:de:27:fc:70:ac:fc:a5:dc:26:af:f4:0d:0f:d7: 5c:80:bc:34:e7:f4:31:b5:81:d6:d0:bc:e1:65:c5: 0d:16:2c:8c:5e:8a:61:74:dd:d5:91:c4:2d:42:28: d0:2f:a1:c3:2c:c1:1a:02:89:95:11:75:7e:f7:d6: 5e:32:06:0d:4e:8c:69:21:7c:7c:e7:80:5b:74:ed: 0b:33:72:bf:08:c9:e6:e9:91:c1:9d:33:3e:b0:d4: 1a:2c:64:bb:d3:aa:ad:67:85:99:86:05:d9:81:d1: f7:49:e9:8e:af:1e:03:cb:dd:45:24:16:59:fd:d0: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:75:24:48:20:58:58:D1:17:61:ED:34:56:6F:60:22:2B:77:4F X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:ed:0e:cf:b7:fc:19:32:2a:b8:95:7b:8f:11:bf:04:89: db:5f:95:13:84:eb:52:b1:19:90:93:12:bf:72:1b:ec:87:e4: a3:2d:62:c7:a9:4d:e0:7a:39:17:5e:e0:e0:6d:6b:b5:2e:fe: b7:05:ad:d0:01:e5:93:da:0c:de:ec:f4:c7:91:8b:80:e4:41: 77:ca:73:fc:d4:5e:af:e2:d7:1f:4f:09:98:90:1a:c0:65:ca: 5d:ca:a5:60:37:45:ad:0e:4f:b4:07:f5:1c:e7:77:8f:14:78: 13:c7:2f:10:23:ac:73:67:7f:c3:73:81:68:5a:67:bc:1c:18: 20:56:c9:89:44:aa:56:bb:0a:c1:fe:d4:b6:93:b5:0b:a1:6b: 7e:ef:26:1a:5a:f4:01:64:cf:c3:88:44:61:7b:c3:eb:cf:b4: 81:70:c7:7f:45:dc:44:dc:f2:65:68:73:f0:22:8d:57:b3:73: 27:1a:d0:66:59:e8:21:16:e7:de:c5:11:1b:b4:be:ff:a2:79: 7c:24:0d:a8:e9:36:e2:f6:9a:bf:ef:29:2e:0a:42:d0:89:39: 09:9c:5e:b2:f8:08:55:25:d0:41:28:bb:b0:d4:2f:b4:c0:26: 46:4a:4b:eb:e5:08:d9:06:06:79:b2:21:67:35:47:1f:ac:93: dc:4d:8d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjUwODA4MTUwNjA1WhcNMjUwODE1MTUwNjA1WjAYMRYwFAYD VQQDEw02ODk2MTI1ZC02ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GmXjAG2PFkkg+1Yb9hKNrZjkxaywvsITM3PhZTY9zHvSijO6hhZUhJrsLKJ /EeJTXakvv0hpCeCgtJXfCwhygu6+UruoILI17CFifNZ3j3aQfQt4EEISUAMcODv GNxsATqqUJILYG9wNiM44pIqeVS2EXcmdw/ajS1X0BT7iDNQ7Njdodjs3if8cKz8 pdwmr/QND9dcgLw05/QxtYHW0LzhZcUNFiyMXophdN3VkcQtQijQL6HDLMEaAomV EXV+99ZeMgYNToxpIXx854BbdO0LM3K/CMnm6ZHBnTM+sNQaLGS706qtZ4WZhgXZ gdH3SemOrx4Dy91FJBZZ/dBslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+MdSRI IFhY0Rdh7TRWb2AiK3dPMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhCO0Oz7f8GTIquJV7jxG/BInbX5UThOtSsRmQkxK/chvsh+SjLWLH qU3gejkXXuDgbWu1Lv63Ba3QAeWT2gze7PTHkYuA5EF3ynP81F6v4tcfTwmYkBrA ZcpdyqVgN0WtDk+0B/Uc53ePFHgTxy8QI6xzZ3/Dc4FoWme8HBggVsmJRKpWuwrB /tS2k7ULoWt+7yYaWvQBZM/DiERhe8Prz7SBcMd/RdxE3PJlaHPwIo1Xs3MnGtBm WeghFufexREbtL7/onl8JA2o6Tbi9pq/7ykuCkLQiTkJnF6y+AhVJdBBKLuw1C+0 wCZGSkvr5QjZBgZ5siFnNUcfrJPcTY2n -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:06 2025 by rpki-client