$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: BDiNIPdBWCIFcvTZhO71cFi8Y1VcsDCLWeyw+EO8YgI= Subject key identifier: 93:DF:74:D8:7D:E6:A1:9B:7B:71:3A:06:44:3F:8C:F4:0F:91:4A:C5 Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 06EC Signing time: Fri 08 Aug 2025 22:23:09 +0000 Manifest this update: Fri 08 Aug 2025 22:23:08 +0000 Manifest next update: Fri 15 Aug 2025 22:23:08 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: +sHWrfyqufD/0Zg/8KugkxpMnwpUvlV0evWPLoA9GS8=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: Aug 8 22:23:08 2025 GMT Not After : Aug 15 22:23:08 2025 GMT Subject: CN=689678cd-348a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:59:76:1e:b6:ec:93:56:8e:a2:a3:2c:fd: 6d:92:b7:d7:e7:a4:b3:9b:d6:4f:77:8f:5d:00:3a: 30:7b:66:e3:b9:dd:1a:42:d4:bd:cf:54:b0:d9:3e: 71:76:de:3d:f2:dc:ac:9e:1c:42:32:c8:d6:14:90: c1:06:22:42:60:6c:46:39:02:52:2a:8a:46:f1:95: 18:d0:3a:a2:86:ac:35:52:fc:73:2e:38:e5:be:3c: 92:17:41:53:f1:70:7f:8c:b3:d4:af:bc:a5:ab:77: d0:55:1b:5d:c1:0f:1c:9a:24:f8:07:09:b0:d2:0c: ee:80:4d:ba:a8:2e:4e:11:1b:0d:49:80:de:75:be: c8:e3:10:60:3b:cf:69:44:39:a5:b8:f6:e2:45:e7: 08:bc:a8:3e:31:dd:f7:02:5d:3e:4e:1c:48:54:60: 46:11:17:8d:f5:87:07:99:ec:92:52:66:bd:08:21: 2c:dd:35:c6:4a:63:ad:97:16:a1:15:08:fc:42:35: cf:c2:9e:6c:ef:b6:e4:22:c3:be:2a:f4:81:cf:a5: e2:a1:0d:cb:cb:b8:a7:95:9d:b1:4f:8a:b4:f2:ec: 1c:6d:01:d2:2d:5b:49:d1:66:cc:77:42:5c:34:09: 4e:11:a3:a3:d8:a0:14:4b:9c:01:95:ae:dc:e4:f9: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DF:74:D8:7D:E6:A1:9B:7B:71:3A:06:44:3F:8C:F4:0F:91:4A:C5 X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:eb:4a:18:1a:8d:8d:f5:00:35:01:0c:8c:a6:b4:9f:ea:e1: 35:5e:99:8a:af:32:aa:d0:79:b9:f0:8a:21:66:ec:bd:1c:b3: 53:c6:dc:14:7b:b1:8d:5b:ac:23:08:c1:d1:81:b0:5a:99:b5: e9:49:0c:42:02:ee:98:0b:4d:88:ef:58:a8:97:24:cf:bf:ff: 3d:dc:a7:4b:84:38:e3:bb:bb:2b:78:0d:85:34:fd:0d:23:16: d5:0a:d9:78:2d:cf:00:d3:17:5e:2f:e6:bc:ca:e4:d8:98:52: de:bf:ad:21:a8:66:63:7e:ac:20:54:35:7a:e4:11:03:ad:df: 53:2d:ae:d5:92:9c:fc:2a:3a:aa:7e:fb:24:34:b1:dc:47:91: 3a:e2:ab:f5:a4:33:e7:43:51:63:9f:71:60:4b:0e:db:00:5e: 94:16:e3:f9:1a:f7:93:1d:4d:fc:6e:31:0c:37:31:de:e6:4d: e4:5a:fa:9b:06:10:f7:1c:d6:8a:54:83:0e:d8:80:c9:27:30: 8a:05:90:b7:ea:ed:89:81:97:3a:3a:07:9a:9b:0d:23:f3:ee: e7:89:32:bd:0a:e3:de:99:ed:47:7d:b7:da:82:61:16:43:56: c3:86:fd:97:20:c3:94:fc:66:c4:2a:51:e3:2a:4b:16:f2:8b: 0b:c7:68:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUwODA4MjIyMzA4WhcNMjUwODE1MjIyMzA4WjAYMRYwFAYD VQQDEw02ODk2NzhjZC0zNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAFZdh627JNWjqKjLP1tkrfX56Szm9ZPd49dADowe2bjud0aQtS9z1Sw2T5x dt498tysnhxCMsjWFJDBBiJCYGxGOQJSKopG8ZUY0Dqihqw1UvxzLjjlvjySF0FT 8XB/jLPUr7ylq3fQVRtdwQ8cmiT4Bwmw0gzugE26qC5OERsNSYDedb7I4xBgO89p RDmluPbiRecIvKg+Md33Al0+ThxIVGBGEReN9YcHmeySUma9CCEs3TXGSmOtlxah FQj8QjXPwp5s77bkIsO+KvSBz6XioQ3Ly7inlZ2xT4q08uwcbQHSLVtJ0WbMd0Jc NAlOEaOj2KAUS5wBla7c5PkihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPfdNh9 5qGbe3E6BkQ/jPQPkUrFMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+60oYGo2N9QA1AQyMprSf6uE1XpmKrzKq0Hm58IohZuy9HLNTxtwU e7GNW6wjCMHRgbBambXpSQxCAu6YC02I71iolyTPv/893KdLhDjju7sreA2FNP0N IxbVCtl4Lc8A0xdeL+a8yuTYmFLev60hqGZjfqwgVDV65BEDrd9TLa7Vkpz8Kjqq fvskNLHcR5E64qv1pDPnQ1Fjn3FgSw7bAF6UFuP5GveTHU38bjEMNzHe5k3kWvqb BhD3HNaKVIMO2IDJJzCKBZC36u2JgZc6Ogeamw0j8+7niTK9CuPeme1HfbfagmEW Q1bDhv2XIMOU/GbEKlHjKksW8osLx2h6 -----END CERTIFICATE-----Generated at Sat Aug 9 02:51:06 2025 by rpki-client