$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: JKpYhhJ7ixoF+SToJE6T70SrbJqXh5zGwIdd2xdVy7Q= Subject key identifier: 1C:D9:0E:37:FA:CD:00:A8:EC:FA:DE:6A:E8:3F:25:31:F5:6B:CB:EF Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34B3 Signing time: Tue 12 Aug 2025 14:32:55 +0000 Manifest this update: Tue 12 Aug 2025 14:32:55 +0000 Manifest next update: Tue 19 Aug 2025 14:32:55 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: CPx0sS9HujJzef4VTO2PvN6SIRnwJajFFq7ZVXLxZNw=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Aug 12 14:32:55 2025 GMT Not After : Aug 19 14:32:55 2025 GMT Subject: CN=689b5097-117d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:84:2b:53:71:8e:38:39:75:6b:fd:8b:f7: a6:ed:f2:f4:8a:c2:d5:ec:4a:a4:eb:30:aa:97:ff: 56:8f:5f:da:f1:e4:b7:b6:96:00:72:45:4c:b6:17: d1:7a:06:2c:ba:09:ad:26:db:29:07:17:c5:20:77: 99:01:46:ba:2b:f4:6d:98:07:21:3c:f3:06:9a:e9: 2e:a0:c0:47:3a:90:a1:9c:0c:20:5d:e0:b9:21:49: 2e:4d:7f:d8:d7:01:d8:0c:33:e1:67:1c:63:cb:10: 91:21:ff:7b:b2:22:b1:bf:72:96:d6:f5:c8:88:8c: 56:4e:bf:1a:72:84:aa:17:b3:62:71:ef:55:b4:87: af:7d:68:b2:44:bf:aa:f2:25:e6:ab:70:e8:04:95: 62:60:86:7b:37:d6:cd:9d:1a:c0:e7:23:67:29:7d: 2a:60:69:38:10:9d:7e:a8:b4:ed:c4:6c:92:4f:23: 7b:69:d9:97:cc:96:a4:90:a7:92:81:8f:74:65:61: dd:62:ae:03:f3:02:7d:f8:af:7d:db:4e:fd:a9:5b: 4a:41:f3:fd:c6:0e:5e:65:1d:d3:04:62:7e:ae:8f: 46:d6:0f:fb:71:ca:a9:35:fb:0d:a8:78:b9:04:76: ed:ab:a3:04:71:12:fa:a5:bc:b7:89:d7:ee:d2:90: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D9:0E:37:FA:CD:00:A8:EC:FA:DE:6A:E8:3F:25:31:F5:6B:CB:EF X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:32:e2:b6:6d:34:21:bb:14:65:f4:96:22:32:e7:56:ea: 5b:d5:b5:f9:e2:ef:54:69:75:d3:56:ed:19:80:b7:20:71:b3: 85:4e:b7:3a:fe:f2:3b:ac:23:86:5e:da:68:45:2d:58:85:c5: bd:b2:d0:92:3d:bc:ff:e2:03:a7:3c:89:3b:b6:dc:36:24:b8: 6e:56:1b:3d:67:83:1d:c4:e0:73:3c:02:77:e1:2e:a5:81:bd: 6d:dd:51:92:3b:78:69:25:91:71:a7:1a:4a:c1:a6:1e:f2:23: e0:a8:2d:ae:b4:c5:6d:37:81:42:b2:b6:12:d6:71:95:62:89: b8:91:ee:a9:33:74:04:4e:44:b8:d7:f9:fa:f4:d5:4b:bd:eb: 80:4a:b7:2f:2b:c3:d2:01:21:b4:b6:20:80:41:69:51:9b:15: bd:47:d7:cf:6d:88:b0:f5:98:04:fd:9d:3b:56:f5:4c:ac:0d: 1c:58:6c:da:a2:78:b2:8b:1f:d3:c8:ad:fd:61:93:23:f6:ac: 27:b5:14:e2:c9:5a:d7:c9:b4:b5:ef:2f:b8:02:1a:78:6e:fa: b6:f2:85:c2:ba:35:34:6c:8c:38:db:d9:62:df:40:19:44:a3: a2:b8:33:b8:d1:c2:7c:88:59:9e:c6:9b:93:9c:d5:74:30:5e: 82:88:db:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwODEyMTQzMjU1WhcNMjUwODE5MTQzMjU1WjAYMRYwFAYD VQQDEw02ODliNTA5Ny0xMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iGEK1Nxjjg5dWv9i/em7fL0isLV7Eqk6zCql/9Wj1/a8eS3tpYAckVMthfR egYsugmtJtspBxfFIHeZAUa6K/RtmAchPPMGmukuoMBHOpChnAwgXeC5IUkuTX/Y 1wHYDDPhZxxjyxCRIf97siKxv3KW1vXIiIxWTr8acoSqF7Nice9VtIevfWiyRL+q 8iXmq3DoBJViYIZ7N9bNnRrA5yNnKX0qYGk4EJ1+qLTtxGySTyN7admXzJakkKeS gY90ZWHdYq4D8wJ9+K992079qVtKQfP9xg5eZR3TBGJ+ro9G1g/7ccqpNfsNqHi5 BHbtq6MEcRL6pby3idfu0pAobwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzZDjf6 zQCo7Preaug/JTH1a8vvMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFjDLitm00IbsUZfSWIjLnVupb1bX54u9UaXXTVu0ZgLcgcbOFTrc6 /vI7rCOGXtpoRS1YhcW9stCSPbz/4gOnPIk7ttw2JLhuVhs9Z4MdxOBzPAJ34S6l gb1t3VGSO3hpJZFxpxpKwaYe8iPgqC2utMVtN4FCsrYS1nGVYom4ke6pM3QETkS4 1/n69NVLveuASrcvK8PSASG0tiCAQWlRmxW9R9fPbYiw9ZgE/Z07VvVMrA0cWGza oniyix/TyK39YZMj9qwntRTiyVrXybS17y+4Ahp4bvq28oXCujU0bIw429li30AZ RKOiuDO40cJ8iFmexpuTnNV0MF6CiNsv -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:35 2025 by rpki-client