$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: oJfpCwX0BsRDUIfLD9nIT9d/pfIWQ1Gexo4PLhg9E0k= Subject key identifier: 9A:75:B6:6B:13:00:68:75:3A:EE:BB:86:AA:6B:04:1A:1C:86:EE:8A Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 022B Signing time: Sat 09 Aug 2025 02:28:15 +0000 Manifest this update: Sat 09 Aug 2025 02:28:14 +0000 Manifest next update: Sat 16 Aug 2025 02:28:14 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: OmUBmUBlSeYCZGGqkct1z55aPqQkXDIMDMU2GtbOWzU=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: Aug 9 02:28:14 2025 GMT Not After : Aug 16 02:28:14 2025 GMT Subject: CN=6896b23f-2dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:18:53:50:20:94:96:56:95:6a:84:66:2f:f4: 23:37:ad:1c:ca:9b:64:45:5d:30:77:c7:cc:06:08: e6:55:9b:dd:72:71:16:ab:28:05:53:35:6e:57:11: 52:9f:aa:e8:85:0c:7b:80:cb:bd:a2:11:b2:6c:8d: 01:12:af:7a:13:14:c4:11:3f:11:a6:3c:7e:80:0d: d6:3d:f9:57:36:1f:69:88:cd:a8:bf:b3:aa:20:6e: 58:ef:93:3d:1a:8d:85:54:15:44:52:dc:45:31:28: 74:0e:3e:2d:34:37:c1:3e:bf:ab:c6:62:35:05:3e: ee:f8:f6:ca:e9:03:4a:60:78:b9:eb:06:17:a7:bb: 82:e8:ce:c4:c7:cc:07:1b:be:c5:2b:18:46:4d:ef: 85:0e:3b:4f:9d:11:4b:99:db:b9:a5:b6:52:f6:96: 60:ab:a0:dc:3b:88:ef:a7:e8:77:98:a6:33:7b:25: e1:f4:19:8e:b3:20:67:36:83:35:45:10:6e:a7:d1: 57:8e:a1:43:cf:0d:2b:70:ff:c0:72:2c:f1:f3:6f: 05:2b:12:b4:01:f5:42:78:16:8b:7d:92:bc:f5:9b: 20:4e:a6:1f:36:f9:02:b6:77:ab:ba:52:7d:9b:53: 59:18:03:2a:fb:b9:41:4d:3a:7c:9f:80:38:89:2d: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:B6:6B:13:00:68:75:3A:EE:BB:86:AA:6B:04:1A:1C:86:EE:8A X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e3:c9:5c:7a:e3:59:2f:e8:52:a8:70:2b:5d:a2:19:5f:ed: 57:d7:06:ce:01:5c:2e:ee:47:f0:80:de:7b:8f:97:d4:44:3b: 4f:2c:e4:bd:92:ec:d8:a7:26:21:a1:a1:cc:e4:56:ae:44:a6: b7:28:77:cb:9b:e8:d2:ce:2b:0a:b4:93:f7:a4:dd:6f:1c:8f: 76:62:16:b9:f7:e6:82:dd:a9:7f:55:df:25:fa:27:c6:f8:4f: 22:4c:9c:60:75:20:54:f3:c7:c2:62:4b:44:a1:c2:95:b8:64: d2:b7:e1:33:7d:f1:93:3c:3f:82:c9:bd:3c:37:18:e1:21:60: c4:1e:52:ad:53:0a:a0:89:ed:30:ba:e0:46:94:19:e2:70:1d: 8d:fa:77:88:59:c9:e7:8b:29:97:a5:38:86:5b:0e:e5:6f:6b: 50:25:29:01:88:5a:da:10:85:33:26:71:8a:52:4d:09:de:06: 36:a9:82:19:79:6b:e0:46:85:4a:37:dd:f2:59:c4:01:50:a6: d0:23:76:8a:a1:f7:76:2f:f8:3c:37:3d:52:c9:64:9d:46:31: 84:5e:72:b7:b3:60:d8:53:33:3f:0b:50:5d:0c:28:21:29:1f: 40:4c:aa:62:5e:b0:2c:13:1d:ed:0a:25:59:50:d8:3d:fd:b8: a3:66:88:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUwODA5MDIyODE0WhcNMjUwODE2MDIyODE0WjAYMRYwFAYD VQQDEw02ODk2YjIzZi0yZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/xhTUCCUllaVaoRmL/QjN60cyptkRV0wd8fMBgjmVZvdcnEWqygFUzVuVxFS n6rohQx7gMu9ohGybI0BEq96ExTEET8Rpjx+gA3WPflXNh9piM2ov7OqIG5Y75M9 Go2FVBVEUtxFMSh0Dj4tNDfBPr+rxmI1BT7u+PbK6QNKYHi56wYXp7uC6M7Ex8wH G77FKxhGTe+FDjtPnRFLmdu5pbZS9pZgq6DcO4jvp+h3mKYzeyXh9BmOsyBnNoM1 RRBup9FXjqFDzw0rcP/Acizx828FKxK0AfVCeBaLfZK89ZsgTqYfNvkCtnerulJ9 m1NZGAMq+7lBTTp8n4A4iS21iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp1tmsT AGh1Ou67hqprBBochu6KMB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw48lceuNZL+hSqHArXaIZX+1X1wbOAVwu7kfwgN57j5fURDtPLOS9 kuzYpyYhoaHM5FauRKa3KHfLm+jSzisKtJP3pN1vHI92Yha59+aC3al/Vd8l+ifG +E8iTJxgdSBU88fCYktEocKVuGTSt+EzffGTPD+Cyb08NxjhIWDEHlKtUwqgie0w uuBGlBnicB2N+neIWcnniymXpTiGWw7lb2tQJSkBiFraEIUzJnGKUk0J3gY2qYIZ eWvgRoVKN93yWcQBUKbQI3aKofd2L/g8Nz1SyWSdRjGEXnK3s2DYUzM/C1BdDCgh KR9ATKpiXrAsEx3tCiVZUNg9/bijZoif -----END CERTIFICATE-----Generated at Sat Aug 9 20:48:08 2025 by rpki-client