$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: U6uvs15ay8tdcRn+gUXvHym62uSE05AvlXxN571OOd4= Subject key identifier: 02:61:3B:80:4D:7C:CA:6F:6B:A3:35:96:E4:2B:67:8B:B8:5E:89:BE Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 04A8 Signing time: Sat 09 Aug 2025 00:27:44 +0000 Manifest this update: Sat 09 Aug 2025 00:27:44 +0000 Manifest next update: Sat 16 Aug 2025 00:27:44 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: gM4F6r6fRT/OAnkXdCA2duV3aVumGWgNVIoliXmMV2Y=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Aug 9 00:27:44 2025 GMT Not After : Aug 16 00:27:44 2025 GMT Subject: CN=68969600-eac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:b8:b8:4f:bf:eb:4b:2e:58:72:a6:81:02: 58:01:b2:a0:84:30:a2:5f:f5:92:51:af:5e:13:5a: a8:a8:31:9c:2f:b5:4a:3c:93:4d:f7:98:77:9d:c0: 60:5e:58:ac:86:59:f3:f2:c6:00:3b:b3:b9:57:e4: 04:36:1e:18:f1:bf:98:d8:4c:ae:dc:e2:6b:2c:07: 89:63:48:ef:28:71:ca:e6:35:ce:77:a3:d8:0c:23: 4a:5a:56:ad:e7:73:77:c3:23:de:e3:e0:27:b6:60: 48:87:16:06:fb:5e:05:d5:fd:5c:a4:f1:2b:da:7f: 31:95:29:d3:30:a3:13:2b:21:53:c7:93:f8:07:fe: 96:9c:c4:cb:11:f5:d0:6b:4f:e5:72:ba:45:3b:92: 01:99:78:10:48:98:ab:00:e2:53:00:3e:68:c8:e8: 46:59:7c:33:98:77:89:1e:9e:eb:de:e1:ab:6f:08: db:8c:38:6b:54:5c:d4:33:95:26:8b:f3:47:f5:59: 0f:fc:21:0b:7c:89:6e:70:17:c7:47:b4:d3:77:f7: c9:75:ed:e5:c4:cb:8e:b0:ec:a0:f1:e8:8e:2f:b6: 23:1f:ba:6c:0b:69:b2:6a:f7:ed:db:89:87:eb:6c: 14:17:51:09:a4:fc:2e:17:ba:ca:d8:b2:c1:53:4a: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:61:3B:80:4D:7C:CA:6F:6B:A3:35:96:E4:2B:67:8B:B8:5E:89:BE X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:90:0b:0f:df:17:b1:e2:5e:77:71:77:76:74:44:84:62:ab: e3:64:b9:b0:c9:d3:5e:1f:7e:37:fb:7e:94:c3:d1:40:a0:ad: 79:48:f8:0c:e5:f6:2f:33:af:11:42:99:58:a3:2e:8b:8f:7b: be:e6:48:27:cb:c7:ab:f1:e0:ad:8c:3d:4b:6f:6b:0a:fa:80: d1:d7:7b:0a:d6:35:e5:6c:c9:6a:b1:e1:1a:9b:e8:10:26:20: ba:6a:26:77:b7:13:2e:bd:20:8e:0d:d9:74:6a:28:7b:e0:52: 52:3d:2d:71:d5:d6:a9:0e:7a:df:ae:69:47:22:a7:7f:f7:63: 45:f6:3c:d1:cd:36:c1:b6:84:96:cd:00:d5:d8:7f:fb:9b:33: 5b:a0:76:16:b7:1a:05:9b:89:e8:06:eb:40:a9:d2:95:91:79: 42:c8:d2:62:3b:fd:84:e4:5a:9c:a1:c2:a1:2a:ce:0f:df:1b: 12:76:56:eb:bf:c5:aa:9e:3c:e6:2e:a7:70:26:76:10:b4:45: 01:4c:db:1f:ce:0a:50:99:a7:d6:0f:71:76:78:f3:92:17:3a: 47:95:50:4d:aa:ff:11:95:1c:5d:74:e8:7d:98:a8:01:e7:a5: 08:c3:91:80:e4:0c:63:97:43:17:4c:4b:3d:ce:5d:6d:20:1e: 07:96:84:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUwODA5MDAyNzQ0WhcNMjUwODE2MDAyNzQ0WjAYMRYwFAYD VQQDEw02ODk2OTYwMC1lYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80G4uE+/60suWHKmgQJYAbKghDCiX/WSUa9eE1qoqDGcL7VKPJNN95h3ncBg Xlishlnz8sYAO7O5V+QENh4Y8b+Y2Eyu3OJrLAeJY0jvKHHK5jXOd6PYDCNKWlat 53N3wyPe4+AntmBIhxYG+14F1f1cpPEr2n8xlSnTMKMTKyFTx5P4B/6WnMTLEfXQ a0/lcrpFO5IBmXgQSJirAOJTAD5oyOhGWXwzmHeJHp7r3uGrbwjbjDhrVFzUM5Um i/NH9VkP/CELfIlucBfHR7TTd/fJde3lxMuOsOyg8eiOL7YjH7psC2myavft24mH 62wUF1EJpPwuF7rK2LLBU0qaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJhO4BN fMpva6M1luQrZ4u4Xom+MB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgkAsP3xex4l53cXd2dESEYqvjZLmwydNeH343+36Uw9FAoK15SPgM 5fYvM68RQplYoy6Lj3u+5kgny8er8eCtjD1Lb2sK+oDR13sK1jXlbMlqseEam+gQ JiC6aiZ3txMuvSCODdl0aih74FJSPS1x1dapDnrfrmlHIqd/92NF9jzRzTbBtoSW zQDV2H/7mzNboHYWtxoFm4noButAqdKVkXlCyNJiO/2E5FqcocKhKs4P3xsSdlbr v8WqnjzmLqdwJnYQtEUBTNsfzgpQmafWD3F2ePOSFzpHlVBNqv8RlRxddOh9mKgB 56UIw5GA5Axjl0MXTEs9zl1tIB4HloRT -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:50 2025 by rpki-client