$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: aYutX8FeW2pmUI8a0n0kuEG4THSkiQgj+v62fB9uFcw= Subject key identifier: 40:67:D2:B7:7E:A7:1D:F1:E1:F3:BE:A3:55:32:B1:32:BE:A6:BB:8D Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 1147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0CF5 Signing time: Fri 08 Aug 2025 20:55:17 +0000 Manifest this update: Fri 08 Aug 2025 20:55:16 +0000 Manifest next update: Fri 15 Aug 2025 20:55:16 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: sAaUHpze7+fkbbk1Ga3OV+dSoABu1zpfD+2iN+Ocetk=) 2: 3A371ADC6EBE11F085F17D3AC4F9AE02.roa (hash: lBpcvgH1EVPmL9AGa9SmGGk5uCpEQgFCvirH/9iS5nU=) 3: A173B894112711F0845DF16FC4F9AE02.roa (hash: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U=) 4: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4nldf+8SF0UXyvc5ZFdPynmdfFfU94WXlTR6JoprTg=) 5: 396F61FE6EBE11F085F17D3AC4F9AE02.roa (hash: CE23sNAGQ72kvCJUhMKCCjdRdULm9pFJDWl36wscsUk=) 6: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: NAdbZTtzlwtewbjTfuMORoVz4S6lpr350iCxdpAhbLc=) 7: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: LcfL6WlPDAVnfVe8FVQ0PTDxHLr1cQFF1C/EotpyU7g=) 8: FA9BC95A548711EF89E24A18C4F9AE02.roa (hash: Lh2x2UhtnOihYNKj9Kn76/xvcicNSKGJ9zs/lJzF/lU=) 9: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4423 (0x1147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Aug 8 20:55:16 2025 GMT Not After : Aug 15 20:55:16 2025 GMT Subject: CN=68966434-5c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:74:e2:95:df:7c:d0:ae:c3:7f:fe:84:72: 14:a6:9b:90:8e:23:7a:36:d0:97:51:43:32:66:c6: 92:bf:05:b4:d9:e8:0f:e2:00:f9:1a:51:9c:b2:f7: e2:e3:af:79:68:1a:51:f3:7e:70:84:8c:83:fb:bf: 0b:e2:0a:62:20:5c:ca:e4:de:1c:8f:4f:18:a2:2b: 8f:73:a2:d5:09:33:8b:36:c4:55:7d:a5:6a:d1:5b: 14:2d:b5:d5:1f:0e:2f:0c:23:9b:da:5a:fb:c7:29: 88:56:9b:f6:59:8d:81:ae:82:07:3a:26:08:bb:ef: 4b:d1:3a:32:af:37:03:82:63:8e:fe:e2:29:4d:17: 3d:d8:d7:55:3e:45:ee:79:64:81:42:7b:fa:21:7e: 72:3a:f5:39:31:cf:a4:2c:14:24:ad:6b:10:94:b0: 11:b5:fe:1d:78:d7:25:9b:2f:b0:f4:45:ac:01:11: c0:0e:c2:9c:1d:85:63:94:2b:f9:c8:05:f4:f4:b0: 4c:fe:8a:71:9d:90:15:ae:78:3f:62:c7:98:34:c3: d3:e3:32:22:28:8e:dc:69:dd:75:b6:a9:74:f1:a3: ac:b9:f9:fc:6e:68:55:64:12:b5:b6:2d:b9:57:f7: 41:67:8f:b5:70:55:8c:96:87:90:1c:bb:a3:80:6d: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:D2:B7:7E:A7:1D:F1:E1:F3:BE:A3:55:32:B1:32:BE:A6:BB:8D X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8d:91:77:ad:4f:8e:c9:76:04:cf:b4:eb:0c:d7:7f:e6:9e: 99:b8:6b:cf:0d:95:98:69:7f:af:26:57:4f:60:9f:1f:25:75: 99:e3:e0:21:09:fe:71:74:bd:ce:73:5a:43:15:b5:4e:5d:ed: d8:fd:d7:be:28:0a:57:34:7b:8d:21:d4:51:50:c0:c5:f4:62: f8:55:65:38:b6:5c:d5:49:82:0b:5c:ac:44:93:7b:30:5a:79: 4d:6d:b2:42:bd:3b:27:81:ca:99:a1:e4:e2:7b:74:b7:cf:a2: 91:bb:26:dc:36:3d:83:10:ae:38:74:15:61:b1:31:d3:49:a1: f1:e6:ed:ad:3b:7e:a7:af:ee:54:23:dc:7a:cb:ea:31:80:77: 63:dd:b2:c7:92:87:49:89:c9:77:32:36:be:e5:d3:80:0d:75: 0f:02:d6:51:15:68:1f:62:6e:b0:75:79:ac:72:fe:e9:e3:91: 55:8d:a4:9a:12:a9:3e:30:8f:9e:77:fd:4b:fd:1d:35:04:91: 07:0e:95:ec:3f:75:e1:53:bf:15:e0:85:4e:c9:8b:b4:e4:59: 09:04:e5:3a:f6:a9:bd:bd:f1:41:14:17:00:38:96:21:88:9c: 30:11:3c:b9:53:8f:21:8d:e6:64:10:69:3f:25:0c:16:ee:34: d9:d6:a6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwODA4MjA1NTE2WhcNMjUwODE1MjA1NTE2WjAYMRYwFAYD VQQDEw02ODk2NjQzNC01YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjx04pXffNCuw3/+hHIUppuQjiN6NtCXUUMyZsaSvwW02egP4gD5GlGcsvfi 4695aBpR835whIyD+78L4gpiIFzK5N4cj08YoiuPc6LVCTOLNsRVfaVq0VsULbXV Hw4vDCOb2lr7xymIVpv2WY2BroIHOiYIu+9L0ToyrzcDgmOO/uIpTRc92NdVPkXu eWSBQnv6IX5yOvU5Mc+kLBQkrWsQlLARtf4deNclmy+w9EWsARHADsKcHYVjlCv5 yAX09LBM/opxnZAVrng/YseYNMPT4zIiKI7cad11tql08aOsufn8bmhVZBK1ti25 V/dBZ4+1cFWMloeQHLujgG0qgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBn0rd+ px3x4fO+o1UysTK+pruNMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcjZF3rU+OyXYEz7TrDNd/5p6ZuGvPDZWYaX+vJldPYJ8fJXWZ4+Ah Cf5xdL3Oc1pDFbVOXe3Y/de+KApXNHuNIdRRUMDF9GL4VWU4tlzVSYILXKxEk3sw WnlNbbJCvTsngcqZoeTie3S3z6KRuybcNj2DEK44dBVhsTHTSaHx5u2tO36nr+5U I9x6y+oxgHdj3bLHkodJicl3Mja+5dOADXUPAtZRFWgfYm6wdXmscv7p45FVjaSa Eqk+MI+ed/1L/R01BJEHDpXsP3XhU78V4IVOyYu05FkJBOU69qm9vfFBFBcAOJYh iJwwETy5U48hjeZkEGk/JQwW7jTZ1qZu -----END CERTIFICATE-----Generated at Sat Aug 9 01:13:00 2025 by rpki-client