$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: Blq5Cg8VL5XOYRzQm8Yf7S4rXGVmP2vV3LZ2YL4dmK0= Subject key identifier: 46:41:93:8D:3D:66:9F:11:EB:51:E5:8C:37:D3:9A:2C:21:77:73:61 Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: B5 Signing time: Mon 11 Aug 2025 06:12:06 +0000 Manifest this update: Mon 11 Aug 2025 06:12:06 +0000 Manifest next update: Mon 18 Aug 2025 06:12:06 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: OyM/EIs91r5lTOltb1KoDEyUL0HJeok6czaHmnbbmAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Aug 11 06:12:06 2025 GMT Not After : Aug 18 06:12:06 2025 GMT Subject: CN=689989b6-24a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:ee:73:df:6d:97:e5:30:c6:d3:03:a3:a5: 53:35:ec:26:dd:ac:50:5c:c0:9d:20:f5:31:7b:4a: 96:32:e7:01:30:a4:9f:71:20:f9:65:3e:90:d2:65: 85:e8:11:16:e1:9f:e8:a3:97:c6:12:df:b2:7f:a5: 4e:62:a2:a4:f2:9b:ed:bb:2c:9a:c3:10:ba:d4:a0: a7:97:5c:b8:bc:51:f8:02:e5:8b:2f:c5:b2:45:55: d0:0c:b8:5a:39:bf:46:b4:ec:c7:4a:8c:d2:60:6a: cc:a5:39:a8:ec:eb:e1:55:bc:b6:1f:d6:cc:6a:68: 0c:5b:6d:19:15:a0:fe:0c:0c:03:3c:50:5f:e0:e1: 86:cc:d2:cf:4f:1a:48:56:44:5f:96:ec:76:6b:c1: 51:c9:8d:f1:15:fd:de:a9:99:a4:ee:d6:ec:16:6e: b5:c6:03:d0:78:6e:c6:5f:a1:dd:0f:ad:a0:82:a4: 3f:49:d3:0f:b1:5e:f1:da:e2:16:5e:44:10:80:bf: 2f:d8:d4:c6:47:2c:5c:c5:c9:bd:cd:97:01:b3:14: f0:6a:df:5f:9e:36:93:ac:10:47:48:89:e7:e7:f9: 51:6b:0a:5c:86:33:cc:ee:d2:b4:0b:1f:67:f2:5f: 2f:a7:47:b2:e2:45:0b:ba:7e:c2:e7:64:81:55:75: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:41:93:8D:3D:66:9F:11:EB:51:E5:8C:37:D3:9A:2C:21:77:73:61 X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2e:0f:be:dc:9b:22:f5:fa:bc:b1:ce:97:7f:ad:08:cf:31: bc:1c:25:a4:6a:9a:55:36:13:da:a5:18:8d:3e:77:84:36:1e: 16:91:aa:e1:aa:91:3b:78:19:e8:23:60:7d:b6:1d:a3:60:b6: e4:da:4a:76:86:e1:50:0a:95:1e:9a:63:02:64:e2:63:dd:2e: ae:e2:e8:e9:a0:74:2c:59:dd:40:48:44:3e:1e:02:b9:51:62: 01:0c:cc:82:9c:9f:4b:e3:17:3d:75:aa:a6:34:eb:fa:a6:98: 69:90:fe:76:ac:ce:5b:85:67:6c:cf:66:87:6d:04:3e:34:ca: 6c:df:f5:da:73:06:f2:83:a0:6e:90:20:57:b1:92:33:97:05: 68:cd:33:ea:60:f8:53:ab:ce:1f:20:ce:79:d2:f1:ca:45:a6: 7f:4b:c4:cf:ac:36:b8:c6:1d:dd:02:7d:40:4e:71:9d:03:a1: d2:e7:2c:e0:de:80:94:a5:50:ad:3a:52:70:53:e6:3a:23:7a: d8:42:c4:96:2e:44:fd:0f:8b:f1:1d:cd:a0:a4:23:db:6b:a0: 83:97:bb:27:84:e3:60:79:8d:12:f0:f9:51:90:da:c0:d2:5e: 5f:1f:38:9f:e2:c3:ac:b8:ca:da:dc:47:bd:7d:0f:77:83:93: 8b:c3:69:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUwODExMDYxMjA2WhcNMjUwODE4MDYxMjA2WjAYMRYwFAYD VQQDEw02ODk5ODliNi0yNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAPuc99tl+UwxtMDo6VTNewm3axQXMCdIPUxe0qWMucBMKSfcSD5ZT6Q0mWF 6BEW4Z/oo5fGEt+yf6VOYqKk8pvtuyyawxC61KCnl1y4vFH4AuWLL8WyRVXQDLha Ob9GtOzHSozSYGrMpTmo7OvhVby2H9bMamgMW20ZFaD+DAwDPFBf4OGGzNLPTxpI VkRflux2a8FRyY3xFf3eqZmk7tbsFm61xgPQeG7GX6HdD62ggqQ/SdMPsV7x2uIW XkQQgL8v2NTGRyxcxcm9zZcBsxTwat9fnjaTrBBHSInn5/lRawpchjPM7tK0Cx9n 8l8vp0ey4kULun7C52SBVXUl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZBk409 Zp8R61HljDfTmiwhd3NhMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAILg++3Jsi9fq8sc6Xf60IzzG8HCWkappVNhPapRiNPneENh4Wkarh qpE7eBnoI2B9th2jYLbk2kp2huFQCpUemmMCZOJj3S6u4ujpoHQsWd1ASEQ+HgK5 UWIBDMyCnJ9L4xc9daqmNOv6pphpkP52rM5bhWdsz2aHbQQ+NMps3/Xacwbyg6Bu kCBXsZIzlwVozTPqYPhTq84fIM550vHKRaZ/S8TPrDa4xh3dAn1ATnGdA6HS5yzg 3oCUpVCtOlJwU+Y6I3rYQsSWLkT9D4vxHc2gpCPba6CDl7snhONgeY0S8PlRkNrA 0l5fHzif4sOsuMra3Ee9fQ93g5OLw2lO -----END CERTIFICATE-----Generated at Mon Aug 11 07:23:34 2025 by rpki-client