$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: xgEhJd6mRfMv/kHtdQ6nm7Lhi9Niqgto4YBteZBu6Xs= Subject key identifier: AB:55:6F:FA:9E:E6:CE:E4:52:3B:1E:6A:F2:81:91:3B:C4:95:C7:35 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0CFB Signing time: Sat 14 Jun 2025 17:59:57 +0000 Manifest this update: Sat 14 Jun 2025 17:59:56 +0000 Manifest next update: Sat 21 Jun 2025 17:59:56 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: NhZ7MFWaP7UvutMB3zWKdDpBP+Ky34kHwqhWjkvuYoo=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Jun 14 17:59:56 2025 GMT Not After : Jun 21 17:59:56 2025 GMT Subject: CN=684db89c-75dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:2d:62:73:33:ed:f8:d7:2c:b1:a7:5e:dc: d1:5d:33:e1:ef:e5:cb:53:8c:da:17:7b:a9:4f:b2: fe:8d:89:55:85:f9:ca:ae:88:06:d5:b4:21:8e:64: 03:96:1f:0c:c7:7c:62:4d:2d:7a:05:89:84:26:8b: aa:96:e9:4a:d0:db:d3:12:10:e5:ce:96:c8:7e:87: b1:18:ff:28:f4:00:90:e0:9c:b9:de:42:d1:f7:f3: 84:ea:59:fb:3b:e7:31:51:ea:17:5d:78:97:4f:34: 26:41:94:c6:ce:a9:a5:c3:fa:12:7b:55:b1:3e:73: a7:ca:fd:70:fb:57:17:2c:2c:12:eb:d2:68:3b:83: ec:29:45:03:ac:dc:65:a3:f9:2f:9b:c6:da:ed:be: 30:a8:b2:25:5a:57:7b:7b:0c:1f:15:cf:40:65:0a: fe:f0:97:d8:83:8b:2c:a0:72:c9:f6:a6:48:63:b1: 5d:7a:7a:fe:e6:87:fa:a8:39:4c:a5:80:f2:7f:92: a1:74:0c:6c:f5:d2:47:95:f0:20:b4:d6:89:2b:b9: ce:27:16:93:4d:c7:c6:bb:df:3d:cf:1f:b5:52:10: 2d:77:89:1d:13:64:e6:a1:e0:a7:c9:b4:c2:db:83: fb:ca:b1:8e:5b:c0:d1:db:d8:bf:27:a6:8c:70:d4: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:6F:FA:9E:E6:CE:E4:52:3B:1E:6A:F2:81:91:3B:C4:95:C7:35 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:ba:c2:ca:3d:42:9c:22:27:f6:ec:11:01:e2:ed:de:81: 49:15:39:e5:95:f8:0a:13:91:35:bc:c3:d8:43:4f:f7:5b:a7: 39:a5:88:69:78:01:89:93:32:ba:ff:f3:4b:fa:5e:3e:d8:3a: f1:7e:13:00:fd:ef:61:7e:87:e3:d1:27:f3:a1:52:04:37:ee: 5e:45:9c:0a:43:74:c8:0c:1a:c5:01:6d:6f:32:0f:10:4d:41: 13:41:5b:aa:87:2a:2b:23:f2:ef:48:47:4b:7a:e3:92:87:88: de:12:41:1d:6d:64:07:54:d7:fc:0d:ac:c7:c8:4d:24:eb:45: 03:d4:a5:98:23:f7:35:70:02:21:8c:6e:9f:0e:98:1f:c9:a0: 72:6a:8c:ff:b9:26:c0:7e:24:a9:7d:6b:c2:12:54:13:4e:6b: 27:7a:bd:07:5e:0d:7f:3e:09:90:23:34:43:30:7a:c5:9e:6b: a1:8d:ec:0d:4b:9e:87:39:7e:84:4f:08:6c:e9:d1:73:12:94: 14:60:01:1c:15:eb:82:46:7e:00:13:ee:03:58:1e:b6:9e:7f: 98:35:bb:0e:ac:e9:4d:08:b8:21:37:10:fe:b9:a0:92:a6:88: 40:b2:06:84:0b:c6:46:97:0b:8d:d5:fc:b3:0f:f1:ce:0d:f8: 5c:e7:d0:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwNjE0MTc1OTU2WhcNMjUwNjIxMTc1OTU2WjAYMRYwFAYD VQQDEw02ODRkYjg5Yy03NWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziEtYnMz7fjXLLGnXtzRXTPh7+XLU4zaF3upT7L+jYlVhfnKrogG1bQhjmQD lh8Mx3xiTS16BYmEJouqlulK0NvTEhDlzpbIfoexGP8o9ACQ4Jy53kLR9/OE6ln7 O+cxUeoXXXiXTzQmQZTGzqmlw/oSe1WxPnOnyv1w+1cXLCwS69JoO4PsKUUDrNxl o/kvm8ba7b4wqLIlWld7ewwfFc9AZQr+8JfYg4ssoHLJ9qZIY7Fdenr+5of6qDlM pYDyf5KhdAxs9dJHlfAgtNaJK7nOJxaTTcfGu989zx+1UhAtd4kdE2TmoeCnybTC 24P7yrGOW8DR29i/J6aMcNSK8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtVb/qe 5s7kUjseavKBkTvElcc1MB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqLrCyj1CnCIn9uwRAeLt3oFJFTnllfgKE5E1vMPYQ0/3W6c5pYhp eAGJkzK6//NL+l4+2DrxfhMA/e9hfofj0SfzoVIEN+5eRZwKQ3TIDBrFAW1vMg8Q TUETQVuqhyorI/LvSEdLeuOSh4jeEkEdbWQHVNf8DazHyE0k60UD1KWYI/c1cAIh jG6fDpgfyaByaoz/uSbAfiSpfWvCElQTTmsner0HXg1/PgmQIzRDMHrFnmuhjewN S56HOX6ETwhs6dFzEpQUYAEcFeuCRn4AE+4DWB62nn+YNbsOrOlNCLghNxD+uaCS pohAsgaEC8ZGlwuN1fyzD/HODfhc59DN -----END CERTIFICATE-----Generated at Mon Jun 16 14:34:23 2025 by rpki-client