$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: 64ivjxR/kpB653/dVWryq7KFLbbNPzY/oqn+Z9v/wcE= Subject key identifier: 43:0F:1F:3D:A1:8A:01:FF:56:DC:45:96:7D:FE:5B:7D:1B:0E:C6:2B Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01C7 Signing time: Mon 11 Aug 2025 03:01:55 +0000 Manifest this update: Mon 11 Aug 2025 03:01:54 +0000 Manifest next update: Mon 18 Aug 2025 03:01:54 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: x6BNAKuC/YoVeuk5fHBgo/yXB44jskyticPWMRxOIeQ=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Aug 11 03:01:54 2025 GMT Not After : Aug 18 03:01:54 2025 GMT Subject: CN=68995d22-5eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:1a:5a:7d:a2:bc:6a:8c:58:9e:7f:e3:44: e0:a0:bb:2d:c6:15:4e:85:b0:79:e0:73:7c:10:66: 6c:16:2c:13:40:c8:3e:53:e3:a1:ae:01:dc:43:2c: 05:40:a2:14:78:d9:80:42:02:8b:25:01:84:1c:52: df:51:eb:c4:fe:d3:0e:61:f2:bd:b3:53:10:da:25: e3:31:26:41:56:a2:d5:81:df:3f:af:72:72:5b:5d: 97:eb:cb:99:da:6b:91:59:97:2d:98:ea:26:14:0f: 3b:c0:4a:d2:47:aa:f8:4c:cf:b6:9e:59:09:d1:b5: d6:97:bf:95:bd:59:13:f5:99:9a:b7:ba:8c:6c:2e: 7f:62:8d:be:77:36:02:2a:4b:d5:52:ff:52:52:c1: 0c:3f:7d:ab:11:b4:09:62:94:1c:29:88:13:5a:0d: ab:fd:4b:a3:25:0c:53:9e:f8:17:f0:44:aa:f7:35: f9:19:29:66:22:95:80:7f:a3:5d:85:e0:bc:b5:5e: 44:ec:0e:42:a1:60:88:3e:fe:e6:3b:38:d3:d4:24: 6a:22:17:62:b7:9b:e8:7a:d3:b0:98:1d:7b:bf:26: db:95:b4:1a:1d:8a:61:fe:7d:b2:2b:c8:ad:aa:5a: 29:27:20:e1:94:b3:e2:6c:ca:94:e7:a8:48:e1:2d: 66:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0F:1F:3D:A1:8A:01:FF:56:DC:45:96:7D:FE:5B:7D:1B:0E:C6:2B X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:83:b3:12:58:92:95:0a:41:bd:dc:6d:ef:e1:b0:8b:ef:ce: 18:98:8a:7a:b3:9b:02:ca:37:aa:c7:7c:bd:b1:0d:df:b0:d3: 5f:62:4c:2e:d5:b1:98:56:97:3d:fe:c0:e5:a3:55:f7:5c:82: dd:2f:03:f1:3c:41:f2:17:a4:6f:c2:1d:00:a7:69:78:0c:8b: 5b:b7:42:6d:48:8d:4d:39:07:e2:09:14:7b:1c:cb:30:fd:d6: de:5c:cc:67:29:be:a4:71:62:ee:f3:d4:99:55:64:18:07:2d: 20:8b:1e:c1:09:bb:51:77:c3:97:ae:6b:74:e2:53:d2:16:3c: 04:d7:f3:59:87:b8:71:5f:83:2d:40:ef:c3:2c:a6:1f:1e:0f: ba:d4:ee:a5:6e:f5:d1:28:3d:83:16:1c:32:ff:26:f8:bb:de: d3:14:21:b4:7e:70:44:ab:45:e0:d0:1c:aa:d8:7a:d6:44:65: 26:e2:9b:bb:b8:af:e3:07:53:93:bc:c9:57:de:bb:4d:3e:18: d5:74:85:11:a2:cf:2d:b2:a7:2d:ae:1f:7e:c6:e8:e8:fd:d4: 26:4a:a0:7d:24:ad:24:0d:00:89:06:c7:41:8f:e9:e4:b6:e8: 6a:40:2c:83:c4:f6:49:6a:4c:7d:1b:a1:58:3a:80:76:8c:ba: 8b:9e:73:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUwODExMDMwMTU0WhcNMjUwODE4MDMwMTU0WjAYMRYwFAYD VQQDEw02ODk5NWQyMi01ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3saWn2ivGqMWJ5/40TgoLstxhVOhbB54HN8EGZsFiwTQMg+U+OhrgHcQywF QKIUeNmAQgKLJQGEHFLfUevE/tMOYfK9s1MQ2iXjMSZBVqLVgd8/r3JyW12X68uZ 2muRWZctmOomFA87wErSR6r4TM+2nlkJ0bXWl7+VvVkT9Zmat7qMbC5/Yo2+dzYC KkvVUv9SUsEMP32rEbQJYpQcKYgTWg2r/UujJQxTnvgX8ESq9zX5GSlmIpWAf6Nd heC8tV5E7A5CoWCIPv7mOzjT1CRqIhdit5voetOwmB17vybblbQaHYph/n2yK8it qlopJyDhlLPibMqU56hI4S1mMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMPHz2h igH/VtxFln3+W30bDsYrMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOg7MSWJKVCkG93G3v4bCL784YmIp6s5sCyjeqx3y9sQ3fsNNfYkwu 1bGYVpc9/sDlo1X3XILdLwPxPEHyF6Rvwh0Ap2l4DItbt0JtSI1NOQfiCRR7HMsw /dbeXMxnKb6kcWLu89SZVWQYBy0gix7BCbtRd8OXrmt04lPSFjwE1/NZh7hxX4Mt QO/DLKYfHg+61O6lbvXRKD2DFhwy/yb4u97TFCG0fnBEq0Xg0Byq2HrWRGUm4pu7 uK/jB1OTvMlX3rtNPhjVdIURos8tsqctrh9+xujo/dQmSqB9JK0kDQCJBsdBj+nk tuhqQCyDxPZJakx9G6FYOoB2jLqLnnOp -----END CERTIFICATE-----Generated at Mon Aug 11 08:58:56 2025 by rpki-client