$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: JGy9TrSbQhhW+P0RdCGCuit63L0rl+cWGvWybSQ1GSQ= Subject key identifier: A7:D7:89:C4:B8:35:FA:58:FF:E3:16:68:E1:FD:F8:07:75:8C:D9:28 Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01AD Signing time: Sat 21 Jun 2025 02:27:35 +0000 Manifest this update: Sat 21 Jun 2025 02:27:34 +0000 Manifest next update: Sat 28 Jun 2025 02:27:34 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: ZjsNN99NxCf4GsUemNXPlzJMcxZnY9/Nho4JKFwJULY=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Jun 21 02:27:34 2025 GMT Not After : Jun 28 02:27:34 2025 GMT Subject: CN=68561897-cebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:1c:46:fe:aa:49:e6:c2:db:54:56:81:21: 7b:ae:8e:cd:b2:15:de:43:0e:48:60:ef:29:ee:50: f5:55:a4:68:d6:3a:cb:02:32:16:de:90:6d:db:51: 57:4e:b7:2f:68:f5:24:c1:3a:c0:e5:9a:cb:3c:db: ea:3f:22:e6:ba:8b:ee:22:a7:9c:1e:3f:cc:04:85: a5:56:65:2b:58:de:1b:8d:c4:10:13:e3:6c:91:62: c3:80:85:c9:22:5b:af:34:33:bc:99:f2:ad:b8:8d: 9f:c4:9e:77:bf:cb:ef:7f:b5:c2:9f:fb:0e:7a:e9: b3:0b:ab:ab:06:1f:23:68:b4:c5:86:51:64:fa:6c: 78:4a:52:55:56:3a:c6:c6:dd:b2:54:e4:5d:03:83: f3:36:ca:ce:c8:43:4d:b1:ae:37:9d:05:a2:b4:90: d3:ac:49:5a:99:fd:dc:9a:72:9c:de:f1:19:c3:8d: ad:e0:21:e1:a5:6a:f3:0e:70:6a:2f:c0:9d:c7:6e: 09:4c:c8:1e:4e:a3:fc:d2:b5:aa:b3:3c:9b:d3:18: 41:eb:ab:e7:15:23:e4:63:a2:32:23:1e:75:74:50: 98:44:ac:18:82:29:10:66:b4:fe:e8:99:e3:d7:74: 18:a6:1e:96:ec:cd:92:cb:f6:23:65:84:06:7a:a7: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D7:89:C4:B8:35:FA:58:FF:E3:16:68:E1:FD:F8:07:75:8C:D9:28 X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9b:90:2d:d6:89:5b:7b:b5:dc:3c:7a:e1:c3:5f:47:07:4c: 36:15:b9:ba:38:8f:0f:8a:3a:c8:22:d1:ab:c6:63:f4:21:3f: f1:db:0d:56:e4:f7:68:73:75:4c:e8:b9:c7:11:dd:f2:51:15: ef:29:ec:2d:7f:a7:98:c0:67:d3:65:42:ed:60:d5:a9:77:88: 65:38:a9:88:30:65:ad:d6:a5:0b:a2:36:4d:81:c1:27:4e:9c: 61:d5:a5:1b:34:cb:23:42:84:b6:d6:71:e5:ea:42:69:06:f3: 98:2a:c3:96:3a:d3:18:51:85:23:0d:74:25:3a:c4:7e:af:d0: a8:5d:77:98:1d:dd:09:c0:bf:e8:5f:76:1f:b5:34:76:53:d2: a3:16:97:77:4a:be:2b:5b:c9:68:bf:52:41:8b:6e:6d:c7:5f: 38:a9:6a:19:85:9a:24:e4:46:fd:1d:05:1d:a5:53:c5:76:78: ee:e6:2f:f4:3c:d1:fb:bc:6d:39:07:70:59:ec:5b:5d:b3:67: af:b3:af:8e:d8:8e:3c:c9:94:be:08:77:ab:44:b9:84:2a:ed: d6:81:ce:0a:34:95:a9:61:99:14:b9:60:0d:d9:8c:29:e1:c9: 9f:90:0a:1a:59:b9:f7:8c:c8:28:13:5c:1e:d7:a1:44:56:9b: 18:b9:02:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUwNjIxMDIyNzM0WhcNMjUwNjI4MDIyNzM0WjAYMRYwFAYD VQQDEw02ODU2MTg5Ny1jZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I8cRv6qSebC21RWgSF7ro7NshXeQw5IYO8p7lD1VaRo1jrLAjIW3pBt21FX TrcvaPUkwTrA5ZrLPNvqPyLmuovuIqecHj/MBIWlVmUrWN4bjcQQE+NskWLDgIXJ IluvNDO8mfKtuI2fxJ53v8vvf7XCn/sOeumzC6urBh8jaLTFhlFk+mx4SlJVVjrG xt2yVORdA4PzNsrOyENNsa43nQWitJDTrElamf3cmnKc3vEZw42t4CHhpWrzDnBq L8Cdx24JTMgeTqP80rWqszyb0xhB66vnFSPkY6IyIx51dFCYRKwYgikQZrT+6Jnj 13QYph6W7M2Sy/YjZYQGeqdKCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfXicS4 NfpY/+MWaOH9+Ad1jNkoMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOm5At1olbe7XcPHrhw19HB0w2Fbm6OI8PijrIItGrxmP0IT/x2w1W 5Pdoc3VM6LnHEd3yURXvKewtf6eYwGfTZULtYNWpd4hlOKmIMGWt1qULojZNgcEn Tpxh1aUbNMsjQoS21nHl6kJpBvOYKsOWOtMYUYUjDXQlOsR+r9CoXXeYHd0JwL/o X3YftTR2U9KjFpd3Sr4rW8lov1JBi25tx184qWoZhZok5Eb9HQUdpVPFdnju5i/0 PNH7vG05B3BZ7Ftds2evs6+O2I48yZS+CHerRLmEKu3Wgc4KNJWpYZkUuWAN2Ywp 4cmfkAoaWbn3jMgoE1we16FEVpsYuQKj -----END CERTIFICATE-----Generated at Sat Jun 21 10:28:11 2025 by rpki-client