$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json) Hash identifier: euGIuPO7gLqPQWa6S074K1YwmfhQd4Vqi483wJ1Kb4I= Subject key identifier: E1:84:AE:57:78:4C:45:33:7E:A1:90:49:F4:5F:63:6D:F4:18:48:3E Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft Manifest number: DD Signing time: Sat 23 Aug 2025 05:40:00 +0000 Manifest this update: Sat 23 Aug 2025 05:40:00 +0000 Manifest next update: Sat 30 Aug 2025 05:40:00 +0000 Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: wVrZSZ9P3fRE2qkhZ43nFpeID8tMt/Z3f5mNaHR5dtg=) 2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: jZ8rK9Cjwbx5cGtSyivoYRd59H87vJYDWLCVXZK0EWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Validity Not Before: Aug 23 05:40:00 2025 GMT Not After : Aug 30 05:40:00 2025 GMT Subject: CN=68a95430-08f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:5a:bc:59:ea:b4:7a:10:67:37:1b:d9:74: ff:2b:88:b8:0d:fa:fd:6e:e9:77:f4:d0:2d:ce:6d: 12:c6:e0:c5:51:11:da:6b:ed:d1:90:44:ac:7c:31: 1f:2b:df:14:27:0a:64:28:45:7a:73:79:72:62:a2: 2e:f9:ea:92:db:74:2f:3f:11:27:be:2b:a6:1a:a0: a4:d6:c6:44:d7:ca:a3:c7:8f:05:df:db:9b:66:63: 09:7c:c6:d3:45:c9:e1:36:8d:3f:0d:4c:53:fe:c2: b6:ef:aa:34:61:29:28:02:32:c8:55:df:66:4e:09: 43:38:e7:30:16:ee:28:f5:7b:29:ac:be:89:c8:a0: 30:38:ea:b3:8b:5a:1c:5a:40:0c:fe:55:ad:f6:5e: e0:a7:7c:9d:2f:be:52:40:80:63:4e:73:16:9b:a0: 51:94:86:b1:15:ad:59:2a:58:8a:3c:a2:ed:bb:ef: 79:46:6a:16:04:e4:9a:b6:6d:33:86:ea:12:ee:42: df:bd:9e:c9:c0:b7:d8:a2:e6:10:cb:0e:2e:d6:08: ca:be:69:8b:4f:94:bd:d5:5d:a8:1d:aa:b8:ed:8e: 1a:1c:e2:e7:14:de:01:9c:dd:5a:b8:a9:e2:18:ca: c0:48:03:24:95:8e:7e:fc:b5:b1:2b:c1:55:45:5a: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:84:AE:57:78:4C:45:33:7E:A1:90:49:F4:5F:63:6D:F4:18:48:3E X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:5c:50:b3:25:a1:01:01:b3:48:13:bd:a2:f7:f2:7b:f6:00: a2:67:ae:54:67:17:a7:51:f2:6b:cf:01:f3:df:1c:60:70:fe: f0:3a:9a:29:79:9b:e9:8c:2c:ef:11:95:5c:cd:7f:b0:ed:37: a8:8f:10:cf:fe:4a:38:6c:ab:0c:0e:a9:fa:3e:42:d4:75:68: 87:02:e3:58:3e:6c:65:6c:b0:e4:00:da:c7:c6:05:5d:e9:04: 6b:9f:85:bf:36:04:ed:94:9d:08:eb:ac:37:20:07:f9:34:7e: be:0f:24:42:83:4d:04:df:93:ed:88:50:2e:c8:2a:53:c9:a0: 93:b5:9f:f2:93:cf:cb:f9:09:1c:0c:79:d6:1a:e5:4b:11:25: 0d:f5:e8:bf:86:0a:ae:a3:fc:cd:6d:fd:fa:6b:ac:81:2d:db: c3:26:43:aa:0e:6f:c8:46:03:a1:5a:d9:f1:ea:34:fc:8f:3f: 9d:db:1b:64:ef:3d:a4:bd:6a:c6:2d:18:8f:1c:37:98:52:7a: cc:5f:95:79:42:67:99:d0:e0:a0:46:b8:32:23:07:9f:d8:dc: 39:06:42:df:6e:69:01:ef:1d:33:d0:a0:7c:5d:31:4f:3d:05: 0f:7b:04:9e:90:85:df:b1:c3:aa:30:e0:9f:52:70:f2:39:5e: fe:21:91:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjUwODIzMDU0MDAwWhcNMjUwODMwMDU0MDAwWjAYMRYwFAYD VQQDEw02OGE5NTQzMC0wOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl1avFnqtHoQZzcb2XT/K4i4Dfr9bul39NAtzm0SxuDFURHaa+3RkESsfDEf K98UJwpkKEV6c3lyYqIu+eqS23QvPxEnviumGqCk1sZE18qjx48F39ubZmMJfMbT RcnhNo0/DUxT/sK276o0YSkoAjLIVd9mTglDOOcwFu4o9XsprL6JyKAwOOqzi1oc WkAM/lWt9l7gp3ydL75SQIBjTnMWm6BRlIaxFa1ZKliKPKLtu+95RmoWBOSatm0z huoS7kLfvZ7JwLfYouYQyw4u1gjKvmmLT5S91V2oHaq47Y4aHOLnFN4BnN1auKni GMrASAMklY5+/LWxK8FVRVrs2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGErld4 TEUzfqGQSfRfY230GEg+MB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlXFCzJaEBAbNIE72i9/J79gCiZ65UZxenUfJrzwHz3xxgcP7wOpop eZvpjCzvEZVczX+w7TeojxDP/ko4bKsMDqn6PkLUdWiHAuNYPmxlbLDkANrHxgVd 6QRrn4W/NgTtlJ0I66w3IAf5NH6+DyRCg00E35PtiFAuyCpTyaCTtZ/yk8/L+Qkc DHnWGuVLESUN9ei/hgquo/zNbf36a6yBLdvDJkOqDm/IRgOhWtnx6jT8jz+d2xtk 7z2kvWrGLRiPHDeYUnrMX5V5QmeZ0OCgRrgyIwef2Nw5BkLfbmkB7x0z0KB8XTFP PQUPewSekIXfscOqMOCfUnDyOV7+IZHB -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:03 2025 by rpki-client