$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: MHccWiirsTp6ZgEq10hz6WdtpWdnGu6CfR6EWRGxV+s= Subject key identifier: D8:6B:96:DE:E0:EB:09:2A:0B:72:42:30:45:9A:34:A4:78:71:5D:D2 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 25C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 25B2 Signing time: Fri 22 Aug 2025 15:46:15 +0000 Manifest this update: Fri 22 Aug 2025 15:46:15 +0000 Manifest next update: Fri 29 Aug 2025 15:46:15 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: GVrXsOf+ugDykddeampXfi0OS2Rh1unRcixAlSj8ZrY=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: TDCyPfvl14GmlvtvPX3j8FfT9kdUWeZZya5/K7phv9Q=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: Qmsz/kc6vCM5AVnwbPEOkvoDKpojajE1SGhMXZiiAis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9673 (0x25c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Aug 22 15:46:15 2025 GMT Not After : Aug 29 15:46:15 2025 GMT Subject: CN=68a890c7-bd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ed:6b:d5:95:65:17:c1:60:46:46:93:59:35: 08:ef:8e:76:86:f1:13:07:d2:cb:bd:1e:41:21:e8: 87:1e:89:a5:52:fc:10:08:52:81:77:1f:eb:17:9d: 1b:07:3e:6c:7a:8e:e2:9d:9e:4b:95:67:15:ea:81: 78:0d:b9:cd:9d:16:61:b2:86:d6:3b:e7:1f:d8:46: 5d:21:95:4e:21:79:d1:39:8b:7c:c8:79:bb:1b:cc: 4c:e4:32:a8:54:ab:3e:4e:c7:16:e2:c1:2f:9b:93: fe:32:e1:4f:88:a8:a2:3d:a5:5f:6f:e1:65:f1:ec: 63:81:dc:73:79:f0:de:db:2d:ac:69:04:34:21:96: 18:ca:6b:06:cb:fe:46:0f:28:c9:74:8b:38:72:de: d0:c3:68:ce:29:c4:c6:30:9b:97:54:6b:a3:46:f2: 03:86:45:57:25:12:49:5a:37:95:c8:e9:c2:a5:36: 5b:c0:22:94:63:8e:de:0f:90:8c:92:02:c2:41:fc: 9c:a6:24:7e:b4:ce:61:f3:51:82:0b:66:1b:84:e2: ce:7f:0c:a6:c1:11:9e:1e:71:b3:81:ba:44:33:da: e3:5d:df:06:db:31:2c:45:88:e4:e6:f3:67:23:51: 78:97:3d:8d:5b:50:2d:45:1f:0f:b8:be:4c:91:9d: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:96:DE:E0:EB:09:2A:0B:72:42:30:45:9A:34:A4:78:71:5D:D2 X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1f:4a:08:72:af:b4:24:15:4e:c4:8f:02:12:df:41:d0:8a: 62:8c:ce:2a:da:e4:9e:99:d7:87:32:a6:69:4c:7f:10:d7:a5: 98:07:9c:5e:9b:d3:c8:4f:9f:fa:cb:aa:86:eb:31:83:97:aa: 45:ca:b3:80:74:be:95:ae:93:68:40:a1:9f:99:19:56:bb:db: 25:52:85:16:a4:a7:02:5e:eb:2f:f9:fc:80:2e:79:c3:f1:f6: 5c:e0:7c:53:19:3d:a3:55:2b:5b:02:fa:27:e1:15:d4:b8:3a: c9:82:b5:ca:82:f8:7e:f2:ac:5c:7a:17:64:27:84:e9:ae:23: 18:28:b8:93:c8:63:37:4a:0d:10:b0:60:ef:88:d4:7e:b8:d9: f7:fc:2e:09:08:fb:fe:a3:6a:75:c8:97:bc:d6:62:76:0f:29: c7:f7:2b:ad:8f:1b:51:02:e1:2f:21:69:87:9d:f1:02:4b:9e: 96:fe:c9:87:02:bd:7c:67:7a:d5:9e:a1:8d:b3:95:a8:1c:fa: 82:d5:d4:11:cb:77:b2:8f:14:36:74:72:00:4d:e9:e2:7b:cf: d9:5f:9f:43:69:1a:95:69:c5:72:57:0a:4f:41:3a:a4:71:54: 5b:8c:fc:7b:da:5e:60:50:91:11:d4:d0:6e:ec:dd:74:65:43: e4:7a:4a:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwODIyMTU0NjE1WhcNMjUwODI5MTU0NjE1WjAYMRYwFAYD VQQDEw02OGE4OTBjNy1iZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+1r1ZVlF8FgRkaTWTUI7452hvETB9LLvR5BIeiHHomlUvwQCFKBdx/rF50b Bz5seo7inZ5LlWcV6oF4DbnNnRZhsobWO+cf2EZdIZVOIXnROYt8yHm7G8xM5DKo VKs+TscW4sEvm5P+MuFPiKiiPaVfb+Fl8exjgdxzefDe2y2saQQ0IZYYymsGy/5G DyjJdIs4ct7Qw2jOKcTGMJuXVGujRvIDhkVXJRJJWjeVyOnCpTZbwCKUY47eD5CM kgLCQfycpiR+tM5h81GCC2YbhOLOfwymwRGeHnGzgbpEM9rjXd8G2zEsRYjk5vNn I1F4lz2NW1AtRR8PuL5MkZ0THQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhrlt7g 6wkqC3JCMEWaNKR4cV3SMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPH0oIcq+0JBVOxI8CEt9B0IpijM4q2uSemdeHMqZpTH8Q16WYB5xe m9PIT5/6y6qG6zGDl6pFyrOAdL6VrpNoQKGfmRlWu9slUoUWpKcCXusv+fyALnnD 8fZc4HxTGT2jVStbAvon4RXUuDrJgrXKgvh+8qxcehdkJ4TpriMYKLiTyGM3Sg0Q sGDviNR+uNn3/C4JCPv+o2p1yJe81mJ2DynH9yutjxtRAuEvIWmHnfECS56W/smH Ar18Z3rVnqGNs5WoHPqC1dQRy3eyjxQ2dHIATenie8/ZX59DaRqVacVyVwpPQTqk cVRbjPx72l5gUJER1NBu7N10ZUPkekoa -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:13 2025 by rpki-client