$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json) Hash identifier: FHVqQrKCgUKXV6sFjS3s7RWYYHJmU+lZxPye9h52kZk= Subject key identifier: 8C:B5:04:1E:40:73:40:EC:59:ED:29:34:94:2E:BB:B3:F0:49:56:58 Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft Manifest number: 79 Signing time: Sat 23 Aug 2025 06:59:23 +0000 Manifest this update: Sat 23 Aug 2025 06:59:22 +0000 Manifest next update: Sat 30 Aug 2025 06:59:22 +0000 Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: MaIqXvrIyr+O9toN/K9qq7JU56oEw3CGv2ZkawXDx8w=) 2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: sUWfAuRTWaVVgcAthywuFU4ZlijXzthACuza893doh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Validity Not Before: Aug 23 06:59:22 2025 GMT Not After : Aug 30 06:59:22 2025 GMT Subject: CN=68a966cb-b344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:bf:35:ce:5a:ae:13:fb:5f:83:26:bb:33: d7:8b:2a:7d:3d:0d:f8:9f:7a:a2:39:24:58:4b:bf: 80:8a:45:c8:b9:d2:f9:06:41:0d:e8:50:71:a9:3d: d7:8c:0d:ca:d5:c0:77:e2:e7:d7:cf:f8:ff:e1:4d: 9e:da:20:01:fc:a9:f5:0e:e9:16:8d:f8:b6:25:25: 40:e2:ea:00:9d:96:d9:83:43:fc:f3:9d:36:55:b7: d2:ae:23:97:22:fc:bc:8c:25:81:ba:ee:04:67:12: 4d:e8:92:09:31:f0:c0:b4:c4:44:68:30:3f:80:0a: 18:ae:b9:48:ea:5e:34:59:c2:5d:4b:df:b0:11:ab: 98:6b:d5:7c:24:d7:05:6e:be:22:ae:39:ca:24:8b: 5e:05:29:06:d9:27:ef:ab:d1:3d:9c:e8:63:28:9b: 5f:c5:10:71:52:b6:75:3c:19:61:54:45:23:55:22: e9:2c:d6:c5:ca:15:c8:84:10:68:57:d5:05:ed:55: c2:28:54:cf:2d:4b:33:d3:3e:bf:01:c0:d9:06:40: 57:62:91:2a:67:a9:24:2b:b7:d3:fa:fb:58:41:80: 51:80:15:b4:d7:b3:fe:c2:c5:da:cb:ab:71:b3:2b: 29:2c:2f:2a:ea:1b:2a:f9:ca:9c:96:e6:0b:3b:42: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B5:04:1E:40:73:40:EC:59:ED:29:34:94:2E:BB:B3:F0:49:56:58 X509v3 Authority Key Identifier: keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7c:47:98:41:62:14:ec:17:0b:6e:2a:1e:73:49:46:ef:37: ea:ae:14:a7:d9:57:15:42:06:ce:13:a9:ee:19:3d:a3:69:54: 9e:54:0b:8d:4d:57:be:35:2e:13:d8:98:5a:1e:78:be:90:2f: 3a:79:a4:ad:91:4c:48:13:b7:3c:4a:b0:03:20:f6:44:7d:42: d5:87:e4:cb:9d:c7:58:d8:63:97:1d:c8:69:87:9a:4e:b5:bd: e3:1c:2b:9c:56:51:34:03:7d:1a:e7:19:3e:4c:74:5c:d8:af: a4:bb:77:6a:a5:40:ed:56:08:90:3a:62:9a:c3:56:b2:60:55: 96:4c:7c:fb:38:24:27:8e:45:92:80:f7:78:52:a3:83:59:c1: d0:72:6e:9d:97:fd:6e:cc:a9:ef:8e:f1:22:ac:18:08:35:e5: 0c:db:dc:6d:b1:e2:4d:f8:36:40:07:05:2e:05:af:62:29:10: 11:4b:9c:61:82:48:6a:59:10:b1:cc:7d:da:1c:c8:61:cf:27: 28:11:72:ba:6a:de:47:81:81:40:91:bf:d6:79:9c:9c:b6:32: 65:26:4f:0a:9f:a3:27:63:61:fb:ee:df:bf:77:42:6c:da:50: c5:19:9b:9f:a5:6f:f9:dd:27:4f:4d:84:97:56:28:3e:97:44: 52:51:0a:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MThCQjExMC8GA1UEBRMoMzFBQzk2NDdDN0Y4NzBBNjZCQTJERTc4ODU0NENEOEMz MjZCREZGOTAeFw0yNTA4MjMwNjU5MjJaFw0yNTA4MzAwNjU5MjJaMBgxFjAUBgNV BAMTDTY4YTk2NmNiLWIzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJTb81zlquE/tfgya7M9eLKn09DfifeqI5JFhLv4CKRci50vkGQQ3oUHGpPdeM DcrVwHfi59fP+P/hTZ7aIAH8qfUO6RaN+LYlJUDi6gCdltmDQ/zznTZVt9KuI5ci /LyMJYG67gRnEk3okgkx8MC0xERoMD+AChiuuUjqXjRZwl1L37ARq5hr1Xwk1wVu viKuOcoki14FKQbZJ++r0T2c6GMom1/FEHFStnU8GWFURSNVIuks1sXKFciEEGhX 1QXtVcIoVM8tSzPTPr8BwNkGQFdikSpnqSQrt9P6+1hBgFGAFbTXs/7CxdrLq3Gz KyksLyrqGyr5ypyW5gs7Qq47AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjLUEHkBz QOxZ7Sk0lC67s/BJVlgwHwYDVR0jBBgwFoAUMayWR8f4cKZrot54hUTNjDJr3/kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxOEJCLzZBMEIyMDU0QzhD NTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNf ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWF5V1I4ZjRjS1pyb3Q1NGhVVE5qREpyM19rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx OEJCLzZBMEIyMDU0QzhDNTExRUY4RUM1NTU2NUM0RjlBRTAyL01heVdSOGY0Y0ta cm90NTRoVVROakRKcjNfay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJp8R5hBYhTsFwtuKh5zSUbvN+quFKfZVxVCBs4Tqe4ZPaNpVJ5UC41N V741LhPYmFoeeL6QLzp5pK2RTEgTtzxKsAMg9kR9QtWH5Mudx1jYY5cdyGmHmk61 veMcK5xWUTQDfRrnGT5MdFzYr6S7d2qlQO1WCJA6YprDVrJgVZZMfPs4JCeORZKA 93hSo4NZwdBybp2X/W7Mqe+O8SKsGAg15Qzb3G2x4k34NkAHBS4Fr2IpEBFLnGGC SGpZELHMfdocyGHPJygRcrpq3keBgUCRv9Z5nJy2MmUmTwqfoydjYfvu3793Qmza UMUZm5+lb/ndJ09NhJdWKD6XRFJRCvA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:30 2025 by rpki-client