$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: GckJ3ft6Hv82TnbFNcoDjOwd8jTyuAMUH4DYMxInN5o= Subject key identifier: B6:19:07:DD:DE:E4:6F:B6:6F:28:98:CD:56:EF:4E:1C:7A:CF:A0:C9 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 1C Signing time: Sat 23 Aug 2025 08:08:51 +0000 Manifest this update: Sat 23 Aug 2025 08:08:50 +0000 Manifest next update: Sat 30 Aug 2025 08:08:50 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: bsGA/CuyRBS51Dk+A6pxjnzuuuVzzPZux+14KwQdTAY=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: O8Z/SaLnBNWGRjL6AfyE+33fscQi14WCCS2K6DsHHDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Aug 23 08:08:50 2025 GMT Not After : Aug 30 08:08:50 2025 GMT Subject: CN=68a97713-c4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:48:0b:5c:81:c7:50:1b:35:7c:de:c8:ac: 3a:da:42:d7:7c:91:27:3d:f9:c6:3b:0f:5f:98:1f: 42:87:94:61:98:1a:6d:b5:0e:31:ae:61:9c:ca:ac: 7d:56:2b:54:be:e6:c0:cd:60:3c:46:82:40:84:d3: 2d:4f:45:37:ba:63:fd:69:01:4f:e0:31:40:76:f6: 08:e1:6b:d5:bb:d8:c5:0a:da:27:fe:9a:f1:73:70: 2a:0e:cc:26:7e:e0:df:e3:c5:bf:35:3c:ba:57:de: fc:3a:32:60:a3:99:9f:ad:c4:7f:64:87:2c:57:95: fc:27:31:8d:9e:6a:82:5f:51:58:3e:d0:a5:59:1d: a5:2f:5e:55:20:20:ff:2b:c2:95:39:51:a8:9b:cb: 61:a0:0a:ab:70:9c:60:e5:bb:36:af:c7:29:38:ec: c6:97:dc:41:05:83:ce:f1:ba:a8:01:2d:6d:b2:3d: 52:75:f3:9b:7c:31:1f:c5:52:fa:51:a5:03:76:48: 2d:71:2d:9b:34:ef:11:d6:6f:44:ae:65:55:57:95: d3:e3:76:0e:46:83:89:7a:81:3c:49:35:86:cd:82: 7c:db:29:b4:2f:dc:5d:40:83:23:3c:8d:ea:a4:80: e3:8d:2e:0b:de:a0:16:b7:45:25:43:ce:dd:6d:79: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:19:07:DD:DE:E4:6F:B6:6F:28:98:CD:56:EF:4E:1C:7A:CF:A0:C9 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0f:07:96:3e:37:fc:31:f6:9b:12:21:28:36:9d:93:30:36: 5f:85:06:86:4b:18:b9:a9:18:65:20:c9:88:96:9e:e6:74:b8: f1:80:3a:b7:93:27:29:da:45:05:bb:b9:f5:41:58:ea:ce:4d: b8:90:6a:87:e9:a4:1a:4f:65:e2:02:68:27:c1:4e:8d:7d:89: fe:25:4f:43:93:f1:73:2e:01:04:14:2a:ed:e8:78:d7:1e:1e: 90:ff:86:9e:af:0a:41:1c:ff:7c:1d:cd:c2:f4:70:e9:c9:d8: 6d:8b:67:3a:63:8b:87:3a:88:92:0f:eb:dc:87:58:ae:1d:45: 32:fc:e1:a5:a5:6e:5d:4f:02:dc:c8:75:90:b4:9c:2d:96:a1: b2:4f:47:c8:af:0e:ae:9e:a1:14:d9:ee:84:6b:b0:d8:95:1e: 36:76:a9:ca:e3:71:42:57:ac:5c:df:ef:a2:3b:ba:f1:0c:ba: 09:67:e2:63:e1:66:f0:34:39:0b:c8:49:67:fa:03:08:29:1d: 18:34:91:a8:69:28:a0:62:d6:11:cf:ef:c3:36:a1:1f:2b:98: 2b:18:44:19:2f:9b:ca:80:d2:0d:44:28:de:9a:20:d9:e3:cb: 9d:fc:a7:ab:fa:2d:cf:e2:de:94:5b:74:79:f5:c3:b3:df:7c: c3:62:2f:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoMzBENzE5RjlDNkQzN0UyQUM5RjRENkQ0QjFGN0Q5NzhF QzJBMzI4OTAeFw0yNTA4MjMwODA4NTBaFw0yNTA4MzAwODA4NTBaMBgxFjAUBgNV BAMTDTY4YTk3NzEzLWM0ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTb0gLXIHHUBs1fN7IrDraQtd8kSc9+cY7D1+YH0KHlGGYGm21DjGuYZzKrH1W K1S+5sDNYDxGgkCE0y1PRTe6Y/1pAU/gMUB29gjha9W72MUK2if+mvFzcCoOzCZ+ 4N/jxb81PLpX3vw6MmCjmZ+txH9khyxXlfwnMY2eaoJfUVg+0KVZHaUvXlUgIP8r wpU5Uaiby2GgCqtwnGDluzavxyk47MaX3EEFg87xuqgBLW2yPVJ185t8MR/FUvpR pQN2SC1xLZs07xHWb0SuZVVXldPjdg5Gg4l6gTxJNYbNgnzbKbQv3F1AgyM8jeqk gOONLgveoBa3RSVDzt1teVVvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUthkH3d7k b7ZvKJjNVu9OHHrPoMkwHwYDVR0jBBgwFoAUMNcZ+cbTfirJ9NbUsffZeOwqMokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzREL0ZDMjA5MTM4NThE RDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1v ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTU5jWi1jYlRmaXJKOU5iVXNmZlplT3dxTW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzREL0ZDMjA5MTM4NThERDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmly SjlOYlVzZmZaZU93cU1vay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwPB5Y+N/wx9psSISg2nZMwNl+FBoZLGLmpGGUgyYiWnuZ0uPGAOreT JynaRQW7ufVBWOrOTbiQaofppBpPZeICaCfBTo19if4lT0OT8XMuAQQUKu3oeNce HpD/hp6vCkEc/3wdzcL0cOnJ2G2LZzpji4c6iJIP69yHWK4dRTL84aWlbl1PAtzI dZC0nC2WobJPR8ivDq6eoRTZ7oRrsNiVHjZ2qcrjcUJXrFzf76I7uvEMugln4mPh ZvA0OQvISWf6AwgpHRg0kahpKKBi1hHP78M2oR8rmCsYRBkvm8qA0g1EKN6aINnj y538p6v6Lc/i3pRbdHn1w7PffMNiL7M= -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:23 2025 by rpki-client