$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: UeMRT5THLlktMru33MDYK7z0IdHHskQv4mrIjzuiN3k= Subject key identifier: 28:9F:E3:38:39:83:76:0C:50:91:19:71:4A:4E:AF:B0:4D:98:5D:A0 Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 09A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 0999 Signing time: Fri 22 Aug 2025 20:12:46 +0000 Manifest this update: Fri 22 Aug 2025 20:12:46 +0000 Manifest next update: Fri 29 Aug 2025 20:12:46 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: YulOO9JXoRtUeNYXj3bs2gB8i3jGyzwaFVegKAw5ctk=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2464 (0x9a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF, serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: Aug 22 20:12:46 2025 GMT Not After : Aug 29 20:12:46 2025 GMT Subject: CN=68a8cf3e-b07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:38:92:9b:d4:93:20:3c:52:93:a7:1e:00: 4a:0e:de:a5:39:e0:38:13:c8:0a:f9:71:10:fc:37: 39:73:2e:3f:0f:f8:de:cc:08:da:c7:d3:6d:08:67: 68:a5:af:f6:27:42:8f:cd:d7:f9:bf:84:9e:31:5b: 8d:df:08:d0:e9:6b:e1:9e:6d:3b:98:51:9f:91:21: ab:1f:dc:16:27:0b:87:5f:77:fb:f6:fa:46:1d:e7: b1:d8:09:52:f3:f1:8b:ea:16:54:16:ab:06:33:49: 5e:47:92:90:6f:e1:25:98:1a:a4:16:06:1d:3e:dd: 13:dc:3b:a0:80:9b:49:54:d8:33:c0:e6:d2:2b:dd: b9:7a:dc:5a:15:e9:82:db:58:1e:a5:7c:e5:42:e0: 8a:da:0c:ee:87:12:0e:3c:90:ed:a0:19:43:ea:34: 8f:20:a0:70:4f:12:de:78:63:3c:b9:0b:86:c0:f9: 5f:0f:b9:40:0b:04:23:cd:4a:f0:2c:9f:05:44:3d: 55:cd:62:98:29:f4:4d:e8:0b:c1:54:8a:70:0d:fe: ae:6d:42:dc:ba:1b:cd:a0:23:0b:c5:30:35:e0:66: 0b:13:ee:45:9b:54:bc:5b:50:52:6d:20:97:1e:68: 06:25:60:ff:1d:9c:ea:f4:1a:12:d3:60:a6:92:30: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9F:E3:38:39:83:76:0C:50:91:19:71:4A:4E:AF:B0:4D:98:5D:A0 X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:02:90:cb:ec:1d:56:2a:e1:a1:07:c7:8f:5a:7a:5a:50:82: 68:86:17:00:a0:0a:22:10:09:9e:b9:63:28:5e:e4:be:0d:af: 6f:9a:8f:73:dd:e2:ff:1a:a6:9c:14:d4:53:23:b6:ea:39:c1: 69:25:fc:a8:3b:58:60:18:2a:06:45:ec:5c:7f:6e:e8:1b:85: 2d:86:49:a8:30:6a:04:8a:78:97:e3:50:9a:ef:b0:20:21:dd: 20:8b:1d:b8:e1:70:5f:1c:d6:10:ce:f4:63:5f:48:0a:8b:1b: 5c:00:24:bb:78:bc:cf:6d:96:d4:9e:dc:b3:1b:5e:12:14:eb: cc:d0:3e:ff:aa:ac:dc:b0:53:2f:d6:3f:70:af:54:34:c9:32: 1a:6f:f6:09:34:50:e1:25:15:77:95:40:43:07:89:cb:07:04: ae:7a:8d:37:96:19:9a:01:4c:df:43:71:ea:cb:4b:d6:26:94: ed:29:a5:f9:77:68:55:0c:e8:a6:73:44:d5:76:0c:6a:ff:fa: 8d:ed:52:11:ee:8e:89:e1:7f:a5:90:22:df:4e:b7:f8:fd:07: 60:c9:82:7c:56:27:cc:86:7e:2a:91:63:24:1c:8b:0f:2f:92: bd:d8:db:e9:fc:84:48:23:49:1e:0c:d0:48:c0:fe:d9:e3:a6: e0:e9:34:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjUwODIyMjAxMjQ2WhcNMjUwODI5MjAxMjQ2WjAYMRYwFAYD VQQDEw02OGE4Y2YzZS1iMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEg4kpvUkyA8UpOnHgBKDt6lOeA4E8gK+XEQ/Dc5cy4/D/jezAjax9NtCGdo pa/2J0KPzdf5v4SeMVuN3wjQ6Wvhnm07mFGfkSGrH9wWJwuHX3f79vpGHeex2AlS 8/GL6hZUFqsGM0leR5KQb+ElmBqkFgYdPt0T3DuggJtJVNgzwObSK925etxaFemC 21gepXzlQuCK2gzuhxIOPJDtoBlD6jSPIKBwTxLeeGM8uQuGwPlfD7lACwQjzUrw LJ8FRD1VzWKYKfRN6AvBVIpwDf6ubULcuhvNoCMLxTA14GYLE+5Fm1S8W1BSbSCX HmgGJWD/HZzq9BoS02CmkjCV9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCif4zg5 g3YMUJEZcUpOr7BNmF2gMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtApDL7B1WKuGhB8ePWnpaUIJohhcAoAoiEAmeuWMoXuS+Da9vmo9z 3eL/GqacFNRTI7bqOcFpJfyoO1hgGCoGRexcf27oG4UthkmoMGoEiniX41Ca77Ag Id0gix244XBfHNYQzvRjX0gKixtcACS7eLzPbZbUntyzG14SFOvM0D7/qqzcsFMv 1j9wr1Q0yTIab/YJNFDhJRV3lUBDB4nLBwSueo03lhmaAUzfQ3Hqy0vWJpTtKaX5 d2hVDOimc0TVdgxq//qN7VIR7o6J4X+lkCLfTrf4/QdgyYJ8VifMhn4qkWMkHIsP L5K92Nvp/IRII0keDNBIwP7Z46bg6TT+ -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:50 2025 by rpki-client