$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: oGS957cPyZThyQg1/kL21qB5jOAd6SUuYubeNpcz1PU= Subject key identifier: 03:74:D7:F3:2F:F9:0C:3D:D5:B9:C0:D3:FC:63:10:F9:EA:58:30:84 Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 050B Signing time: Fri 22 Aug 2025 23:49:22 +0000 Manifest this update: Fri 22 Aug 2025 23:49:21 +0000 Manifest next update: Fri 29 Aug 2025 23:49:21 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: UIBBCvKITxT0HhS00Ff8BhNkkKC6en4KUBq1UxSMnwA=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: bsEiEpYevuZ2yI/lTaWJ4XTDfNWpo5EoBNfwBtnxRKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: Aug 22 23:49:21 2025 GMT Not After : Aug 29 23:49:21 2025 GMT Subject: CN=68a90202-b0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:c4:6b:f8:8d:e2:57:6d:9a:ab:c0:68:af: 01:8e:97:ec:ca:4d:42:53:16:55:eb:bb:25:e7:1b: bc:7c:2d:d6:18:d3:8c:b9:95:64:fa:d9:a9:b9:05: 78:0a:03:89:d2:f4:fe:fb:05:0c:4f:13:77:0b:f8: 2d:16:be:e5:99:42:68:da:25:0f:ba:2c:6c:2d:26: 80:14:a5:07:65:f8:71:71:36:22:60:ff:be:0b:0f: cd:47:78:92:dc:9a:7c:a3:1c:de:74:93:5e:da:d5: c5:0b:73:b1:08:c0:d5:70:ce:bd:1c:01:e6:53:73: 82:d3:38:24:b8:ae:54:fd:b5:ec:7f:20:fa:0a:55: e5:01:b2:db:12:7a:11:19:45:67:0c:2b:06:6f:37: f2:17:a7:93:5a:9c:b8:f2:55:cf:e6:fd:87:c9:5d: 0f:96:5b:1d:99:8f:c2:17:ea:69:3f:d8:ea:77:c7: 40:26:c8:9c:1c:96:a6:ba:ab:05:17:6a:58:8e:97: c5:0a:3f:6c:1f:e3:ad:7a:45:c4:4a:a9:4f:1d:3e: 00:82:f3:11:8e:1f:24:7a:b4:98:c0:2f:d3:b5:b6: c9:eb:9b:af:eb:50:b0:a8:e5:9d:3f:67:89:d7:51: 51:55:9b:b6:74:17:ab:dc:ac:57:11:71:66:19:7d: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:D7:F3:2F:F9:0C:3D:D5:B9:C0:D3:FC:63:10:F9:EA:58:30:84 X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e0:a0:03:4b:cb:2b:f1:22:ad:9d:96:0f:ff:66:ae:46:8d: ac:5f:5f:d9:4b:15:eb:7f:60:f3:5d:c2:95:0b:0e:43:51:f5: 31:d9:78:1d:85:ac:74:ce:d5:69:07:5d:4c:44:71:98:57:14: bf:51:27:03:a2:c9:11:2d:91:c6:96:aa:db:7a:ea:2a:8c:63: 17:aa:69:ff:86:3b:46:8f:42:44:8b:13:78:1a:90:cb:3a:62: 38:26:18:a8:05:3c:5d:40:6a:5e:33:a4:2a:bd:a2:10:79:39: 22:77:ec:97:c4:ba:36:06:d0:83:29:67:ed:51:40:a9:e8:ab: 46:fe:a1:b7:19:22:b0:63:7b:65:cd:45:48:5f:a6:38:0e:c8: 84:5d:52:d3:6a:81:5a:6c:5e:a0:b5:2f:46:be:4d:41:18:94: 95:19:6b:9d:4a:c4:30:ee:d5:c9:71:57:c7:eb:c1:7b:fc:d6: c3:7c:8e:c0:6a:7a:b7:73:9f:6c:de:51:58:6d:09:7b:23:ac: ed:6e:53:2c:69:59:6f:c9:84:16:17:17:05:30:3c:f5:0e:c9: 18:de:f9:82:be:70:c4:75:2b:af:8f:6d:67:d9:af:29:35:dd: 00:35:32:53:52:2c:57:4c:8a:3c:74:51:fc:ea:0b:59:7b:f4: a4:fa:e0:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUwODIyMjM0OTIxWhcNMjUwODI5MjM0OTIxWjAYMRYwFAYD VQQDEw02OGE5MDIwMi1iMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdvEa/iN4ldtmqvAaK8Bjpfsyk1CUxZV67sl5xu8fC3WGNOMuZVk+tmpuQV4 CgOJ0vT++wUMTxN3C/gtFr7lmUJo2iUPuixsLSaAFKUHZfhxcTYiYP++Cw/NR3iS 3Jp8oxzedJNe2tXFC3OxCMDVcM69HAHmU3OC0zgkuK5U/bXsfyD6ClXlAbLbEnoR GUVnDCsGbzfyF6eTWpy48lXP5v2HyV0PllsdmY/CF+ppP9jqd8dAJsicHJamuqsF F2pYjpfFCj9sH+OtekXESqlPHT4AgvMRjh8kerSYwC/TtbbJ65uv61CwqOWdP2eJ 11FRVZu2dBer3KxXEXFmGX1ZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN01/Mv +Qw91bnA0/xjEPnqWDCEMB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb4KADS8sr8SKtnZYP/2auRo2sX1/ZSxXrf2DzXcKVCw5DUfUx2Xgd hax0ztVpB11MRHGYVxS/UScDoskRLZHGlqrbeuoqjGMXqmn/hjtGj0JEixN4GpDL OmI4JhioBTxdQGpeM6QqvaIQeTkid+yXxLo2BtCDKWftUUCp6KtG/qG3GSKwY3tl zUVIX6Y4DsiEXVLTaoFabF6gtS9Gvk1BGJSVGWudSsQw7tXJcVfH68F7/NbDfI7A anq3c59s3lFYbQl7I6ztblMsaVlvyYQWFxcFMDz1DskY3vmCvnDEdSuvj21n2a8p Nd0ANTJTUixXTIo8dFH86gtZe/Sk+uAM -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:24 2025 by rpki-client