$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json) Hash identifier: njIVwt8biRYUW5x/+Ejrq5EGcnjbXr7eA3mI/0U8PNo= Subject key identifier: E2:27:3C:28:E9:4D:41:94:19:6A:2F:24:33:BC:16:74:31:0F:C6:7C Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft Manifest number: 03F2 Signing time: Sat 23 Aug 2025 00:44:26 +0000 Manifest this update: Sat 23 Aug 2025 00:44:26 +0000 Manifest next update: Sat 30 Aug 2025 00:44:26 +0000 Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: Qb6tQnE6l6THBfeSRlzUFoCNhpEC4iV91470Owd91z4=) 2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=) 3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Validity Not Before: Aug 23 00:44:26 2025 GMT Not After : Aug 30 00:44:26 2025 GMT Subject: CN=68a90eea-0f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:4c:0c:9d:dc:e7:16:b2:53:04:8a:82:a9: d8:0e:37:a9:65:71:e8:3a:d2:b3:47:d1:de:26:17: 59:73:3e:f4:d5:52:9a:58:84:47:3a:59:51:fc:bd: 1d:4c:90:d7:a8:1f:54:af:27:eb:7a:66:39:ab:56: 6c:71:01:a6:08:49:0c:f3:68:f7:d3:ee:0f:46:56: e6:09:7f:71:71:48:13:cc:09:63:0a:75:36:28:6d: 90:26:88:7e:0b:f9:ac:4e:a2:cd:fd:dc:ab:27:50: 7a:e8:37:56:16:da:bb:65:2b:64:97:4c:3b:cd:4a: 75:db:d1:e0:39:a8:70:18:3c:d0:6d:49:6b:87:45: c5:7e:6a:8a:dd:d1:f0:0d:d8:e2:e9:ec:cb:81:4d: f3:66:20:34:10:ca:3d:02:ff:d9:5a:bf:1d:98:88: 55:cc:f1:7d:f1:3c:59:c9:79:23:eb:a8:bd:b9:19: e9:67:a2:13:6c:2b:03:25:b9:33:5d:47:3c:11:9c: 71:d4:7d:0c:aa:fc:bc:37:de:39:f4:8c:c5:9e:e4: a3:aa:10:ef:6c:a5:b9:0b:22:47:08:ff:60:36:1f: bc:ec:ed:75:a9:8d:0e:65:f3:4a:49:c5:60:cf:ab: b9:0f:de:3f:1f:9a:b2:e5:ec:dc:d7:59:04:94:1e: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:27:3C:28:E9:4D:41:94:19:6A:2F:24:33:BC:16:74:31:0F:C6:7C X509v3 Authority Key Identifier: keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:7f:7b:f6:40:a6:89:17:03:af:07:76:48:8b:0a:51:fc:5b: a3:07:c6:48:ec:0b:28:19:9c:e8:76:97:3f:c2:2f:54:6f:33: 61:ea:5f:90:60:66:8a:eb:26:c6:81:5b:a5:b2:64:5b:15:ec: 7d:ab:45:68:3a:94:52:a0:32:34:82:04:5f:c8:6f:d3:68:05: 36:b8:05:15:b3:7c:92:f9:39:b2:f1:b6:54:96:bd:b3:4e:4e: ab:56:a1:45:32:2d:82:91:a0:e3:8a:79:39:e7:36:a2:4d:e8: d9:d3:36:5c:83:d6:74:ad:a2:7c:9a:40:4a:5a:24:bc:70:fa: ea:3f:a9:19:f5:f3:60:6a:65:09:07:ee:bd:09:70:8b:27:14: f6:ab:49:8f:b6:5e:b3:bb:76:69:23:61:ca:da:fb:78:bc:e8: c2:6a:5d:37:77:c8:87:81:ca:1d:fd:1b:69:c6:3d:47:cd:a0: 04:fd:11:03:2c:61:ae:a0:43:69:3c:f1:24:33:ca:72:10:9b: bc:99:8b:ca:34:32:41:0e:00:aa:bb:fe:44:fd:cb:66:c0:67: 1e:f5:82:1c:30:f4:52:ff:f5:83:de:7b:68:0f:50:ce:60:45: 4a:a7:42:7c:84:d4:ff:51:d8:75:3e:84:e7:b0:40:22:22:1b: 6d:33:1f:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0 MDkxQjdDMjQwHhcNMjUwODIzMDA0NDI2WhcNMjUwODMwMDA0NDI2WjAYMRYwFAYD VQQDEw02OGE5MGVlYS0wZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr5MDJ3c5xayUwSKgqnYDjepZXHoOtKzR9HeJhdZcz701VKaWIRHOllR/L0d TJDXqB9UryfremY5q1ZscQGmCEkM82j30+4PRlbmCX9xcUgTzAljCnU2KG2QJoh+ C/msTqLN/dyrJ1B66DdWFtq7ZStkl0w7zUp129HgOahwGDzQbUlrh0XFfmqK3dHw Ddji6ezLgU3zZiA0EMo9Av/ZWr8dmIhVzPF98TxZyXkj66i9uRnpZ6ITbCsDJbkz XUc8EZxx1H0Mqvy8N9459IzFnuSjqhDvbKW5CyJHCP9gNh+87O11qY0OZfNKScVg z6u5D94/H5qy5ezc11kElB5vSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOInPCjp TUGUGWovJDO8FnQxD8Z8MB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr SUkwVFlrM1duWTVBa2JmQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9f3v2QKaJFwOvB3ZIiwpR/FujB8ZI7AsoGZzodpc/wi9UbzNh6l+Q YGaK6ybGgVulsmRbFex9q0VoOpRSoDI0ggRfyG/TaAU2uAUVs3yS+Tmy8bZUlr2z Tk6rVqFFMi2CkaDjink55zaiTejZ0zZcg9Z0raJ8mkBKWiS8cPrqP6kZ9fNgamUJ B+69CXCLJxT2q0mPtl6zu3ZpI2HK2vt4vOjCal03d8iHgcod/Rtpxj1HzaAE/RED LGGuoENpPPEkM8pyEJu8mYvKNDJBDgCqu/5E/ctmwGce9YIcMPRS//WD3ntoD1DO YEVKp0J8hNT/Udh1PoTnsEAiIhttMx9r -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:08 2025 by rpki-client