$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: QquTBrjhaREkfzU6ZKm/f6uRGwZ8iY+jk0o4FluGyCg= Subject key identifier: 34:57:C7:BC:0C:44:35:5E:08:77:03:9B:7E:5E:89:B1:BB:CD:F5:6E Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0ABC Signing time: Wed 02 Jul 2025 19:45:57 +0000 Manifest this update: Wed 02 Jul 2025 19:45:57 +0000 Manifest next update: Wed 09 Jul 2025 19:45:57 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: iLI14ZwHygNs5a/plwjHkfkPi+qbJpvl5vSiodXPrGc=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 1xdS0of8jq6b+9XXSYhXqSMAsRL9VgQ5wBfYf2X41Dk=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: Jul 2 19:45:57 2025 GMT Not After : Jul 9 19:45:57 2025 GMT Subject: CN=68658c75-c47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:57:bc:fe:db:64:5f:5a:36:66:b9:92:ac: 97:df:53:5e:0a:de:a7:0d:22:69:e7:33:c9:78:59: 89:b5:ac:10:73:0a:cd:bb:36:45:0b:42:bb:52:82: fa:5f:e2:04:1a:18:93:4b:3d:a7:db:e8:91:9c:8e: e5:f9:a9:b1:e6:91:08:9e:48:93:12:b7:b3:c4:34: 06:37:38:9a:03:33:f2:2a:23:06:0e:b8:0b:6d:5f: 42:41:eb:06:5a:7f:6b:af:be:62:62:e2:3b:5f:e4: f3:21:78:68:2f:4d:d2:62:e6:5b:1a:a2:f9:d7:59: 4c:f9:ea:d4:a3:9c:82:c3:8b:73:47:68:54:82:78: a8:24:9c:8e:6b:c5:ec:25:5e:0c:28:c6:3a:7e:f9: 22:67:cf:0c:9d:3a:3d:35:01:71:b2:0b:6a:9f:4b: 28:e0:44:2e:79:88:70:47:01:ec:6e:51:9a:58:2d: 59:e3:3a:b8:d9:93:d7:08:5f:41:91:b8:33:ca:a9: 73:a0:78:d0:2f:34:d7:95:2a:32:b5:65:b9:3f:2b: 01:00:9a:54:43:62:31:48:a9:65:63:3a:a0:69:f8: 2d:69:ce:55:70:d8:f1:fe:eb:bb:0b:c8:55:68:5a: 4a:57:78:1e:72:c3:7d:ca:71:32:a7:86:a5:1e:39: e4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:57:C7:BC:0C:44:35:5E:08:77:03:9B:7E:5E:89:B1:BB:CD:F5:6E X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0f:4e:a3:01:f8:9f:ae:52:1f:97:5d:17:83:2b:2e:1e:1b: 58:72:07:dc:b4:58:26:60:71:bd:3c:0a:ee:53:c4:ba:5f:85: 5a:89:a1:36:cd:fc:d7:6f:55:52:6e:e6:b2:9b:39:89:d5:c0: 65:93:6d:a1:60:e6:7e:da:e1:c2:26:ee:49:b1:24:79:71:32: 12:f2:5a:6f:b2:a9:13:22:fa:37:15:d8:46:21:00:0f:fe:d6: fa:3e:bc:a9:a8:8a:67:78:db:62:47:76:79:6d:76:49:6b:5d: bb:23:fd:21:bd:78:eb:a8:69:b0:12:57:9b:d1:84:15:21:cc: 29:5e:b9:d7:c3:0a:29:f4:21:bd:1c:1d:5c:f4:7e:8f:7f:52: f6:af:67:e4:83:41:6e:79:d5:39:74:5a:7d:21:19:90:9b:52: cf:18:2a:2d:f6:08:04:90:a2:c0:05:26:7b:e1:c2:66:83:7d: e8:5f:8b:d4:85:23:c2:c5:69:98:bf:e0:17:cb:d0:cb:2f:89: 1c:28:c0:71:d9:47:ca:70:ef:e8:d5:35:63:63:91:71:26:f3: 30:e7:1a:b6:d5:90:df:d0:e2:0e:d8:9d:f0:24:93:82:cc:7d: 70:5f:e5:f0:c1:b6:b2:01:22:8e:61:1b:3c:bd:d4:0b:02:08: 19:e3:f5:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjUwNzAyMTk0NTU3WhcNMjUwNzA5MTk0NTU3WjAYMRYwFAYD VQQDEw02ODY1OGM3NS1jNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF9XvP7bZF9aNma5kqyX31NeCt6nDSJp5zPJeFmJtawQcwrNuzZFC0K7UoL6 X+IEGhiTSz2n2+iRnI7l+amx5pEInkiTErezxDQGNziaAzPyKiMGDrgLbV9CQesG Wn9rr75iYuI7X+TzIXhoL03SYuZbGqL511lM+erUo5yCw4tzR2hUgnioJJyOa8Xs JV4MKMY6fvkiZ88MnTo9NQFxsgtqn0so4EQueYhwRwHsblGaWC1Z4zq42ZPXCF9B kbgzyqlzoHjQLzTXlSoytWW5PysBAJpUQ2IxSKllYzqgafgtac5VcNjx/uu7C8hV aFpKV3gecsN9ynEyp4alHjnkoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRXx7wM RDVeCHcDm35eibG7zfVuMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVD06jAfifrlIfl10XgysuHhtYcgfctFgmYHG9PAruU8S6X4VaiaE2 zfzXb1VSbuaymzmJ1cBlk22hYOZ+2uHCJu5JsSR5cTIS8lpvsqkTIvo3FdhGIQAP /tb6PrypqIpneNtiR3Z5bXZJa127I/0hvXjrqGmwEleb0YQVIcwpXrnXwwop9CG9 HB1c9H6Pf1L2r2fkg0FuedU5dFp9IRmQm1LPGCot9ggEkKLABSZ74cJmg33oX4vU hSPCxWmYv+AXy9DLL4kcKMBx2UfKcO/o1TVjY5FxJvMw5xq21ZDf0OIO2J3wJJOC zH1wX+XwwbayASKOYRs8vdQLAggZ4/WJ -----END CERTIFICATE-----Generated at Fri Jul 4 14:40:05 2025 by rpki-client