$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: NkGUH5hDk/F5Dap962Z4OYIlAcZiPJWdcIfgrs3GW3s= Subject key identifier: 8E:1F:E4:0C:2E:22:E5:3D:69:E1:55:C5:9E:09:78:54:24:94:08:16 Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0AF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0AD8 Signing time: Fri 22 Aug 2025 19:37:22 +0000 Manifest this update: Fri 22 Aug 2025 19:37:21 +0000 Manifest next update: Fri 29 Aug 2025 19:37:21 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: 5uhfmMVhP4zef+od/oCNM6RtCDO3n3GBiXQh1RiQEA4=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: eLp4LMqTQQ7wQVmCxd5TEfP0lAEMCR6K3GMmHN2veeg=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: nM4RVZvgitji8IESGu68cVeu1tVBkthAHqzvYlTiCPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2806 (0xaf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: Aug 22 19:37:21 2025 GMT Not After : Aug 29 19:37:21 2025 GMT Subject: CN=68a8c6f1-a562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:bc:ed:61:ce:45:7f:0c:e6:1e:9d:4c:f0: 42:88:dc:56:70:35:7e:b8:32:b9:ce:c2:0a:16:f8: 6e:5f:45:46:3d:04:03:1f:c3:23:bd:63:f6:cf:94: 36:82:22:ec:89:9d:84:5f:59:17:68:bf:fe:92:a6: 8d:05:7c:8a:d5:de:c6:d8:0b:92:aa:db:20:75:3c: 69:d8:82:eb:b4:bb:35:af:ec:7b:c5:30:2e:87:59: 60:fe:16:a1:81:83:a1:ac:65:7c:2f:9a:0a:84:d0: e6:fd:41:70:84:05:c4:87:fe:db:0b:87:cc:8b:3c: d6:ea:57:a3:ab:5d:97:8b:24:da:cb:99:6b:8d:a4: ee:17:6e:62:6f:1e:3a:93:56:41:50:7e:21:fa:aa: 64:8d:84:8a:4a:17:19:ef:5c:89:30:19:c9:5d:d8: db:c3:bc:d5:e9:0b:2c:cc:df:8a:f4:4f:ff:db:26: aa:df:72:d2:f2:77:03:3e:29:78:3b:80:7d:f4:91: 20:b5:6d:be:0f:49:6b:9f:09:1d:b5:4c:63:96:4f: bb:4b:79:3a:ec:42:04:e3:ec:b4:02:ee:d3:06:6f: d5:ba:13:72:cf:f6:fc:bf:ae:27:52:2d:05:76:f5: 28:0f:7b:25:d3:44:e0:9d:40:17:c1:a9:49:43:b6: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:E4:0C:2E:22:E5:3D:69:E1:55:C5:9E:09:78:54:24:94:08:16 X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:11:86:d5:a7:a7:6a:97:76:f8:47:ce:54:bc:51:c8:e3:b2: 39:04:06:a7:f9:81:19:8f:ff:fd:24:0b:26:ab:07:60:ea:8e: b7:53:94:4e:d6:19:23:62:d2:97:8f:24:96:b4:63:8f:a9:e8: b3:b1:75:e2:4e:bf:cf:2c:08:d8:f3:61:05:9a:f1:ff:b5:8e: 69:25:b0:93:1d:61:1f:15:d3:12:b7:d1:18:3a:38:21:84:c1: 65:8a:f7:2b:e9:3f:10:83:aa:37:05:7a:96:3e:b8:06:49:d0: 28:fa:ae:14:b4:7b:07:21:70:77:30:05:a0:3a:7d:a9:53:35: f5:87:ce:ec:2f:21:3e:c3:6a:96:db:06:85:a6:17:9b:e4:4b: ee:f0:e3:d5:93:ab:b7:2c:65:50:6d:b2:fb:1f:1c:c9:64:71: 97:76:72:27:95:72:4d:4a:6d:c0:66:7d:fb:ff:84:19:01:12: fc:ed:a8:d6:b8:4d:21:55:7e:1f:46:00:a1:d7:7f:40:58:9b: 03:13:f6:28:6e:f1:88:56:ac:77:b2:6c:4c:4d:d6:03:ff:51: f6:1d:df:23:59:da:45:8a:ec:da:47:4f:5a:88:80:eb:aa:5f: a3:d0:a5:77:74:2a:6a:9e:90:7d:0a:97:a2:5b:22:17:71:70: ad:c3:fd:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjUwODIyMTkzNzIxWhcNMjUwODI5MTkzNzIxWjAYMRYwFAYD VQQDEw02OGE4YzZmMS1hNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O+87WHORX8M5h6dTPBCiNxWcDV+uDK5zsIKFvhuX0VGPQQDH8MjvWP2z5Q2 giLsiZ2EX1kXaL/+kqaNBXyK1d7G2AuSqtsgdTxp2ILrtLs1r+x7xTAuh1lg/hah gYOhrGV8L5oKhNDm/UFwhAXEh/7bC4fMizzW6lejq12XiyTay5lrjaTuF25ibx46 k1ZBUH4h+qpkjYSKShcZ71yJMBnJXdjbw7zV6QsszN+K9E//2yaq33LS8ncDPil4 O4B99JEgtW2+D0lrnwkdtUxjlk+7S3k67EIE4+y0Au7TBm/VuhNyz/b8v64nUi0F dvUoD3sl00TgnUAXwalJQ7bG/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4f5Awu IuU9aeFVxZ4JeFQklAgWMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwEYbVp6dql3b4R85UvFHI47I5BAan+YEZj//9JAsmqwdg6o63U5RO 1hkjYtKXjySWtGOPqeizsXXiTr/PLAjY82EFmvH/tY5pJbCTHWEfFdMSt9EYOjgh hMFlivcr6T8Qg6o3BXqWPrgGSdAo+q4UtHsHIXB3MAWgOn2pUzX1h87sLyE+w2qW 2waFpheb5Evu8OPVk6u3LGVQbbL7HxzJZHGXdnInlXJNSm3AZn37/4QZARL87ajW uE0hVX4fRgCh139AWJsDE/YobvGIVqx3smxMTdYD/1H2Hd8jWdpFiuzaR09aiIDr ql+j0KV3dCpqnpB9CpeiWyIXcXCtw/1S -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:49 2025 by rpki-client