$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: Toy/oBjdTvO0TRBWaoeiM9BxEZZLzXLZAhHKt8kDEfw= Subject key identifier: 9B:E6:27:D0:B7:B3:42:2A:74:CA:92:11:AA:7F:EE:77:7F:30:A3:A4 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0C7C Signing time: Fri 22 Aug 2025 18:25:30 +0000 Manifest this update: Fri 22 Aug 2025 18:25:29 +0000 Manifest next update: Fri 29 Aug 2025 18:25:29 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: y3yFsqdV0yw2VQeJEtnH1fKejELJAKOJ42FWHNNudYk=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Aug 22 18:25:29 2025 GMT Not After : Aug 29 18:25:29 2025 GMT Subject: CN=68a8b619-7c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:e9:62:3c:25:3d:b6:2f:e8:0f:39:80:27: e8:94:fb:72:2a:05:3d:c5:2b:72:c9:35:75:33:9f: 0a:c7:79:78:79:42:91:60:59:46:4c:0a:fc:d7:a2: 24:dc:08:13:17:c8:6d:fb:ff:c2:d5:a4:e1:37:94: 4f:e7:8a:ba:12:36:ca:d9:47:f0:f2:80:f8:33:44: 7d:66:1d:62:82:8c:f4:d0:9e:6c:cd:a7:0b:fd:0e: fb:5a:77:d7:4d:e1:23:2d:41:5f:20:54:11:04:12: a9:af:f8:50:1d:c2:dd:6d:4b:75:a4:81:50:33:bd: 2e:9e:20:b5:88:61:ab:aa:b5:a1:96:11:71:e9:9a: 72:f9:6d:ad:02:94:10:e0:0c:10:45:26:0f:b1:06: aa:a3:a1:ce:14:47:3c:e7:40:84:52:15:37:59:a9: ce:18:81:4f:2b:d8:9d:08:fe:14:aa:b9:39:a6:bd: fe:9e:51:2d:42:76:c8:7e:03:41:2f:80:f1:cd:71: d6:45:ff:8f:22:7c:4f:18:5c:eb:3f:74:a6:a2:0e: 00:72:d9:73:2e:65:3f:77:fd:f6:31:96:8a:34:ac: 9a:6d:4f:1e:3e:2d:39:79:5a:07:96:9b:4e:bc:4c: 51:a6:82:35:de:f7:61:5c:69:06:9a:61:71:fb:c4: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:27:D0:B7:B3:42:2A:74:CA:92:11:AA:7F:EE:77:7F:30:A3:A4 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:7d:e2:10:5a:11:fd:75:48:ea:d7:09:05:bf:5c:20:d1:0e: c2:22:e1:3e:5c:80:a6:af:69:91:d0:89:c4:92:fc:05:bc:b7: cd:f4:b3:ab:2b:98:06:7f:fb:1b:f3:f0:a7:b3:e3:7f:0a:ce: bb:40:82:cf:11:b8:76:ad:b3:f8:8e:42:e4:f7:2a:ac:8c:0b: 25:95:41:39:cd:5d:6e:df:e2:98:c0:06:9d:92:13:e2:49:02: 47:a3:0f:97:23:dc:2a:aa:26:89:2d:be:ca:ee:79:88:5e:df: aa:e7:4e:2d:99:0c:f1:48:78:23:e4:ec:bd:31:29:4e:fb:39: df:74:16:a1:b0:dc:89:b4:62:b8:59:17:b9:78:0d:85:3e:88: cc:85:e3:4c:73:9b:d8:15:96:81:6c:53:ef:01:2a:e1:b7:d1: fb:e9:1e:46:18:58:a2:f1:10:fe:76:25:0a:5c:8e:f5:8d:24: 12:04:6d:65:6e:a8:bb:f9:74:46:68:56:2b:ca:1f:f9:f4:8e: d2:cd:31:94:ac:c4:08:ec:56:2e:f3:8e:32:21:72:d4:c4:0d: 22:81:07:46:e9:dc:1b:32:5b:66:11:49:be:01:fb:ca:24:77: dd:22:53:a3:6c:68:e4:c3:88:cc:bc:78:4d:8f:b8:2d:23:87: f1:86:06:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUwODIyMTgyNTI5WhcNMjUwODI5MTgyNTI5WjAYMRYwFAYD VQQDEw02OGE4YjYxOS03YzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJbpYjwlPbYv6A85gCfolPtyKgU9xStyyTV1M58Kx3l4eUKRYFlGTAr816Ik 3AgTF8ht+//C1aThN5RP54q6EjbK2Ufw8oD4M0R9Zh1igoz00J5szacL/Q77WnfX TeEjLUFfIFQRBBKpr/hQHcLdbUt1pIFQM70uniC1iGGrqrWhlhFx6Zpy+W2tApQQ 4AwQRSYPsQaqo6HOFEc850CEUhU3WanOGIFPK9idCP4Uqrk5pr3+nlEtQnbIfgNB L4DxzXHWRf+PInxPGFzrP3Smog4ActlzLmU/d/32MZaKNKyabU8ePi05eVoHlptO vExRpoI13vdhXGkGmmFx+8ROqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvmJ9C3 s0IqdMqSEap/7nd/MKOkMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSfeIQWhH9dUjq1wkFv1wg0Q7CIuE+XICmr2mR0InEkvwFvLfN9LOr K5gGf/sb8/Cns+N/Cs67QILPEbh2rbP4jkLk9yqsjAsllUE5zV1u3+KYwAadkhPi SQJHow+XI9wqqiaJLb7K7nmIXt+q504tmQzxSHgj5Oy9MSlO+znfdBahsNyJtGK4 WRe5eA2FPojMheNMc5vYFZaBbFPvASrht9H76R5GGFii8RD+diUKXI71jSQSBG1l bqi7+XRGaFYryh/59I7SzTGUrMQI7FYu844yIXLUxA0igQdG6dwbMltmEUm+AfvK JHfdIlOjbGjkw4jMvHhNj7gtI4fxhgb7 -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:07 2025 by rpki-client