$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft File: MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json) Hash identifier: W3TCslSlq8J1tygi7hLSgPYPoMLrmYjVCLAnzplILOI= Subject key identifier: 24:C4:74:28:00:6B:F7:31:99:B1:4E:B8:C0:81:D3:27:0D:77:9C:26 Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft Manifest number: 0552 Signing time: Fri 22 Aug 2025 23:40:35 +0000 Manifest this update: Fri 22 Aug 2025 23:40:35 +0000 Manifest next update: Fri 29 Aug 2025 23:40:35 +0000 Files and hashes: 1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: 0tX0i0SNc9Ab4+3brww1t69xOM4xOPvW1Jh8DUQYWy4=) 2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=) 3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Validity Not Before: Aug 22 23:40:35 2025 GMT Not After : Aug 29 23:40:35 2025 GMT Subject: CN=68a8fff3-5b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:85:32:8e:5a:ad:68:53:e5:31:b2:2a:1f: ae:3d:48:db:99:81:6a:dc:dd:8e:17:ed:28:c0:42: af:3a:d8:65:4e:cd:50:47:98:e3:a0:24:15:8e:21: 25:67:7e:c2:02:85:e0:2b:3a:15:4e:64:ba:f6:e5: e6:bf:c3:34:04:0a:46:eb:87:41:9f:81:63:42:82: 39:41:1a:b3:ee:ae:4a:4f:2d:53:48:c1:59:ca:3b: aa:63:c6:3e:53:14:04:ad:a4:5c:99:a7:5f:3e:02: 66:4a:5c:b8:c5:46:5c:ce:75:d7:ce:2f:60:d1:9e: 1a:37:1c:5d:85:24:95:ea:84:e0:11:66:86:73:b2: 4c:e9:83:3e:ce:4c:ee:35:fc:92:f1:bb:b0:2d:c9: be:2b:06:3a:26:da:11:f4:14:bd:04:eb:23:9e:08: 19:86:35:e9:1b:bc:54:94:25:1a:c5:37:19:db:26: d9:b2:d1:f5:5f:e2:08:07:21:00:d8:10:cc:f6:65: e2:d1:52:e9:bd:fe:f0:6c:99:b2:03:ca:57:33:ef: 95:b9:5c:f9:27:16:9e:96:d5:51:a2:07:27:7f:52: 6b:ee:37:46:2b:59:49:b2:03:99:08:47:38:5e:0d: 3f:46:03:0b:4b:12:ec:4b:86:f4:18:df:79:ac:ad: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:74:28:00:6B:F7:31:99:B1:4E:B8:C0:81:D3:27:0D:77:9C:26 X509v3 Authority Key Identifier: keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:a9:70:59:78:f8:fe:c8:6e:43:f7:67:c9:d5:04:54:fe: 24:27:7b:ed:65:0e:d3:bd:cb:39:1d:c1:60:ce:a5:a1:8e:41: 4a:c7:fa:82:e3:ab:98:9b:d8:01:5a:dd:1d:e1:26:33:b1:91: 09:b4:0f:cd:70:bd:62:be:16:7a:33:b8:b0:b0:ae:bd:c7:ee: ec:56:61:4b:97:96:f9:1b:2e:6a:50:de:ae:86:b1:ef:4e:79: 00:cd:d8:db:f5:19:ff:0c:e8:2f:28:e3:ea:81:65:30:9c:06: df:86:8c:c6:66:a4:2b:cc:1b:15:52:0b:af:9d:30:be:f4:aa: b4:bb:df:3a:8e:54:c1:67:86:b8:6d:7a:8a:e5:b3:e7:64:41: 5c:a4:f1:fb:2e:3e:b3:a9:9c:66:50:ec:5f:8f:da:db:47:fd: 67:b1:54:c4:83:c2:b7:08:ca:76:7a:b0:63:63:07:30:90:f5: 8f:6f:2e:10:25:99:a7:56:c2:b2:82:a1:80:cb:c2:92:cf:41: bd:af:ea:8a:de:55:dd:1b:24:ee:7c:e0:f1:b0:46:1b:82:4b: f8:d5:df:b0:e9:15:59:96:6f:9c:6a:9e:5e:80:d3:5e:f8:a7: d2:95:36:a7:aa:27:a9:61:96:93:4f:ec:8b:b9:5c:78:87:94: 22:30:21:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF ODg1RDdDNTAwHhcNMjUwODIyMjM0MDM1WhcNMjUwODI5MjM0MDM1WjAYMRYwFAYD VQQDEw02OGE4ZmZmMy01Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7iFMo5arWhT5TGyKh+uPUjbmYFq3N2OF+0owEKvOthlTs1QR5jjoCQVjiEl Z37CAoXgKzoVTmS69uXmv8M0BApG64dBn4FjQoI5QRqz7q5KTy1TSMFZyjuqY8Y+ UxQEraRcmadfPgJmSly4xUZcznXXzi9g0Z4aNxxdhSSV6oTgEWaGc7JM6YM+zkzu NfyS8buwLcm+KwY6JtoR9BS9BOsjnggZhjXpG7xUlCUaxTcZ2ybZstH1X+IIByEA 2BDM9mXi0VLpvf7wbJmyA8pXM++VuVz5JxaeltVRogcnf1Jr7jdGK1lJsgOZCEc4 Xg0/RgMLSxLsS4b0GN95rK3RXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTEdCgA a/cxmbFOuMCB0ycNd5wmMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1 OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0VFMy85QTc3QUEyQTA1OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFL eWFrbVJNbHZlS2pvaGRmRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0a6lwWXj4/shuQ/dnydUEVP4kJ3vtZQ7Tvcs5HcFgzqWhjkFKx/qC 46uYm9gBWt0d4SYzsZEJtA/NcL1ivhZ6M7iwsK69x+7sVmFLl5b5Gy5qUN6uhrHv TnkAzdjb9Rn/DOgvKOPqgWUwnAbfhozGZqQrzBsVUguvnTC+9Kq0u986jlTBZ4a4 bXqK5bPnZEFcpPH7Lj6zqZxmUOxfj9rbR/1nsVTEg8K3CMp2erBjYwcwkPWPby4Q JZmnVsKygqGAy8KSz0G9r+qK3lXdGyTufODxsEYbgkv41d+w6RVZlm+cap5egNNe +KfSlTanqiepYZaTT+yLuVx4h5QiMCGA -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:07 2025 by rpki-client