$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: iy5Z7R8T0BSgo2zUJkxi+gjnbvqZJuP3+TcnsSv6VT0= Subject key identifier: 20:3C:17:60:D9:CF:13:A6:F2:B9:C0:34:1C:D0:22:11:5A:F9:4A:44 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0C6D Signing time: Fri 22 Aug 2025 18:28:50 +0000 Manifest this update: Fri 22 Aug 2025 18:28:50 +0000 Manifest next update: Fri 29 Aug 2025 18:28:50 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: bk4YzLIzwqfnXKgv0EYBtsN8X/GzFf1HDhzdj1Waz8g=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: rjjlCBXic9PjXjyPWM+A+lhdUtqC6LPHHyzyg5jp9Pc=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Aug 22 18:28:50 2025 GMT Not After : Aug 29 18:28:50 2025 GMT Subject: CN=68a8b6e2-81a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:dc:48:42:17:02:3f:f4:be:97:3d:8c:e2: 3e:03:1e:c5:0a:2c:dd:15:7c:7a:86:e6:e8:5a:ac: a1:2f:02:20:c5:06:04:3e:d6:85:9d:bb:90:95:47: 82:16:28:e3:dd:53:13:16:3c:76:9d:a2:8e:5f:5b: 8b:07:86:ed:83:27:57:46:7d:73:f8:6e:f7:2d:dc: 4f:ba:45:26:9d:00:95:f9:56:cc:a0:ab:8d:0d:03: b4:1c:0a:6f:f7:32:75:50:b1:b7:d8:16:49:0c:bb: 52:b7:31:07:f4:4a:eb:e8:b7:76:64:27:3c:df:56: a4:bb:77:56:88:1a:77:63:0e:62:7a:0d:3b:f8:9c: 99:4a:75:e2:4e:af:13:78:77:82:4a:54:13:a0:fc: 4c:ed:5e:78:a9:c3:1a:be:6d:7d:af:d2:73:88:4c: 67:03:e6:76:34:82:b4:a4:08:77:4e:b6:a9:3d:d5: 2d:e5:46:dd:76:ca:bb:31:e0:12:34:49:5d:d7:7b: 72:bc:0b:7f:3d:3f:ae:15:d2:f8:f3:c0:1a:ec:c4: 45:50:39:41:32:30:a3:40:73:e5:43:8a:15:87:3e: 06:22:f7:2b:a7:cb:6e:20:74:43:f4:ec:b7:f5:30: 87:7a:cc:48:4c:69:43:4b:42:c9:84:62:09:f8:9d: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3C:17:60:D9:CF:13:A6:F2:B9:C0:34:1C:D0:22:11:5A:F9:4A:44 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:75:93:25:15:18:23:67:19:44:e3:e1:e7:c2:e3:ae:df:35: 43:21:8b:8f:7e:84:c7:11:79:53:20:6c:ee:cd:6a:eb:6a:04: 57:b0:0e:cf:5d:86:a5:01:26:69:cc:e0:ea:69:f2:c1:9a:6f: 1c:f9:52:0c:e8:79:6d:0e:33:48:44:a1:fa:2e:36:b6:2d:57: 8e:54:c3:65:d1:1e:5f:52:05:ab:ab:e0:7d:bd:e0:40:7a:8c: 33:35:2d:40:37:c0:39:9f:ba:a6:fc:da:85:15:3c:ce:0d:a7: 77:6e:9e:9d:f4:df:2d:98:3c:b7:fd:bf:77:a1:f6:aa:dd:08: 26:1d:cf:ed:73:fe:5a:b1:6c:9d:06:56:48:62:46:a6:35:c7: e7:41:b2:2a:a3:6d:1b:34:67:32:75:75:28:bb:45:aa:61:ed: da:10:16:b7:d2:44:40:25:1e:18:d4:2a:9b:91:65:ab:ee:cd: 5d:64:7b:40:7f:a2:78:2c:b7:db:80:5a:69:e9:59:8c:eb:16: 83:f6:ba:87:f4:83:f1:94:cd:df:ec:2f:71:c7:96:84:9b:86: 51:0a:78:e4:f5:83:e1:26:e5:d2:dc:92:cf:b4:4b:8e:57:93: 74:5d:53:16:42:f7:7c:72:74:c7:cb:a5:1a:ed:2f:cf:1d:91: d8:77:11:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUwODIyMTgyODUwWhcNMjUwODI5MTgyODUwWjAYMRYwFAYD VQQDEw02OGE4YjZlMi04MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ufcSEIXAj/0vpc9jOI+Ax7FCizdFXx6huboWqyhLwIgxQYEPtaFnbuQlUeC Fijj3VMTFjx2naKOX1uLB4btgydXRn1z+G73LdxPukUmnQCV+VbMoKuNDQO0HApv 9zJ1ULG32BZJDLtStzEH9Err6Ld2ZCc831aku3dWiBp3Yw5ieg07+JyZSnXiTq8T eHeCSlQToPxM7V54qcMavm19r9JziExnA+Z2NIK0pAh3TrapPdUt5Ubddsq7MeAS NEld13tyvAt/PT+uFdL488Aa7MRFUDlBMjCjQHPlQ4oVhz4GIvcrp8tuIHRD9Oy3 9TCHesxITGlDS0LJhGIJ+J2eIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA8F2DZ zxOm8rnANBzQIhFa+UpEMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcdZMlFRgjZxlE4+HnwuOu3zVDIYuPfoTHEXlTIGzuzWrragRXsA7P XYalASZpzODqafLBmm8c+VIM6HltDjNIRKH6Lja2LVeOVMNl0R5fUgWrq+B9veBA eowzNS1AN8A5n7qm/NqFFTzODad3bp6d9N8tmDy3/b93ofaq3QgmHc/tc/5asWyd BlZIYkamNcfnQbIqo20bNGcydXUou0WqYe3aEBa30kRAJR4Y1CqbkWWr7s1dZHtA f6J4LLfbgFpp6VmM6xaD9rqH9IPxlM3f7C9xx5aEm4ZRCnjk9YPhJuXS3JLPtEuO V5N0XVMWQvd8cnTHy6Ua7S/PHZHYdxH5 -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:08 2025 by rpki-client