$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: x+maaeCtcJw/xiWRSZeqDWWgrh1iI17wgfGZe0XelAM= Subject key identifier: 7E:28:34:F0:88:E4:30:56:D3:19:52:5E:A8:D5:B1:9F:B6:D6:B7:C2 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0C53 Signing time: Wed 02 Jul 2025 18:37:22 +0000 Manifest this update: Wed 02 Jul 2025 18:37:21 +0000 Manifest next update: Wed 09 Jul 2025 18:37:21 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: uCKpdrZipT+8QDq6+LqG34OwO80mzezkkebbvAV4rMQ=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: rjjlCBXic9PjXjyPWM+A+lhdUtqC6LPHHyzyg5jp9Pc=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Jul 2 18:37:21 2025 GMT Not After : Jul 9 18:37:21 2025 GMT Subject: CN=68657c62-8fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:61:ff:24:03:01:a7:ef:f7:89:96:b7:c8: 3d:0c:01:5d:63:af:fc:29:a3:cd:f2:ab:8a:5a:1d: 75:10:b1:66:27:7a:23:00:3c:15:e7:42:4d:51:0c: 6c:d5:51:cf:c3:50:40:cb:25:ac:08:ec:5b:03:af: 23:db:e1:85:3d:52:89:08:a5:5f:da:d4:d2:da:2b: 11:cf:0b:80:d8:6a:d4:10:6b:04:41:d5:93:ef:da: 36:92:16:bf:c4:0f:b9:70:ef:68:ad:66:e6:43:ac: 07:d3:ee:b1:1d:52:fe:8b:aa:39:09:2b:a7:f2:b4: 78:95:24:8f:b0:73:0d:d3:51:05:b1:eb:31:8f:cd: a5:6b:15:33:90:5a:b8:58:d3:30:a5:fb:27:68:de: 47:ae:4f:e3:f2:bf:e9:e3:17:04:d9:2a:00:94:47: 06:e4:33:a1:15:d2:8b:b8:ef:22:2b:0c:5c:fa:66: a8:a9:a9:24:b4:65:f1:e1:8d:78:7c:95:27:22:19: 05:4e:1a:f7:33:10:0e:fe:f3:33:87:ae:2d:84:80: e6:2d:0c:d1:09:fa:4f:4c:73:de:19:9f:d3:36:9e: 26:5e:ca:d0:d1:81:5b:e8:e6:4c:7b:0e:5e:0a:63: d5:dc:9c:73:c6:00:4d:c4:aa:35:82:86:b8:99:0a: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:34:F0:88:E4:30:56:D3:19:52:5E:A8:D5:B1:9F:B6:D6:B7:C2 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:00:27:bd:b6:f1:cd:3c:67:94:69:da:92:c2:f9:b2:27:d3: a4:e1:d7:08:c9:0e:0e:22:1a:3b:f3:5d:9b:48:15:a7:dc:e3: b7:98:66:f1:b6:20:79:bc:15:3e:24:d0:b6:ca:6d:77:ee:70: ad:30:53:6f:29:9c:24:c5:56:42:21:6e:83:87:16:02:81:c8: ec:33:50:46:73:bc:be:94:3d:c9:0a:83:1c:e7:f7:ce:c4:1a: 3f:66:ad:18:ac:cd:b0:cb:43:2c:c6:ff:ec:74:b1:0e:8f:12: 5a:46:9f:c1:9c:76:79:ac:81:44:82:c8:34:98:48:cb:a4:49: 87:b8:d0:4e:09:1b:92:90:6a:3f:fe:fd:8b:c5:0c:18:70:fe: b6:7b:e8:09:cc:78:20:d5:9d:05:44:96:72:08:e5:5c:55:9a: 85:10:ca:f9:39:1f:46:ee:25:c9:40:00:84:1a:da:16:80:2d: d8:80:ce:f2:5f:48:57:52:1c:e2:0d:83:b7:43:c7:5d:fd:3c: c0:f5:9a:75:bc:46:95:c9:c4:8f:27:b0:99:6c:31:8f:bd:75: b7:e5:f3:4c:37:bb:cc:97:5c:0f:55:08:73:4b:d2:c2:3d:c2: ec:a3:a3:02:51:e5:06:9d:b3:e9:a2:46:d8:a2:cf:d9:83:87: 17:eb:0e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUwNzAyMTgzNzIxWhcNMjUwNzA5MTgzNzIxWjAYMRYwFAYD VQQDEw02ODY1N2M2Mi04ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnhh/yQDAafv94mWt8g9DAFdY6/8KaPN8quKWh11ELFmJ3ojADwV50JNUQxs 1VHPw1BAyyWsCOxbA68j2+GFPVKJCKVf2tTS2isRzwuA2GrUEGsEQdWT79o2kha/ xA+5cO9orWbmQ6wH0+6xHVL+i6o5CSun8rR4lSSPsHMN01EFsesxj82laxUzkFq4 WNMwpfsnaN5Hrk/j8r/p4xcE2SoAlEcG5DOhFdKLuO8iKwxc+maoqakktGXx4Y14 fJUnIhkFThr3MxAO/vMzh64thIDmLQzRCfpPTHPeGZ/TNp4mXsrQ0YFb6OZMew5e CmPV3JxzxgBNxKo1goa4mQquzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4oNPCI 5DBW0xlSXqjVsZ+21rfCMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ACe9tvHNPGeUadqSwvmyJ9Ok4dcIyQ4OIho7812bSBWn3OO3mGbx tiB5vBU+JNC2ym137nCtMFNvKZwkxVZCIW6DhxYCgcjsM1BGc7y+lD3JCoMc5/fO xBo/Zq0YrM2wy0Msxv/sdLEOjxJaRp/BnHZ5rIFEgsg0mEjLpEmHuNBOCRuSkGo/ /v2LxQwYcP62e+gJzHgg1Z0FRJZyCOVcVZqFEMr5OR9G7iXJQACEGtoWgC3YgM7y X0hXUhziDYO3Q8dd/TzA9Zp1vEaVycSPJ7CZbDGPvXW35fNMN7vMl1wPVQhzS9LC PcLso6MCUeUGnbPpokbYos/Zg4cX6w5U -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:30 2025 by rpki-client