$ rpki-client -vvf rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft File: moOQ_87kYoLKpxzdePBmlPjT1bY.mft (raw, json) Hash identifier: U0CRJNuvRxCcushxfXf9Y7lWJS8+GiTyQc7ZDoZ8TIM= Subject key identifier: 6D:7C:D9:E2:3D:BB:12:64:32:93:19:04:1B:FF:C8:6F:9E:E7:8C:61 Authority key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6 Certificate issuer: /CN=A918B531/serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft Manifest number: 1F Signing time: Sat 23 Aug 2025 08:07:13 +0000 Manifest this update: Sat 23 Aug 2025 08:07:12 +0000 Manifest next update: Sat 30 Aug 2025 08:07:12 +0000 Files and hashes: 1: moOQ_87kYoLKpxzdePBmlPjT1bY.crl (hash: AjIhIqiZo3ajrOhseryDYIQxAfEUfPGZ8qvyzk28i0c=) 2: C0B3AE3056F511F0AF865C85C4F9AE02.roa (hash: Kq4RGZv8vbdYw9gIflVVj8xPIzA+Pq4dcfxTuqEJ7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6 Validity Not Before: Aug 23 08:07:12 2025 GMT Not After : Aug 30 08:07:12 2025 GMT Subject: CN=68a976b1-8455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:ba:a4:ac:c2:79:62:8e:f8:17:da:76:e6: 2b:46:86:94:bf:47:0c:08:33:e3:80:ee:4c:0c:21: 9e:53:5a:8a:19:fb:9c:f1:e5:75:aa:42:06:29:4f: fc:d4:b7:4f:99:0a:a8:c3:33:bb:62:15:9d:ba:d8: 5a:95:21:7c:87:85:e4:a5:6d:9e:a8:f0:e7:13:dd: c2:54:37:97:71:5e:6c:2e:89:11:11:1b:90:d4:d6: 66:a5:e1:9a:75:d3:81:22:45:51:88:0d:fe:db:34: 5c:1c:21:0d:f6:f5:70:14:05:f6:ea:d7:5f:cb:3b: 09:8d:50:3a:66:10:02:7c:3c:7a:ca:a0:d2:eb:91: 24:ce:07:3e:b4:ec:f1:60:12:8e:ad:23:7c:1d:48: 40:97:3f:f2:a0:db:42:38:1e:41:0a:e0:2f:4e:fb: 0e:3b:58:24:1a:c2:de:02:d6:ee:5b:4d:f0:45:0f: a7:ad:08:32:14:53:00:12:5c:c6:41:1c:32:31:b2: 98:8b:7c:71:cb:a1:ae:76:cb:60:43:80:ea:30:a4: 45:ab:0d:e5:ec:f4:de:14:e3:84:ac:80:67:18:36: 4e:85:1c:0c:99:0b:7e:53:dc:8f:41:20:33:2f:8b: 92:b3:97:96:5c:b0:1b:02:c4:3a:8e:2f:48:52:1b: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7C:D9:E2:3D:BB:12:64:32:93:19:04:1B:FF:C8:6F:9E:E7:8C:61 X509v3 Authority Key Identifier: keyid:9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:11:8e:66:95:b2:9c:29:c4:22:2e:a8:ca:d8:bf:4c:c3:e3: 28:8b:7e:86:9f:cb:29:6d:0f:7d:d4:03:f7:bd:ea:ad:e6:4b: 74:c6:9a:f6:29:4e:b3:e0:2a:76:22:e6:14:cf:be:36:2b:81: 4c:dc:24:10:29:67:7e:b3:dd:4d:09:a1:75:bc:d9:29:5e:d8: 68:0e:87:6e:cd:c6:07:65:6d:ce:fb:16:8e:80:49:51:ef:a2: ec:4c:53:c6:70:43:e6:49:fa:ff:94:81:d1:60:69:7a:f5:ff: f0:87:19:78:37:9e:83:54:89:56:b1:1e:3b:66:8e:3d:99:67: a3:4a:a6:ef:8a:7a:af:94:49:7d:ea:68:e0:60:77:27:27:22: a2:16:49:d5:4e:be:d1:89:e4:df:97:d7:de:c9:b2:f8:8e:79: e4:72:85:62:ca:2d:27:0f:bc:7d:a0:94:8b:3c:37:38:a8:05: 5b:ba:cb:6b:f4:77:a1:6e:25:16:e0:c0:de:75:96:31:b9:84: e4:cc:b4:fd:d6:18:f7:c2:66:c1:0c:3c:50:3a:4f:f0:d0:b5: a8:02:2a:f8:14:d9:62:b3:e4:63:5e:c6:ef:5d:0d:f3:5e:a2: 14:0f:0f:64:a9:c6:e1:98:25:27:fe:73:e8:f7:31:f8:78:f2: 2f:2f:86:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjUzMTExMC8GA1UEBRMoOUE4MzkwRkZDRUU0NjI4MkNBQTcxQ0RENzhGMDY2OTRG OEQzRDVCNjAeFw0yNTA4MjMwODA3MTJaFw0yNTA4MzAwODA3MTJaMBgxFjAUBgNV BAMTDTY4YTk3NmIxLTg0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiuLqkrMJ5Yo74F9p25itGhpS/RwwIM+OA7kwMIZ5TWooZ+5zx5XWqQgYpT/zU t0+ZCqjDM7tiFZ262FqVIXyHheSlbZ6o8OcT3cJUN5dxXmwuiRERG5DU1mal4Zp1 04EiRVGIDf7bNFwcIQ329XAUBfbq11/LOwmNUDpmEAJ8PHrKoNLrkSTOBz607PFg Eo6tI3wdSECXP/Kg20I4HkEK4C9O+w47WCQawt4C1u5bTfBFD6etCDIUUwASXMZB HDIxspiLfHHLoa52y2BDgOowpEWrDeXs9N4U44SsgGcYNk6FHAyZC35T3I9BIDMv i5Kzl5ZcsBsCxDqOL0hSG4pbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbXzZ4j27 EmQykxkEG//Ib57njGEwHwYDVR0jBBgwFoAUmoOQ/87kYoLKpxzdePBmlPjT1bYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNTMxLzAxODQ5NDUyNTZG NTExRjBCODM5NEI4NEM0RjlBRTAyL21vT1FfODdrWW9MS3B4emRlUEJtbFBqVDFi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbW9PUV84N2tZb0xLcHh6ZGVQQm1sUGpUMWJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NTMxLzAxODQ5NDUyNTZGNTExRjBCODM5NEI4NEM0RjlBRTAyL21vT1FfODdrWW9M S3B4emRlUEJtbFBqVDFiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALIRjmaVspwpxCIuqMrYv0zD4yiLfoafyyltD33UA/e96q3mS3TGmvYp TrPgKnYi5hTPvjYrgUzcJBApZ36z3U0JoXW82Sle2GgOh27Nxgdlbc77Fo6ASVHv ouxMU8ZwQ+ZJ+v+UgdFgaXr1//CHGXg3noNUiVaxHjtmjj2ZZ6NKpu+Keq+USX3q aOBgdycnIqIWSdVOvtGJ5N+X197JsviOeeRyhWLKLScPvH2glIs8NzioBVu6y2v0 d6FuJRbgwN51ljG5hOTMtP3WGPfCZsEMPFA6T/DQtagCKvgU2WKz5GNexu9dDfNe ohQPD2SpxuGYJSf+c+j3Mfh48i8vhv0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:15 2025 by rpki-client