$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: sELe0kTjqiPeKK0ddAkX+60D93eHflmaN8Qif7BbZg4= Subject key identifier: 49:08:04:D5:90:B6:5C:4D:AB:21:34:1A:4D:9C:38:70:5B:C2:C4:2D Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03CA Signing time: Sat 05 Jul 2025 01:08:34 +0000 Manifest this update: Sat 05 Jul 2025 01:08:34 +0000 Manifest next update: Sat 12 Jul 2025 01:08:34 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: MpxqNFSmWpprZn3u1LE6gKdoQoGzymuFl9tTVI8AT3k=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 7R3hysbeSbUFb8HWymJrPzj8ZBNf1N511Ldy7MXSF9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Jul 5 01:08:34 2025 GMT Not After : Jul 12 01:08:34 2025 GMT Subject: CN=68687b12-40a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:1d:68:8e:d0:8f:b0:c1:1b:ba:a6:4b:4b: c7:d9:35:d5:f0:48:29:8d:2c:8b:fd:5d:d2:59:c7: 8f:a5:cd:2a:44:3f:43:fe:fe:b6:41:c5:a7:4e:57: 47:95:11:86:e4:aa:21:28:f3:52:63:00:26:f0:3a: 67:52:1f:b9:9f:61:f6:37:05:8e:d4:e4:d1:89:71: 5e:c1:d9:8e:a5:7e:60:9d:e4:2c:4e:89:bb:8b:11: 13:2d:1b:c5:fd:e7:e2:19:5c:ff:be:84:c8:70:7a: f7:8b:28:c7:9c:d2:b5:17:25:e9:d7:ef:5d:24:95: 52:dd:5c:f8:14:b8:74:9f:0c:f4:13:fa:57:21:a7: 71:db:22:ae:58:c9:b2:d3:a5:7f:19:e7:bc:33:e9: f0:0f:c7:66:80:13:07:86:d8:68:c7:3f:6e:31:e7: bf:0b:32:bd:14:2a:e9:f4:7d:d8:ff:45:bf:e5:41: 06:72:ba:4d:a9:1e:a0:d0:b6:d9:56:50:5b:0a:33: 20:c8:64:34:39:00:43:fc:ad:48:ca:b7:cd:5a:03: d4:ba:df:54:e2:27:ae:45:35:9f:27:ab:bf:6d:07: 22:57:f6:a1:9e:17:53:6c:c0:68:92:1a:96:8d:04: 67:72:90:4f:6b:2c:d6:a3:c1:eb:e5:ad:0b:ed:a3: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:04:D5:90:B6:5C:4D:AB:21:34:1A:4D:9C:38:70:5B:C2:C4:2D X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a8:67:5d:c9:9e:cb:1d:3b:ad:ba:08:10:b3:f9:d4:9b:e1: 69:82:55:ae:63:1e:89:67:c6:71:0d:b1:fe:cb:e6:24:fc:bc: 03:64:07:24:21:9b:f5:fd:5e:a4:c0:7d:66:23:8f:24:04:c1: 33:93:95:30:3f:22:a5:bb:96:7b:a2:87:ad:1e:55:0b:eb:1e: c8:b8:a2:57:00:01:9f:b6:4c:61:ba:42:90:b7:99:18:a6:ec: 0e:66:d1:8c:ea:21:a5:b2:e9:59:8e:71:ce:d2:bc:ce:bf:04: e1:bc:15:c1:d8:50:dc:e5:8a:4d:72:be:55:c7:64:40:c2:46: 7f:41:ea:5d:e2:75:54:2e:a7:59:27:d9:a3:40:59:ed:42:f4: 59:cc:bd:02:e6:04:90:cd:fd:6f:d8:bc:4e:ca:2b:e2:77:24: 09:f5:20:15:fa:b4:17:17:09:b9:09:8a:b8:62:04:6f:42:5f: 40:74:9a:a7:6c:11:ad:90:d9:4d:d1:a8:f5:1d:a9:42:01:57: 3a:81:e5:c8:e3:e0:96:9d:d2:3b:5c:35:4d:06:d3:3a:8b:9c: 3f:ad:58:e6:c0:fc:e5:4a:1c:2e:1c:70:bd:d4:3d:9e:29:80: 0f:64:9c:11:84:a2:32:74:b3:23:0a:a0:9b:d4:ee:ba:9a:c2: f4:1b:46:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwNzA1MDEwODM0WhcNMjUwNzEyMDEwODM0WjAYMRYwFAYD VQQDEw02ODY4N2IxMi00MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOkdaI7Qj7DBG7qmS0vH2TXV8EgpjSyL/V3SWcePpc0qRD9D/v62QcWnTldH lRGG5KohKPNSYwAm8DpnUh+5n2H2NwWO1OTRiXFewdmOpX5gneQsTom7ixETLRvF /efiGVz/voTIcHr3iyjHnNK1FyXp1+9dJJVS3Vz4FLh0nwz0E/pXIadx2yKuWMmy 06V/Gee8M+nwD8dmgBMHhthoxz9uMee/CzK9FCrp9H3Y/0W/5UEGcrpNqR6g0LbZ VlBbCjMgyGQ0OQBD/K1IyrfNWgPUut9U4ieuRTWfJ6u/bQciV/ahnhdTbMBokhqW jQRncpBPayzWo8Hr5a0L7aPqpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkIBNWQ tlxNqyE0Gk2cOHBbwsQtMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkqGddyZ7LHTutuggQs/nUm+FpglWuYx6JZ8ZxDbH+y+Yk/LwDZAck IZv1/V6kwH1mI48kBMEzk5UwPyKlu5Z7ooetHlUL6x7IuKJXAAGftkxhukKQt5kY puwOZtGM6iGlsulZjnHO0rzOvwThvBXB2FDc5YpNcr5Vx2RAwkZ/Qepd4nVULqdZ J9mjQFntQvRZzL0C5gSQzf1v2LxOyividyQJ9SAV+rQXFwm5CYq4YgRvQl9AdJqn bBGtkNlN0aj1HalCAVc6geXI4+CWndI7XDVNBtM6i5w/rVjmwPzlShwuHHC91D2e KYAPZJwRhKIydLMjCqCb1O66msL0G0Z0 -----END CERTIFICATE-----Generated at Sat Jul 5 21:29:18 2025 by rpki-client