$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: jj9CP2YSC/sPM2eLv6jjHMX/Zznb+CS9mQEJdm42ljM= Subject key identifier: 0E:38:AD:B3:D4:72:94:F5:5E:E6:32:E6:CC:12:2B:88:26:38:73:48 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0186 Signing time: Sat 23 Aug 2025 03:47:51 +0000 Manifest this update: Sat 23 Aug 2025 03:47:51 +0000 Manifest next update: Sat 30 Aug 2025 03:47:51 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: Fac4M67gm1UUewmGJ6bhILhr1YYr2zsgT0wM2jxRo78=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=) 8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Aug 23 03:47:51 2025 GMT Not After : Aug 30 03:47:51 2025 GMT Subject: CN=68a939e7-d0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f8:44:42:40:58:8e:f5:c3:e6:2c:1d:85:79: 44:5b:92:dc:a1:4f:e9:b0:f1:7b:2f:8b:56:9d:41: 7d:b5:dc:f5:08:dd:9b:02:38:a8:00:d6:0b:a6:da: f3:4f:39:8e:ba:d9:df:82:6e:a0:d9:de:b2:71:5e: ad:b2:bc:67:33:b1:13:16:da:83:8d:10:1e:f2:43: 06:32:d1:84:cf:51:cb:f7:7a:ec:f3:94:d5:d9:f4: c6:ff:ef:79:b9:47:02:ce:6d:a7:93:07:18:38:97: 45:73:8a:46:78:a4:c3:53:2b:a3:fb:d3:8a:f2:8e: cd:23:af:6a:64:e8:a8:a6:a4:52:9d:90:86:a1:30: af:d4:d3:7a:b7:70:c2:d5:df:97:4f:9a:90:7c:33: 8d:a4:4e:ec:cc:1f:15:60:92:6b:ca:4e:e8:e2:27: 73:82:34:12:a1:45:a4:7d:37:66:7d:1d:3f:5b:4e: 67:35:82:94:54:03:35:84:70:c9:c6:9e:7e:69:b0: 37:2c:d2:ab:9d:19:a1:f6:30:a6:e8:f9:ec:eb:28: 7c:89:85:71:28:df:ca:57:9d:46:68:92:52:91:4a: 4a:94:72:ef:ef:9c:9f:51:cd:79:8b:6e:18:2f:e2: bb:9b:19:41:c5:b1:a0:3f:26:de:01:c8:99:0c:60: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:38:AD:B3:D4:72:94:F5:5E:E6:32:E6:CC:12:2B:88:26:38:73:48 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:35:18:73:c9:84:84:97:cb:23:9e:9b:50:28:fa:38:65:12: 3e:b5:3a:ec:54:df:c0:d1:66:da:28:b8:9e:b4:2a:b9:97:09: a6:f9:5b:c6:90:51:7f:1c:fe:58:48:f0:12:b8:26:00:d5:07: e6:e2:85:18:99:aa:ea:5b:e8:f1:f2:b1:41:72:37:35:e4:e7: 41:d4:a1:34:ed:7d:f2:4c:4b:38:25:54:99:7c:2b:50:ed:a9: a0:78:92:e0:f5:5e:6f:aa:2b:bf:43:18:bc:bf:2e:cf:e0:98: 3e:be:72:a3:9a:4c:92:d3:13:03:8c:29:ad:68:f9:34:cc:10: 51:e5:22:ae:45:59:46:0b:e8:db:e9:85:15:25:29:a4:a7:b5: 7f:a0:7d:7f:5b:36:96:89:49:63:c2:59:62:ed:e7:e5:52:d3: 97:42:a5:6d:8e:08:7e:97:b8:76:92:a4:8f:f5:1c:db:3a:fb: cc:a2:fa:56:f0:71:61:0c:d6:a3:74:fd:c0:6f:a8:63:ea:ef: ed:22:79:e6:5a:98:97:77:e5:3c:68:74:3b:ea:d8:c7:dd:b7: 88:46:50:40:66:1d:d1:6a:f8:5d:3a:04:68:03:6e:38:2b:10: 60:13:80:00:bd:d9:b1:ba:6b:ce:af:b8:16:c4:7c:10:6b:8c: 91:32:ca:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwODIzMDM0NzUxWhcNMjUwODMwMDM0NzUxWjAYMRYwFAYD VQQDEw02OGE5MzllNy1kMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfhEQkBYjvXD5iwdhXlEW5LcoU/psPF7L4tWnUF9tdz1CN2bAjioANYLptrz TzmOutnfgm6g2d6ycV6tsrxnM7ETFtqDjRAe8kMGMtGEz1HL93rs85TV2fTG/+95 uUcCzm2nkwcYOJdFc4pGeKTDUyuj+9OK8o7NI69qZOiopqRSnZCGoTCv1NN6t3DC 1d+XT5qQfDONpE7szB8VYJJryk7o4idzgjQSoUWkfTdmfR0/W05nNYKUVAM1hHDJ xp5+abA3LNKrnRmh9jCm6Pns6yh8iYVxKN/KV51GaJJSkUpKlHLv75yfUc15i24Y L+K7mxlBxbGgPybeAciZDGD21QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA44rbPU cpT1XuYy5swSK4gmOHNIMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRNRhzyYSEl8sjnptQKPo4ZRI+tTrsVN/A0WbaKLietCq5lwmm+VvG kFF/HP5YSPASuCYA1Qfm4oUYmarqW+jx8rFBcjc15OdB1KE07X3yTEs4JVSZfCtQ 7amgeJLg9V5vqiu/Qxi8vy7P4Jg+vnKjmkyS0xMDjCmtaPk0zBBR5SKuRVlGC+jb 6YUVJSmkp7V/oH1/WzaWiUljwlli7eflUtOXQqVtjgh+l7h2kqSP9RzbOvvMovpW 8HFhDNajdP3Ab6hj6u/tInnmWpiXd+U8aHQ76tjH3beIRlBAZh3RavhdOgRoA244 KxBgE4AAvdmxumvOr7gWxHwQa4yRMsrs -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:41 2025 by rpki-client