$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: aC3LZQ9Ek24hVu2czhY7aHypnG1qlorNamIowGJRemw= Subject key identifier: 07:C4:E1:8C:91:6A:AD:2F:C8:39:2B:31:5B:E3:C8:5B:5D:56:B4:CB Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1466 Signing time: Fri 22 Aug 2025 17:01:49 +0000 Manifest this update: Fri 22 Aug 2025 17:01:48 +0000 Manifest next update: Fri 29 Aug 2025 17:01:48 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: GQalzxsq/rGXgiDFtteuxXOlXsR3j94tvR2qob3QQrw=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5232 (0x1470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Aug 22 17:01:48 2025 GMT Not After : Aug 29 17:01:48 2025 GMT Subject: CN=68a8a27d-7552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:d4:38:1b:47:a5:f5:f2:52:02:e6:b1:7c: 41:bc:08:99:77:b1:60:94:60:bc:e9:6a:e3:5e:1d: 74:31:94:fa:23:b8:aa:04:5e:a7:4d:19:26:be:02: f5:3d:b7:d8:5e:00:2f:05:61:83:57:49:d9:fc:54: cd:aa:40:35:61:e1:8b:ca:27:8d:f8:4c:25:fc:46: c6:ae:26:8a:71:33:cf:b1:88:a4:9f:86:3d:5a:72: 20:d2:a7:0b:f5:60:05:c4:50:85:b3:12:94:8d:02: 6c:95:98:8a:d7:a8:3b:90:4c:5c:65:f1:5b:05:25: bf:34:4c:30:48:f5:d8:db:ac:6d:bc:53:a7:a1:a7: 8f:7c:8b:3f:bc:dc:a4:b7:be:c6:f3:14:49:51:26: 7a:35:88:8e:c5:9b:8c:a8:b7:0c:21:20:dc:d0:7f: fb:1b:18:fb:02:90:fc:e2:8d:01:4b:ab:8c:0f:7a: 1d:2e:f2:82:4a:26:75:90:2a:67:df:5f:40:12:db: a7:75:be:d2:95:ac:af:df:c1:81:d1:a4:25:d7:12: 1d:3f:ec:5a:66:d6:3c:a3:15:2e:a0:70:e5:79:03: 07:c1:ba:c8:15:8f:18:02:f3:67:95:e0:f1:6d:91: a6:c9:c0:2b:3c:a2:26:f7:f4:86:c2:3c:5f:90:0b: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C4:E1:8C:91:6A:AD:2F:C8:39:2B:31:5B:E3:C8:5B:5D:56:B4:CB X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:62:eb:cf:bb:20:8b:0a:f4:e3:31:7e:5a:46:b6:96:6e:f9: 39:05:07:14:87:56:a7:1a:0c:40:5e:c3:63:b2:2e:90:bb:b8: a6:f6:a3:78:63:22:10:0b:73:c5:c1:e0:f6:ab:cd:7d:6c:9b: a6:a9:e3:9f:df:5d:4b:33:f6:d0:31:78:3d:86:28:eb:1e:16: 96:3d:a6:e1:a7:18:fb:5b:be:8f:78:63:9f:67:06:c1:c3:0b: d3:cd:9e:9d:da:9c:a0:ec:5a:ae:f0:aa:12:13:e5:4c:3d:7d: 7c:47:14:3b:9f:37:ef:ff:91:c4:f7:ce:56:61:da:5e:5b:43: 30:24:da:03:cb:82:b2:4a:69:56:8f:b9:5a:e8:86:c7:2f:a0: e1:36:8e:b4:65:a1:ce:39:94:84:d8:0f:cf:7f:47:3c:67:d2: 9a:5a:ff:1a:be:ee:28:7d:08:d7:c2:00:9a:08:62:ba:38:38: 01:00:82:a4:07:32:46:6f:df:8a:5f:6b:9f:6e:87:41:37:c2: 94:a8:ff:3f:7f:8d:7f:06:78:c1:2f:21:d6:ec:c1:5c:78:63: f9:96:9e:84:5f:5a:48:57:e8:29:aa:7f:4c:e7:05:bc:ad:15: 59:e9:54:d4:98:c2:94:6b:f4:0b:d7:a2:2f:3f:5b:c2:0c:3c: 1b:34:96:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwODIyMTcwMTQ4WhcNMjUwODI5MTcwMTQ4WjAYMRYwFAYD VQQDEw02OGE4YTI3ZC03NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnXUOBtHpfXyUgLmsXxBvAiZd7FglGC86WrjXh10MZT6I7iqBF6nTRkmvgL1 PbfYXgAvBWGDV0nZ/FTNqkA1YeGLyieN+Ewl/EbGriaKcTPPsYikn4Y9WnIg0qcL 9WAFxFCFsxKUjQJslZiK16g7kExcZfFbBSW/NEwwSPXY26xtvFOnoaePfIs/vNyk t77G8xRJUSZ6NYiOxZuMqLcMISDc0H/7Gxj7ApD84o0BS6uMD3odLvKCSiZ1kCpn 319AEtundb7Slayv38GB0aQl1xIdP+xaZtY8oxUuoHDleQMHwbrIFY8YAvNnleDx bZGmycArPKIm9/SGwjxfkAt/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfE4YyR aq0vyDkrMVvjyFtdVrTLMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPYuvPuyCLCvTjMX5aRraWbvk5BQcUh1anGgxAXsNjsi6Qu7im9qN4 YyIQC3PFweD2q819bJumqeOf311LM/bQMXg9hijrHhaWPabhpxj7W76PeGOfZwbB wwvTzZ6d2pyg7Fqu8KoSE+VMPX18RxQ7nzfv/5HE985WYdpeW0MwJNoDy4KySmlW j7la6IbHL6DhNo60ZaHOOZSE2A/Pf0c8Z9KaWv8avu4ofQjXwgCaCGK6ODgBAIKk BzJGb9+KX2ufbodBN8KUqP8/f41/BnjBLyHW7MFceGP5lp6EX1pIV+gpqn9M5wW8 rRVZ6VTUmMKUa/QL16IvP1vCDDwbNJYV -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:56 2025 by rpki-client