$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: KqhNAiKsKHTwVmIWFGLCDzdNw5wfXuXSUu4A6RzFWwo= Subject key identifier: 18:9D:28:6F:94:78:3C:3B:85:7D:74:00:99:78:DA:48:CA:F7:A9:3E Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 0486 Signing time: Sat 23 Aug 2025 00:15:51 +0000 Manifest this update: Sat 23 Aug 2025 00:15:51 +0000 Manifest next update: Sat 30 Aug 2025 00:15:51 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: ZVBJFcejjaAssPyiLvCrPQST5pGIIs0MkYIXDGND3DM=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Aug 23 00:15:51 2025 GMT Not After : Aug 30 00:15:51 2025 GMT Subject: CN=68a90837-f118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:a4:9e:b3:7b:5c:5b:f1:57:24:1d:95:f0: 80:a3:e7:9d:bb:11:cc:d9:6c:b5:47:83:0a:86:54: a5:44:ba:18:18:2a:a0:ad:cf:e6:62:e2:c0:32:7e: f5:82:b6:7a:20:d6:53:3e:60:de:35:2a:a6:bd:c0: e5:d0:af:41:81:75:4e:0b:e6:1a:21:97:07:a6:08: ec:c0:a4:0b:86:87:b9:96:0d:c2:19:e1:c3:62:ec: 70:a7:c0:16:a9:1d:b7:93:c0:38:33:40:7c:9a:0f: 22:53:e0:8d:d1:94:a7:14:46:c6:97:6d:7d:c4:c1: be:c6:a5:5b:1a:8f:9c:ad:c9:2d:29:bd:bb:49:5d: 53:5b:eb:97:4d:dd:7c:22:3e:8c:ea:e6:4e:f0:b4: a7:eb:e9:53:bd:1c:2d:1b:d6:a7:23:34:ca:6d:3e: e1:3a:95:30:27:b9:e7:b4:67:57:e3:98:71:4a:98: ce:9e:80:13:13:2d:30:ad:e1:f7:b4:62:32:f6:e0: fd:98:65:56:b9:c0:3a:5f:a8:fe:bf:a0:27:d2:af: ef:3a:91:64:ca:ba:8c:0e:ff:3d:97:97:08:9b:cd: 61:73:9f:08:81:a5:de:14:12:4e:c6:ba:4b:f8:a9: 9d:a2:f0:82:5a:d8:3a:61:df:09:dd:e1:ce:08:70: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9D:28:6F:94:78:3C:3B:85:7D:74:00:99:78:DA:48:CA:F7:A9:3E X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:60:de:3f:fb:5b:f9:2f:a4:6f:e9:ca:11:3b:72:39:7c:15: 6f:1a:f1:96:53:3a:30:ac:dc:6c:38:31:86:7d:70:6c:2d:ac: 35:9a:10:41:75:a3:f2:e0:b8:17:82:16:e8:60:5f:7c:0e:1f: 62:31:b2:c2:a8:e3:2d:d9:10:81:67:5e:41:ec:9a:4e:6e:84: 79:9a:41:dc:a2:98:ce:73:b2:80:3b:41:7e:25:7b:61:3c:c7: 86:7a:2b:c5:a9:40:26:92:a9:36:f5:f7:75:0c:d1:06:b8:e0: 1d:89:8c:29:45:f1:0d:35:38:19:39:c5:52:8a:d6:c2:3f:86: 57:16:45:3f:30:0c:55:0a:3a:98:70:67:09:9e:da:38:0b:94: 10:a7:fa:85:39:cd:be:be:f6:06:0b:c6:8d:55:8c:bf:b6:84: 45:27:28:54:4b:cf:21:2f:67:af:47:b4:26:1e:de:2a:d6:fa: 53:04:d7:40:01:11:34:f1:5b:c4:a6:13:ec:dd:b4:63:ab:6f: 2b:2d:a1:c8:9f:38:52:3e:18:5d:00:66:60:e1:4f:2c:26:fe: de:0c:3d:a5:0f:c1:72:54:77:e1:59:7d:9e:ff:b1:2c:f6:86: a1:66:1f:90:56:be:b5:a0:d1:14:e7:96:76:24:9e:df:c6:e0: f1:5e:9f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUwODIzMDAxNTUxWhcNMjUwODMwMDAxNTUxWjAYMRYwFAYD VQQDEw02OGE5MDgzNy1mMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxamknrN7XFvxVyQdlfCAo+eduxHM2Wy1R4MKhlSlRLoYGCqgrc/mYuLAMn71 grZ6INZTPmDeNSqmvcDl0K9BgXVOC+YaIZcHpgjswKQLhoe5lg3CGeHDYuxwp8AW qR23k8A4M0B8mg8iU+CN0ZSnFEbGl219xMG+xqVbGo+crcktKb27SV1TW+uXTd18 Ij6M6uZO8LSn6+lTvRwtG9anIzTKbT7hOpUwJ7nntGdX45hxSpjOnoATEy0wreH3 tGIy9uD9mGVWucA6X6j+v6An0q/vOpFkyrqMDv89l5cIm81hc58IgaXeFBJOxrpL +KmdovCCWtg6Yd8J3eHOCHCv+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBidKG+U eDw7hX10AJl42kjK96k+MB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgYN4/+1v5L6Rv6coRO3I5fBVvGvGWUzowrNxsODGGfXBsLaw1mhBB daPy4LgXghboYF98Dh9iMbLCqOMt2RCBZ15B7JpOboR5mkHcopjOc7KAO0F+JXth PMeGeivFqUAmkqk29fd1DNEGuOAdiYwpRfENNTgZOcVSitbCP4ZXFkU/MAxVCjqY cGcJnto4C5QQp/qFOc2+vvYGC8aNVYy/toRFJyhUS88hL2evR7QmHt4q1vpTBNdA ARE08VvEphPs3bRjq28rLaHInzhSPhhdAGZg4U8sJv7eDD2lD8FyVHfhWX2e/7Es 9oahZh+QVr61oNEU55Z2JJ7fxuDxXp/r -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:13 2025 by rpki-client