$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: EEHHFWyXz+kogNYbXBDp3nW5404GY9xe4BI2rR4q0zE= Subject key identifier: 71:32:9C:71:40:F4:DF:55:66:EB:39:87:FA:F8:E4:81:73:C3:C1:B6 Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 046A Signing time: Sat 28 Jun 2025 23:42:17 +0000 Manifest this update: Sat 28 Jun 2025 23:42:16 +0000 Manifest next update: Sat 05 Jul 2025 23:42:16 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: bH3ooX19qniOpIPk2qOFfpHocpDYI/rZzwzDPP/VWl0=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Jun 28 23:42:16 2025 GMT Not After : Jul 5 23:42:16 2025 GMT Subject: CN=68607dd9-b0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:ff:a8:0b:d7:f0:df:04:e2:3f:d9:ca:97: 99:2b:43:23:67:cf:ce:e7:5f:50:e2:26:6d:f8:39: 08:bb:f8:4c:27:e0:48:1d:98:3e:d4:b1:30:61:eb: c6:bf:bf:dd:13:81:2e:b9:ca:bb:d3:d7:02:fd:f6: 32:18:40:20:80:20:c0:56:2f:46:df:7e:2c:e3:5f: e6:0c:77:e3:bb:c4:f6:f0:52:82:db:ea:af:85:d9: 23:47:0a:68:16:9e:f6:13:ca:21:d4:20:38:2f:af: e1:9e:16:ab:26:de:33:2b:27:1a:ce:ef:9c:ae:4c: 8e:5d:c0:97:75:f5:9b:b1:e4:a8:03:5e:4c:da:37: 75:d4:0a:4d:a4:65:68:61:f2:40:c4:e0:54:63:a1: b6:ab:1d:fc:98:5d:11:df:6e:82:ab:eb:b1:2d:33: e7:bd:54:2d:43:ea:63:65:e5:fc:d8:07:07:cc:81: d7:24:d5:72:fc:56:e2:de:f5:04:86:b3:2c:7c:a1: 43:0e:cd:1b:79:76:5f:75:0d:3d:32:ea:e1:41:62: 77:6d:dd:49:02:48:3d:cd:c9:9d:a8:78:c4:93:34: 3f:f7:b3:9c:90:91:df:2b:90:6a:96:53:7a:ac:f1: 85:90:a6:07:3c:e8:8d:d3:22:51:35:7a:43:3b:79: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:32:9C:71:40:F4:DF:55:66:EB:39:87:FA:F8:E4:81:73:C3:C1:B6 X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:19:11:f8:9d:d6:8f:9f:38:6d:49:e8:a1:17:fc:98:86:41: 97:b1:af:e4:5b:6c:14:16:80:7b:11:e8:3e:e7:42:50:c5:4e: 86:bc:e3:a9:4e:64:10:16:46:b6:cf:e8:4c:9c:36:21:66:03: 3d:cf:34:04:c8:24:b7:e3:1a:84:8a:d0:c4:9e:ac:7c:3a:95: 08:76:dd:69:49:39:e1:38:31:58:a9:08:7b:6a:a0:b2:49:dc: de:a2:3a:93:f5:14:48:f4:ce:6a:e0:03:f2:c4:6a:5c:91:05: c8:15:24:dc:a2:4f:53:d6:c3:b5:8c:7f:e8:54:34:45:aa:00: 6d:29:cc:24:f6:37:5b:a5:9b:17:f0:ae:86:2f:f1:a0:21:74: 5d:e5:7e:81:18:6a:3b:98:28:e1:8f:e6:4f:40:3d:a2:a9:c4: f9:6f:ef:15:14:e1:53:4b:5d:2f:9b:2f:7f:5e:d7:27:c5:a2: 53:12:4d:1c:1a:02:9d:3f:04:85:83:cd:4c:e6:3b:47:68:f2: 42:39:c6:92:24:6e:d2:2e:7a:4e:47:a2:16:ee:ba:c6:67:79: 87:a7:41:66:4d:8a:6f:ec:b5:ce:48:9e:d4:e8:08:2f:19:7c: 08:1e:c5:25:65:2e:93:63:3b:ba:46:01:c6:a4:2f:7e:50:f0: 37:24:c7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUwNjI4MjM0MjE2WhcNMjUwNzA1MjM0MjE2WjAYMRYwFAYD VQQDEw02ODYwN2RkOS1iMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygj/qAvX8N8E4j/ZypeZK0MjZ8/O519Q4iZt+DkIu/hMJ+BIHZg+1LEwYevG v7/dE4Euucq709cC/fYyGEAggCDAVi9G334s41/mDHfju8T28FKC2+qvhdkjRwpo Fp72E8oh1CA4L6/hnharJt4zKycazu+crkyOXcCXdfWbseSoA15M2jd11ApNpGVo YfJAxOBUY6G2qx38mF0R326Cq+uxLTPnvVQtQ+pjZeX82AcHzIHXJNVy/Fbi3vUE hrMsfKFDDs0beXZfdQ09MurhQWJ3bd1JAkg9zcmdqHjEkzQ/97OckJHfK5BqllN6 rPGFkKYHPOiN0yJRNXpDO3kCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEynHFA 9N9VZus5h/r45IFzw8G2MB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXGRH4ndaPnzhtSeihF/yYhkGXsa/kW2wUFoB7Eeg+50JQxU6GvOOp TmQQFka2z+hMnDYhZgM9zzQEyCS34xqEitDEnqx8OpUIdt1pSTnhODFYqQh7aqCy SdzeojqT9RRI9M5q4APyxGpckQXIFSTcok9T1sO1jH/oVDRFqgBtKcwk9jdbpZsX 8K6GL/GgIXRd5X6BGGo7mCjhj+ZPQD2iqcT5b+8VFOFTS10vmy9/XtcnxaJTEk0c GgKdPwSFg81M5jtHaPJCOcaSJG7SLnpOR6IW7rrGZ3mHp0FmTYpv7LXOSJ7U6Agv GXwIHsUlZS6TYzu6RgHGpC9+UPA3JMcM -----END CERTIFICATE-----Generated at Sun Jun 29 19:04:48 2025 by rpki-client