$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft File: MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json) Hash identifier: Brv6JK8Prn+52EVBUH7H92ekWYhDfIM/W6D2ROntJMo= Subject key identifier: 52:BC:18:1F:A4:EE:4A:CC:4D:EF:0C:FF:FE:DE:10:C6:46:EA:B9:51 Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft Manifest number: 0374 Signing time: Sat 23 Aug 2025 01:17:38 +0000 Manifest this update: Sat 23 Aug 2025 01:17:37 +0000 Manifest next update: Sat 30 Aug 2025 01:17:37 +0000 Files and hashes: 1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: 7vaDm+f55A8w62OMIOYwb4cbJAKtT0lVF4+eOKogOx4=) 2: 96A539C2278211EF902D8D85C4F9AE02.roa (hash: pJW1JdeGLLzOt3FmC1xw+P+I/N25ewL6n7IDt7taQwc=) 3: 80F23C7E1BC011EFB7916B7DC4F9AE02.roa (hash: qSv2BT3qwQ8QX0Y5AHl2Fu25v4OXEGvtOVat3ng7Qm0=) 4: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: j9PZe7H54iqFwSW5LIWJcZWzWL15B6MkV0bnjdVzrtw=) 5: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: cN84s7I55h93u/XVx1FhwQXM6ahiSIjmBZ81HatEkU4=) 6: 9B8A0A56F56F11EF84317935C4F9AE02.roa (hash: 0bWlqpDV1jdZ32UUmwWBU46n0Ec3stYEb8RHblnMIUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF Validity Not Before: Aug 23 01:17:37 2025 GMT Not After : Aug 30 01:17:37 2025 GMT Subject: CN=68a916b1-ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:85:4c:4b:97:90:b6:fb:31:66:36:f3:bf: fd:ef:a3:29:b5:63:ad:77:8d:c5:04:6d:2b:c9:ae: 92:db:25:d4:f7:e4:9e:a9:60:6e:8b:54:a3:dc:66: aa:86:d2:84:35:31:56:c7:cf:55:de:3b:6d:57:0d: 61:6a:22:66:1c:60:77:85:c8:44:61:4a:b5:6f:5e: bf:1c:3a:11:de:db:fd:f3:28:33:2d:5c:7e:a2:7e: 88:ec:27:f7:d0:c4:25:43:f4:1a:e6:95:e1:77:bc: e3:17:69:8b:e3:16:d4:da:a1:62:2c:84:fe:73:c1: f4:91:3f:44:21:1e:4a:02:65:e6:38:e3:b3:81:6f: 90:a2:1c:eb:ff:0c:f9:d0:dc:73:9e:b5:a1:9b:8b: 5a:07:11:47:16:a5:a5:a5:d1:3a:a3:10:e0:05:14: a9:67:17:87:03:e3:5f:57:40:50:e4:8c:14:b4:c2: 65:7b:2d:3d:b5:39:71:07:1c:c5:69:fc:83:73:fe: 5e:8e:e8:51:0d:31:16:5f:52:91:38:ae:35:26:f9: 9e:fb:ba:d5:9c:53:ae:23:06:f1:8b:bf:b2:e3:e7: ac:32:6a:72:6b:f6:14:ab:88:68:06:5a:ac:8c:a7: 97:ca:41:39:14:90:96:f3:f6:11:ce:42:44:4a:d3: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BC:18:1F:A4:EE:4A:CC:4D:EF:0C:FF:FE:DE:10:C6:46:EA:B9:51 X509v3 Authority Key Identifier: keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cc:9b:86:00:9b:fe:c7:4b:49:8a:ab:4f:cb:0e:aa:e7:1e: 52:f9:d1:79:ec:81:2a:53:27:ec:ac:bf:35:cb:9d:ba:55:0d: 19:75:e3:af:33:08:56:53:f8:e7:f5:c9:af:7c:21:07:f9:07: 86:75:80:d1:5a:32:60:08:ca:34:a5:43:36:99:90:03:d9:04: 50:9a:ae:e7:4d:91:ab:4b:81:d4:86:0b:7a:3b:1d:22:55:2b: d8:e8:64:60:91:d9:24:4b:6c:9d:67:f2:ab:de:76:d4:04:b3: 92:ce:60:ec:6a:2c:14:91:aa:8f:c3:db:49:f5:ec:97:e5:86: 0d:90:c6:44:8f:c7:c0:d9:87:5d:aa:0d:c4:c3:f1:43:4d:9d: 9e:f7:47:4d:ee:30:95:43:4f:78:d3:3a:e2:72:c2:37:c2:53: a4:e1:28:19:93:c3:11:bd:3f:4b:87:47:1c:49:96:14:c1:ed: c4:a8:55:ad:2c:91:c1:91:37:6c:46:56:0c:c5:3e:3f:be:54: ce:a3:48:ca:77:87:b4:f3:ee:ee:56:00:c1:12:23:78:02:df: 70:88:ca:76:c8:7c:37:38:3c:48:a6:d1:f0:fc:25:15:74:dc: f4:58:45:b6:ea:95:d1:02:98:da:a0:15:76:cb:53:7d:8b:c4: 9a:af:ce:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1 RkJCMUQzRUYwHhcNMjUwODIzMDExNzM3WhcNMjUwODMwMDExNzM3WjAYMRYwFAYD VQQDEw02OGE5MTZiMS1lYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuuFTEuXkLb7MWY287/976MptWOtd43FBG0rya6S2yXU9+SeqWBui1Sj3Gaq htKENTFWx89V3jttVw1haiJmHGB3hchEYUq1b16/HDoR3tv98ygzLVx+on6I7Cf3 0MQlQ/Qa5pXhd7zjF2mL4xbU2qFiLIT+c8H0kT9EIR5KAmXmOOOzgW+Qohzr/wz5 0NxznrWhm4taBxFHFqWlpdE6oxDgBRSpZxeHA+NfV0BQ5IwUtMJley09tTlxBxzF afyDc/5ejuhRDTEWX1KROK41Jvme+7rVnFOuIwbxi7+y4+esMmpya/YUq4hoBlqs jKeXykE5FJCW8/YRzkJEStM+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK8GB+k 7krMTe8M//7eEMZG6rlRMB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CQTY3NkUzMENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZ UTc3bE55d1RJY05mdXgwLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVzJuGAJv+x0tJiqtPyw6q5x5S+dF57IEqUyfsrL81y526VQ0ZdeOv MwhWU/jn9cmvfCEH+QeGdYDRWjJgCMo0pUM2mZAD2QRQmq7nTZGrS4HUhgt6Ox0i VSvY6GRgkdkkS2ydZ/Kr3nbUBLOSzmDsaiwUkaqPw9tJ9eyX5YYNkMZEj8fA2Ydd qg3Ew/FDTZ2e90dN7jCVQ0940zricsI3wlOk4SgZk8MRvT9Lh0ccSZYUwe3EqFWt LJHBkTdsRlYMxT4/vlTOo0jKd4e08+7uVgDBEiN4At9wiMp2yHw3ODxIptHw/CUV dNz0WEW26pXRApjaoBV2y1N9i8Sar847 -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:15 2025 by rpki-client