$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: OoRIIFiO3rbUfkT6c/KhGdZQwL7t7Gx+cK00wVNelX8= Subject key identifier: 06:E0:8C:BF:6E:F8:5E:64:A6:A8:FA:C1:1E:E8:1C:A0:D0:89:C1:A7 Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 40F1 Signing time: Fri 22 Aug 2025 15:04:50 +0000 Manifest this update: Fri 22 Aug 2025 15:04:49 +0000 Manifest next update: Fri 29 Aug 2025 15:04:49 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: XDMNCXW0CKo8tvJSh5vXwZZqBnqGXIhKHdFXeeuM0Yg=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: Uqr4nD/CZBuD2sTlglQJ4RTyydE1vAssru0oXCdlN74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: Aug 22 15:04:49 2025 GMT Not After : Aug 29 15:04:49 2025 GMT Subject: CN=68a88712-8325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:f0:1b:76:0c:f2:ac:1a:08:ff:25:d5:79: 74:f3:b1:0e:03:99:36:58:24:99:79:f0:c6:d6:77: d2:74:9b:d5:d4:64:d8:e4:04:b9:dd:aa:39:95:95: da:09:f6:78:11:c3:c0:27:9d:c9:38:36:75:1f:55: 06:47:f7:d7:cd:80:73:ee:d5:02:90:51:d3:e7:64: 1b:6f:ba:fa:61:35:2a:ed:d6:92:47:9c:fb:1e:5c: 12:6e:61:dd:2f:c0:e7:82:ec:5b:5e:fe:38:ef:bb: e1:e0:ee:96:2b:48:6f:91:8a:46:50:de:c8:5f:47: 19:64:97:ce:61:5a:89:ff:34:bf:2c:c9:83:04:47: 67:b8:cf:88:57:95:85:3d:c2:26:15:6e:a6:7a:bd: 74:c6:f1:16:73:27:cd:3d:e7:dd:9c:31:ea:10:b9: 86:5c:d0:88:27:ad:62:e2:5e:7b:c3:35:83:cc:34: ca:58:a1:e3:1b:f6:d2:3a:84:c1:10:dc:93:f3:fe: 6c:e3:5e:cb:32:d8:fb:ee:8c:87:4d:dd:19:93:97: 13:3d:78:3d:8d:ed:e1:b4:71:0b:45:51:f5:26:55: 9c:0e:b2:8c:4c:df:ad:63:61:a9:f3:57:6d:4d:50: 5e:4d:2a:cf:95:c8:63:44:f5:90:29:07:dd:19:5d: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E0:8C:BF:6E:F8:5E:64:A6:A8:FA:C1:1E:E8:1C:A0:D0:89:C1:A7 X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:41:fd:cf:3a:f9:40:59:af:cb:01:7f:2b:0f:4d:c9:1a:7c: 33:fa:0f:0a:09:06:48:b5:61:60:d0:20:e0:39:52:f9:02:62: 5d:63:81:fa:d1:6d:8e:d6:ac:f9:0c:09:05:f7:df:4c:78:57: 46:b9:d8:ec:c1:92:81:d0:f7:c2:d6:35:eb:b6:76:f6:9c:46: 84:5e:6b:a0:40:97:88:94:cb:a3:6d:1b:94:50:ad:2c:62:ab: 05:5b:2b:6c:a7:07:5a:73:95:39:a0:bc:99:c1:41:ba:a1:43: 58:fb:37:9e:ad:8f:e7:94:10:ef:21:46:44:b3:b1:b1:55:b8: b8:57:99:c4:19:68:fb:32:76:da:12:dd:24:7d:69:d3:2d:dd: 1d:27:90:8b:1f:f1:e3:d8:68:14:e9:d8:8f:42:57:2b:c9:8e: ae:77:85:d2:24:63:06:03:79:99:93:26:3b:10:57:62:9f:ee: ef:40:86:69:bf:f3:e5:37:44:f5:9c:9a:76:f9:1f:39:05:6f: 37:dc:91:d0:d0:6a:ca:9f:56:f7:ab:32:4a:b2:af:4b:70:d9: 7a:41:a1:d1:a3:84:f9:15:f7:22:36:41:6e:78:6d:91:69:ec: 7b:e3:80:5c:13:8b:65:39:ec:be:ea:f1:8b:af:e5:b7:43:a9: d7:8e:74:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjUwODIyMTUwNDQ5WhcNMjUwODI5MTUwNDQ5WjAYMRYwFAYD VQQDEw02OGE4ODcxMi04MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjvwG3YM8qwaCP8l1Xl087EOA5k2WCSZefDG1nfSdJvV1GTY5AS53ao5lZXa CfZ4EcPAJ53JODZ1H1UGR/fXzYBz7tUCkFHT52Qbb7r6YTUq7daSR5z7HlwSbmHd L8DnguxbXv4477vh4O6WK0hvkYpGUN7IX0cZZJfOYVqJ/zS/LMmDBEdnuM+IV5WF PcImFW6mer10xvEWcyfNPefdnDHqELmGXNCIJ61i4l57wzWDzDTKWKHjG/bSOoTB ENyT8/5s417LMtj77oyHTd0Zk5cTPXg9je3htHELRVH1JlWcDrKMTN+tY2Gp81dt TVBeTSrPlchjRPWQKQfdGV3MZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbgjL9u +F5kpqj6wR7oHKDQicGnMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQQf3POvlAWa/LAX8rD03JGnwz+g8KCQZItWFg0CDgOVL5AmJdY4H6 0W2O1qz5DAkF999MeFdGudjswZKB0PfC1jXrtnb2nEaEXmugQJeIlMujbRuUUK0s YqsFWytspwdac5U5oLyZwUG6oUNY+zeerY/nlBDvIUZEs7GxVbi4V5nEGWj7Mnba Et0kfWnTLd0dJ5CLH/Hj2GgU6diPQlcryY6ud4XSJGMGA3mZkyY7EFdin+7vQIZp v/PlN0T1nJp2+R85BW833JHQ0GrKn1b3qzJKsq9LcNl6QaHRo4T5FfciNkFueG2R aex744BcE4tlOey+6vGLr+W3Q6nXjnSc -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:13 2025 by rpki-client