$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: YR1+I9p52/Ar984tAZn19s2n71JQTHX5bMTdO7dY/Kg= Subject key identifier: 1B:16:68:6A:97:4A:6C:CF:42:C4:EE:1F:0F:00:26:E9:E0:6F:D1:74 Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 06F3 Signing time: Fri 22 Aug 2025 22:07:32 +0000 Manifest this update: Fri 22 Aug 2025 22:07:32 +0000 Manifest next update: Fri 29 Aug 2025 22:07:32 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: ouxBci/ODeEdWILJNrDpy3lURRWwr9x0x1ubaQQwN8I=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: Aug 22 22:07:32 2025 GMT Not After : Aug 29 22:07:32 2025 GMT Subject: CN=68a8ea24-aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:b2:ff:d0:a2:06:a8:8b:a3:71:88:19:31: 4d:47:43:ca:16:3b:85:15:37:ba:bc:c2:a2:3f:10: 76:c3:03:0a:44:6a:7f:30:85:72:ea:14:fc:86:51: 6c:9c:a7:8f:3d:13:30:2b:57:14:b0:15:77:10:50: 3e:4d:7f:c2:a4:54:fb:6b:53:70:eb:6c:cb:5b:ca: 5b:54:5e:62:f3:cd:cf:33:ef:26:2c:f5:cd:a1:9d: d2:8b:62:e2:cc:b8:a6:96:6c:18:1b:82:59:39:95: 7f:72:e9:69:33:62:b3:c1:cc:43:99:87:3b:3f:72: 1a:ce:46:58:99:f4:db:d7:06:00:0d:93:ec:81:d9: f4:41:b2:24:1a:99:14:c6:15:c5:2c:5f:0c:7b:0e: 92:81:7f:cb:06:7d:df:b0:bb:a4:04:d8:05:39:99: bc:ef:8f:74:67:8d:78:51:a8:25:d3:f5:6e:a5:54: 91:7a:c0:15:b9:1c:47:e5:58:26:be:fb:d4:5d:e2: 77:e3:15:ea:e7:59:65:52:97:86:e2:a5:e6:d7:fe: 93:30:ae:2f:fc:d7:e9:26:27:ef:d0:13:3f:c0:02: f7:2c:53:8b:3c:b6:ce:26:7d:3e:45:82:68:65:c5: ce:22:47:15:c6:12:34:74:19:7a:16:66:74:47:59: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:16:68:6A:97:4A:6C:CF:42:C4:EE:1F:0F:00:26:E9:E0:6F:D1:74 X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7a:bd:7b:d6:f8:9e:3b:0b:5e:dc:e6:43:8d:e1:ae:cc:ea: a5:90:c1:5d:8d:a8:ae:5a:28:e4:80:fa:b9:4f:fd:d9:aa:5e: de:6b:7e:2c:ec:53:55:66:b0:cd:93:51:76:d6:67:1e:b7:a7: c9:3f:5f:45:ce:8b:c8:83:a8:10:42:b2:8d:0f:2e:22:a4:29: a4:10:78:e4:6a:65:51:84:c1:d9:33:e3:c5:29:22:6d:5c:b9: 29:eb:73:b3:5d:d2:95:57:70:13:48:2a:a3:12:d8:63:94:f9: 7f:84:23:d1:52:a0:89:19:2f:92:85:21:55:77:0a:f6:6b:c0: 53:84:91:66:95:ba:14:35:b3:bc:0e:87:ee:8f:b7:26:62:d8: c7:45:d8:69:ee:98:64:5b:d7:c6:44:56:78:ee:64:51:86:a1: 11:e0:c6:d4:80:1a:64:99:ff:4b:e2:19:e3:c8:95:69:bb:5e: f7:15:f6:05:9f:d9:3a:a4:7a:27:eb:42:08:a1:95:9f:ea:bc: b5:72:56:9e:1d:12:f8:42:ad:9c:8c:1e:07:23:d2:01:5a:be: b8:91:45:15:11:39:f7:66:fc:59:00:01:2d:ee:6e:33:0f:40: e6:a6:07:65:57:91:ec:bd:09:b6:99:f8:77:99:32:f6:e1:34: 97:01:09:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUwODIyMjIwNzMyWhcNMjUwODI5MjIwNzMyWjAYMRYwFAYD VQQDEw02OGE4ZWEyNC1hYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLiy/9CiBqiLo3GIGTFNR0PKFjuFFTe6vMKiPxB2wwMKRGp/MIVy6hT8hlFs nKePPRMwK1cUsBV3EFA+TX/CpFT7a1Nw62zLW8pbVF5i883PM+8mLPXNoZ3Si2Li zLimlmwYG4JZOZV/culpM2KzwcxDmYc7P3IazkZYmfTb1wYADZPsgdn0QbIkGpkU xhXFLF8Mew6SgX/LBn3fsLukBNgFOZm87490Z414Uagl0/VupVSResAVuRxH5Vgm vvvUXeJ34xXq51llUpeG4qXm1/6TMK4v/NfpJifv0BM/wAL3LFOLPLbOJn0+RYJo ZcXOIkcVxhI0dBl6FmZ0R1mOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsWaGqX SmzPQsTuHw8AJungb9F0MB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOer171vieOwte3OZDjeGuzOqlkMFdjaiuWijkgPq5T/3Zql7ea34s 7FNVZrDNk1F21mcet6fJP19FzovIg6gQQrKNDy4ipCmkEHjkamVRhMHZM+PFKSJt XLkp63OzXdKVV3ATSCqjEthjlPl/hCPRUqCJGS+ShSFVdwr2a8BThJFmlboUNbO8 Dofuj7cmYtjHRdhp7phkW9fGRFZ47mRRhqER4MbUgBpkmf9L4hnjyJVpu173FfYF n9k6pHon60IIoZWf6ry1claeHRL4Qq2cjB4HI9IBWr64kUUVETn3ZvxZAAEt7m4z D0DmpgdlV5HsvQm2mfh3mTL24TSXAQn2 -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:23 2025 by rpki-client