$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json) Hash identifier: jThG7z3cZVHmYmQbPfrs3UIzljwjV3CA7q64SgamNcY= Subject key identifier: D0:D2:EA:4B:58:F7:7D:F3:F5:8A:09:CA:5B:92:39:05:49:6B:F2:9F Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft Manifest number: E5 Signing time: Fri 22 Aug 2025 15:46:57 +0000 Manifest this update: Fri 22 Aug 2025 15:46:56 +0000 Manifest next update: Fri 29 Aug 2025 15:46:56 +0000 Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: AMExs85mUIFW7DdfXnXE6SvY9qdsow0HUwc7qRQ/KsA=) 2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: fWZETNQO/nq4+BYBCH9MSAL8N1aF88n2/dhae6ZuhiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Validity Not Before: Aug 22 15:46:56 2025 GMT Not After : Aug 29 15:46:56 2025 GMT Subject: CN=68a890f0-40e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:6b:22:69:0d:1a:36:9c:4f:bf:1b:3d:8a: 4c:bf:e1:4b:21:5a:12:61:fb:34:94:cf:81:40:a3: cb:58:19:81:77:1f:c2:da:46:ed:25:7b:5d:e1:9f: f1:ee:89:15:8b:35:ae:11:e8:0d:35:49:d4:6c:40: 51:95:92:de:65:4f:14:81:c7:25:41:1b:32:b4:b3: bb:c4:4b:f6:8a:68:95:31:04:2c:65:09:a3:6a:4f: 0a:95:f5:86:14:29:8b:c8:ea:e0:3c:01:3b:04:74: e5:7e:94:5f:df:fa:68:23:e3:9d:4d:13:ac:a0:29: c9:39:1c:dc:c3:b2:db:32:92:cc:98:23:95:56:b4: 1c:24:1b:31:d0:a0:06:24:1a:32:ba:41:3c:81:82: fd:9c:4d:c9:6b:d6:a9:04:43:21:48:03:a7:46:72: 9f:b7:ee:3c:40:16:0f:f8:39:6e:51:bd:dd:84:77: 0b:a4:d7:bf:0d:3e:3f:12:26:90:0d:03:c1:34:d5: b0:a5:a2:4e:50:8a:58:5e:31:d4:95:67:ea:14:7f: 9b:26:38:ae:6f:52:fc:1a:3c:52:e9:b4:4c:3e:41: 04:df:39:b9:4d:e5:06:2b:d2:dd:63:f6:88:93:e3: da:9d:ed:8e:1d:36:7b:d5:a1:bb:4c:1c:68:d6:c9: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D2:EA:4B:58:F7:7D:F3:F5:8A:09:CA:5B:92:39:05:49:6B:F2:9F X509v3 Authority Key Identifier: keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f4:2c:ad:f5:35:d5:4b:5d:40:c8:62:25:ff:8a:c4:3d:41: b1:e0:20:e1:37:20:91:38:d8:3f:89:3c:7a:95:ed:67:85:de: 8f:d3:20:6f:93:9a:60:b7:1d:35:44:c1:48:85:eb:f0:cb:74: 03:d5:e8:7c:c6:21:e9:fd:5a:83:0e:dd:30:53:d2:20:69:ff: 4a:3b:b4:7b:c3:6a:ea:a2:59:62:01:bc:ab:32:e0:3c:89:df: e5:18:d3:c0:d8:20:bb:0e:60:80:d1:33:a5:12:60:5e:d6:80: 2b:ce:1a:ad:eb:79:df:9c:72:38:3d:56:a9:f3:25:1a:4d:c4: 1f:16:44:d6:6e:06:19:70:0d:b0:85:8a:97:cd:4e:b0:fc:46: 36:1d:9a:f0:cb:7a:6e:a9:89:57:39:50:79:82:8f:b2:54:35: 46:09:1e:17:ce:4d:53:81:da:a1:08:cb:54:33:e3:27:72:bf: 68:51:de:1d:2d:83:03:88:08:73:2b:c9:7d:4b:25:0a:53:9d: 29:57:86:a1:10:3e:1b:9a:85:a2:1e:ef:39:29:5d:e4:b9:5e: b3:3e:2b:89:7c:fd:85:a8:d3:9a:7a:32:d5:75:6b:e0:02:8d: 3a:eb:66:37:45:f5:96:18:ee:5a:60:30:1b:ba:24:2b:b0:55: 61:1f:66:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKDMwNjcwRjYxQjdFNTBFMEIwQjg4RTcyNTFERTg3ODRD MDNDOUU0NjIwHhcNMjUwODIyMTU0NjU2WhcNMjUwODI5MTU0NjU2WjAYMRYwFAYD VQQDEw02OGE4OTBmMC00MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO5rImkNGjacT78bPYpMv+FLIVoSYfs0lM+BQKPLWBmBdx/C2kbtJXtd4Z/x 7okVizWuEegNNUnUbEBRlZLeZU8UgcclQRsytLO7xEv2imiVMQQsZQmjak8KlfWG FCmLyOrgPAE7BHTlfpRf3/poI+OdTROsoCnJORzcw7LbMpLMmCOVVrQcJBsx0KAG JBoyukE8gYL9nE3Ja9apBEMhSAOnRnKft+48QBYP+DluUb3dhHcLpNe/DT4/EiaQ DQPBNNWwpaJOUIpYXjHUlWfqFH+bJjiub1L8GjxS6bRMPkEE3zm5TeUGK9LdY/aI k+Pane2OHTZ71aG7TBxo1skaqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDS6ktY 933z9YoJyluSOQVJa/KfMB8GA1UdIwQYMBaAFDBnD2G35Q4LC4jnJR3oeEwDyeRi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy8wODJBODlGMDJB MjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERnc0xpT2NsSGVoNFRBUEo1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HY1BZYmZsRGdzTGlPY2xIZWg0VEFQSjVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy8wODJBODlGMDJBMjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERn c0xpT2NsSGVoNFRBUEo1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK9Cyt9TXVS11AyGIl/4rEPUGx4CDhNyCRONg/iTx6le1nhd6P0yBv k5pgtx01RMFIhevwy3QD1eh8xiHp/VqDDt0wU9Igaf9KO7R7w2rqolliAbyrMuA8 id/lGNPA2CC7DmCA0TOlEmBe1oArzhqt63nfnHI4PVap8yUaTcQfFkTWbgYZcA2w hYqXzU6w/EY2HZrwy3puqYlXOVB5go+yVDVGCR4Xzk1TgdqhCMtUM+Mncr9oUd4d LYMDiAhzK8l9SyUKU50pV4ahED4bmoWiHu85KV3kuV6zPiuJfP2FqNOaejLVdWvg Ao0662Y3RfWWGO5aYDAbuiQrsFVhH2bA -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:49 2025 by rpki-client