$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: x/uerAHSF2icGiotho6psRbkrThCAurh69JM/Gs3Pz8= Subject key identifier: 94:AA:92:99:89:59:D6:17:C7:04:E4:F7:5A:1D:71:FE:F1:D2:D2:96 Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 01E0 Signing time: Sat 23 Aug 2025 03:05:27 +0000 Manifest this update: Sat 23 Aug 2025 03:05:26 +0000 Manifest next update: Sat 30 Aug 2025 03:05:26 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: /U1/sqI8wsvs0lSRJ3WrtRLKbROuSpuR3Xy04dgu8WE=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: duTYZvXv6lu6t8rEgm3ckGUyqXhrkljrh8aPt8kb7W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Aug 23 03:05:26 2025 GMT Not After : Aug 30 03:05:26 2025 GMT Subject: CN=68a92ff7-9cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:db:a6:f9:27:7a:b5:cf:8a:e4:05:e8:e5: 51:c9:bf:10:d4:d1:24:1f:61:b0:1d:9e:e7:44:95: 79:ee:33:35:39:2e:84:87:6b:d4:df:f3:9b:38:88: 9b:8c:4b:62:b8:1d:02:3a:a2:8b:0f:7a:bb:56:1f: 57:72:d9:85:b2:c8:90:54:dd:f1:2b:d5:4e:c5:b5: 85:c6:04:d6:26:76:bf:66:e4:56:ad:c8:74:2c:f0: 96:8b:f9:88:80:00:85:56:04:c0:92:9b:df:76:a7: 72:8c:53:8b:9f:58:2c:82:71:35:bb:4a:06:e1:01: dd:1b:f2:a6:e2:06:e4:39:a6:64:8c:f5:20:4e:88: 50:4b:7b:5d:88:f9:73:b9:ae:9b:86:01:95:65:01: 4d:31:04:de:25:e5:52:43:c3:26:22:f5:80:de:09: 3b:89:80:42:a9:e5:32:58:c6:9c:67:76:0e:a1:a3: ad:5b:d0:3c:02:fb:64:6b:da:2f:9a:31:1f:9b:f8: 60:de:c6:5c:60:34:bb:c3:eb:1a:0d:52:36:e9:6c: 71:07:99:79:71:e2:91:8c:3f:03:2d:f0:81:11:7f: 62:6b:46:4b:fd:81:12:c3:7d:7c:04:a6:ec:8f:04: b5:0a:a2:f4:30:20:af:dc:03:21:78:76:79:a7:7f: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AA:92:99:89:59:D6:17:C7:04:E4:F7:5A:1D:71:FE:F1:D2:D2:96 X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:43:ef:40:79:16:8d:7a:c1:c8:f8:50:82:2d:eb:cb:dd:a7: 2b:36:2f:d4:7e:89:06:ea:24:32:74:4e:36:2a:18:fa:56:22: 37:b4:47:8a:e1:c7:a3:50:89:ea:83:3e:0d:0c:40:3f:13:47: a1:a9:7f:57:91:64:32:e7:89:1c:51:96:23:14:50:65:bd:30: eb:bb:88:d5:5a:ec:56:d6:55:af:4b:19:73:5b:f5:0a:af:45: 85:0e:08:0f:36:82:5a:81:b5:f4:38:e2:c3:0b:46:63:bf:15: 07:68:9e:20:18:6e:20:a9:64:d3:b5:13:f2:d0:ff:f8:3a:47: cb:24:51:86:b6:a2:df:b0:4f:ac:cf:2f:df:82:7b:ae:e1:52: 2c:a4:b6:e3:04:6b:99:be:1d:41:3a:15:29:f6:71:34:5e:38: 70:0f:c4:02:bc:59:96:3a:68:22:56:86:23:3d:dc:0d:42:4a: 74:d9:36:e3:00:b3:7e:9f:53:39:aa:b3:15:79:22:45:7d:be: dd:93:52:cb:f1:df:9f:eb:64:66:69:f2:d7:e5:30:08:c0:81: c8:af:f3:d6:ff:bc:47:0a:69:a2:58:95:5c:3b:72:69:0f:bb: 7b:44:a8:55:df:94:15:d3:37:82:67:83:5f:1f:e6:80:32:c3: 2b:91:b2:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUwODIzMDMwNTI2WhcNMjUwODMwMDMwNTI2WjAYMRYwFAYD VQQDEw02OGE5MmZmNy05Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gfbpvknerXPiuQF6OVRyb8Q1NEkH2GwHZ7nRJV57jM1OS6Eh2vU3/ObOIib jEtiuB0COqKLD3q7Vh9XctmFssiQVN3xK9VOxbWFxgTWJna/ZuRWrch0LPCWi/mI gACFVgTAkpvfdqdyjFOLn1gsgnE1u0oG4QHdG/Km4gbkOaZkjPUgTohQS3tdiPlz ua6bhgGVZQFNMQTeJeVSQ8MmIvWA3gk7iYBCqeUyWMacZ3YOoaOtW9A8Avtka9ov mjEfm/hg3sZcYDS7w+saDVI26WxxB5l5ceKRjD8DLfCBEX9ia0ZL/YESw318BKbs jwS1CqL0MCCv3AMheHZ5p39Y7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSqkpmJ WdYXxwTk91odcf7x0tKWMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Q+9AeRaNesHI+FCCLevL3acrNi/UfokG6iQydE42Khj6ViI3tEeK 4cejUInqgz4NDEA/E0ehqX9XkWQy54kcUZYjFFBlvTDru4jVWuxW1lWvSxlzW/UK r0WFDggPNoJagbX0OOLDC0ZjvxUHaJ4gGG4gqWTTtRPy0P/4OkfLJFGGtqLfsE+s zy/fgnuu4VIspLbjBGuZvh1BOhUp9nE0XjhwD8QCvFmWOmgiVoYjPdwNQkp02Tbj ALN+n1M5qrMVeSJFfb7dk1LL8d+f62RmafLX5TAIwIHIr/PW/7xHCmmiWJVcO3Jp D7t7RKhV35QV0zeCZ4NfH+aAMsMrkbJX -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:46 2025 by rpki-client