$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: fXv+pcbwParwIWvkGEiPcMOdDLnCGA2quO05ha/9JEQ= Subject key identifier: 5E:2A:87:4D:0F:54:3D:74:04:90:C3:E1:B0:2B:85:D3:DA:5F:ED:0B Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 083A Signing time: Mon 30 Jun 2025 20:58:33 +0000 Manifest this update: Mon 30 Jun 2025 20:58:33 +0000 Manifest next update: Mon 07 Jul 2025 20:58:33 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: DRB4apPuMoqRG2wXqds8lraaPc3E2TBLtSy/iYrlbFY=) 2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: xQNJE/wFi8JMz2ss0ss1yj9BAf/VPU6rBNzmi8uV9UI=) 3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: j94hdqhS8hEZkUNMK0Gy0/wMaWkISNSvPZJQcef/86U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Jun 30 20:58:33 2025 GMT Not After : Jul 7 20:58:33 2025 GMT Subject: CN=6862fa79-b196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:18:5a:c4:b2:ed:03:2e:30:2b:c0:97:fe: de:9b:b6:25:64:01:a5:b6:da:5e:c6:58:a1:11:fd: 96:a5:00:07:e9:2f:ec:5b:0a:dc:e7:57:b4:28:ec: f2:43:41:ad:1a:dc:f7:b8:f7:b5:7d:45:fe:1a:77: 0b:5c:1d:36:51:ff:27:5b:a3:b0:3e:f5:5c:94:3e: d0:69:55:67:be:52:8c:81:5e:2c:25:40:73:01:df: ac:ff:46:bc:9b:32:46:8a:f2:02:a9:74:91:96:e5: 13:40:9b:55:63:2f:a6:7b:52:60:71:b1:65:91:a3: e2:c2:68:2d:6e:98:26:e6:ce:fd:98:e8:33:eb:c8: 1f:a6:41:5f:28:04:57:d9:18:47:ad:8a:bc:5c:46: 1b:e0:fe:df:19:fd:6e:db:46:da:0a:6a:a5:62:ad: f1:2d:bc:b1:e0:77:b4:31:87:e1:e6:15:a6:13:74: 20:5b:5d:55:41:8f:aa:c1:52:33:d1:be:6c:67:3d: e7:a2:75:5c:5b:72:73:f9:50:a4:d3:04:d7:a7:78: f3:ba:9b:f8:cb:56:f9:7f:5f:d1:c7:99:87:d3:8e: 4f:95:f1:6c:b6:cf:0d:87:14:70:6f:b0:c1:04:c3: 13:e9:5c:5d:7c:4d:99:e6:6e:a7:bb:8d:67:ba:77: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:87:4D:0F:54:3D:74:04:90:C3:E1:B0:2B:85:D3:DA:5F:ED:0B X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0b:4d:91:6f:1c:af:cc:7d:ff:19:05:50:cf:69:79:70:b3: 43:be:76:c4:fb:2f:1b:21:f5:81:2e:17:4b:45:6e:13:95:9d: 15:dd:29:b2:68:cd:97:1b:4e:e7:be:e6:b2:eb:56:dc:8a:43: cf:ac:19:20:c0:e4:64:6a:9c:f4:bd:a0:c0:04:6a:73:62:34: bd:6c:84:b2:95:f2:b9:4d:25:18:72:45:a1:42:60:66:32:3b: a5:48:85:22:2d:93:1c:86:fa:ec:12:7f:23:05:20:17:05:2b: 6b:9c:2a:e6:55:aa:af:4c:ad:51:3c:70:56:bb:f8:4c:a0:24: 94:fd:a5:79:f3:0a:c4:12:a5:42:79:fe:e6:f3:41:4d:a2:36: b2:b4:17:5c:04:2d:38:20:3d:ef:e4:bb:1a:e4:12:8a:93:30: 3a:01:d1:59:33:c3:94:df:dd:58:cf:aa:04:cd:12:3c:6e:62: ba:c3:7d:a9:29:49:5a:8c:a1:6a:11:6f:ec:39:cb:e9:a7:33: 1d:7c:16:40:16:1a:79:9e:de:45:bc:04:5c:a7:81:84:62:b9: 4b:d4:1f:a9:ce:cd:b2:d0:93:b0:b6:73:aa:24:14:ad:ab:19: c7:75:7b:98:64:d6:cf:5e:7a:5e:f1:6d:53:e0:5d:ba:52:df: 82:65:d2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUwNjMwMjA1ODMzWhcNMjUwNzA3MjA1ODMzWjAYMRYwFAYD VQQDEw02ODYyZmE3OS1iMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CUYWsSy7QMuMCvAl/7em7YlZAGlttpexlihEf2WpQAH6S/sWwrc51e0KOzy Q0GtGtz3uPe1fUX+GncLXB02Uf8nW6OwPvVclD7QaVVnvlKMgV4sJUBzAd+s/0a8 mzJGivICqXSRluUTQJtVYy+me1JgcbFlkaPiwmgtbpgm5s79mOgz68gfpkFfKARX 2RhHrYq8XEYb4P7fGf1u20baCmqlYq3xLbyx4He0MYfh5hWmE3QgW11VQY+qwVIz 0b5sZz3nonVcW3Jz+VCk0wTXp3jzupv4y1b5f1/Rx5mH045PlfFsts8NhxRwb7DB BMMT6VxdfE2Z5m6nu41nuneitwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4qh00P VD10BJDD4bArhdPaX+0LMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhC02RbxyvzH3/GQVQz2l5cLNDvnbE+y8bIfWBLhdLRW4TlZ0V3Smy aM2XG07nvuay61bcikPPrBkgwORkapz0vaDABGpzYjS9bISylfK5TSUYckWhQmBm MjulSIUiLZMchvrsEn8jBSAXBStrnCrmVaqvTK1RPHBWu/hMoCSU/aV58wrEEqVC ef7m80FNojaytBdcBC04ID3v5Lsa5BKKkzA6AdFZM8OU391Yz6oEzRI8bmK6w32p KUlajKFqEW/sOcvppzMdfBZAFhp5nt5FvARcp4GEYrlL1B+pzs2y0JOwtnOqJBSt qxnHdXuYZNbPXnpe8W1T4F26Ut+CZdI8 -----END CERTIFICATE-----Generated at Wed Jul 2 07:04:10 2025 by rpki-client