$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: Lh88le5rG4fNi1ncWa4JJUctLX6aCVB/qznLDLEXTJY= Subject key identifier: 6A:A0:EA:D1:4C:75:6F:56:C8:EC:76:E4:92:EE:57:E0:FB:64:D7:80 Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 0FCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0FB5 Signing time: Sat 28 Jun 2025 17:20:52 +0000 Manifest this update: Sat 28 Jun 2025 17:20:51 +0000 Manifest next update: Sat 05 Jul 2025 17:20:51 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: XCX6c73iMZal1QEqFL/fQ5zg3Ya4KAKD+bF0juPM/Vs=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Jun 28 17:20:51 2025 GMT Not After : Jul 5 17:20:51 2025 GMT Subject: CN=68602473-3438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:8c:3c:d0:58:b1:5b:ca:a3:52:b1:ca:a6: b7:d8:08:e7:82:6b:3f:fb:b0:b2:85:ac:ca:5a:d1: e7:d9:18:f0:0b:33:8c:2c:00:d3:d3:b1:1d:1f:df: 6c:7a:e8:96:43:2f:36:b5:dc:2c:5f:a2:f9:cc:38: 33:fc:19:fc:b9:2e:7b:11:4c:c2:2f:ea:43:a8:4f: bf:d1:a2:9a:24:50:bf:82:87:03:2f:95:26:f3:35: 37:b2:d4:c5:24:11:8f:d4:a4:f7:2d:10:1f:7a:8f: ed:eb:a8:c0:f2:71:99:fe:c2:d4:b7:e8:04:e7:2d: cb:c5:48:f7:ae:f9:17:46:7c:15:f7:1c:ef:7f:09: cb:1f:0e:81:0c:92:af:ea:26:64:d6:b3:2a:84:77: eb:24:be:bf:05:34:4b:7e:d0:c3:45:1d:2c:ab:f4: 66:8b:00:d3:87:97:c2:0c:97:aa:7c:f8:a1:6c:b2: d4:dc:76:70:53:9a:f3:38:fe:8f:e8:6b:74:e5:ad: d8:5a:75:f8:62:cd:39:05:70:79:9d:1c:8b:50:79: 0a:1e:30:cb:0c:63:6e:10:a3:a3:d1:7b:51:c5:26: 2e:31:a4:14:59:4d:70:3a:60:8b:aa:5b:7b:0e:be: 81:ea:c3:67:0b:04:3d:95:fc:a1:31:3c:17:9a:c0: 12:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A0:EA:D1:4C:75:6F:56:C8:EC:76:E4:92:EE:57:E0:FB:64:D7:80 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:68:74:17:71:82:9d:23:89:e6:a9:2a:27:bc:7f:77:57: 27:29:4b:5d:34:c1:37:51:31:09:b2:12:e7:51:2d:98:ed:a0: 4c:ee:d8:45:eb:04:19:04:ba:0f:d1:07:85:0c:6f:f3:24:5e: 41:51:b7:d1:aa:ad:ae:21:9e:62:ef:a2:56:19:98:1a:76:8d: 79:3b:11:56:af:b3:a5:b5:4c:07:09:26:e6:02:ba:8d:46:9c: ba:5b:3c:90:82:83:0c:d9:4b:88:21:55:f4:a2:d4:84:d9:e5: ff:76:c0:12:07:a0:b1:a9:91:16:1c:17:0b:7f:6f:01:70:32: 62:69:3e:0f:7c:b7:a8:37:81:df:c6:a0:87:ea:99:cb:0b:32: 79:ba:f9:26:a6:10:f5:6e:b4:72:92:d5:c4:01:49:11:38:88: 06:3a:06:04:b5:44:ec:94:2a:e6:59:8a:0d:7a:08:8b:3c:af: 7f:c6:f9:13:35:14:60:a7:57:e9:67:da:0a:11:5a:1a:cd:cc: 71:30:aa:b2:4a:24:b1:5c:cc:16:6a:f2:51:5f:fa:6d:55:11: 97:d4:f2:2e:0e:b7:d7:1c:7d:87:e4:30:2f:da:70:84:b9:ab: ac:11:fe:af:a0:b0:3d:88:6a:45:1f:d3:c3:79:9c:8d:18:25: f3:e7:c9:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUwNjI4MTcyMDUxWhcNMjUwNzA1MTcyMDUxWjAYMRYwFAYD VQQDEw02ODYwMjQ3My0zNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IeMPNBYsVvKo1Kxyqa32Ajngms/+7CyhazKWtHn2RjwCzOMLADT07EdH99s euiWQy82tdwsX6L5zDgz/Bn8uS57EUzCL+pDqE+/0aKaJFC/gocDL5Um8zU3stTF JBGP1KT3LRAfeo/t66jA8nGZ/sLUt+gE5y3LxUj3rvkXRnwV9xzvfwnLHw6BDJKv 6iZk1rMqhHfrJL6/BTRLftDDRR0sq/RmiwDTh5fCDJeqfPihbLLU3HZwU5rzOP6P 6Gt05a3YWnX4Ys05BXB5nRyLUHkKHjDLDGNuEKOj0XtRxSYuMaQUWU1wOmCLqlt7 Dr6B6sNnCwQ9lfyhMTwXmsAS2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqg6tFM dW9WyOx25JLuV+D7ZNeAMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwOmh0F3GCnSOJ5qkqJ7x/d1cnKUtdNME3UTEJshLnUS2Y7aBM7thF 6wQZBLoP0QeFDG/zJF5BUbfRqq2uIZ5i76JWGZgado15OxFWr7OltUwHCSbmArqN Rpy6WzyQgoMM2UuIIVX0otSE2eX/dsASB6CxqZEWHBcLf28BcDJiaT4PfLeoN4Hf xqCH6pnLCzJ5uvkmphD1brRyktXEAUkROIgGOgYEtUTslCrmWYoNegiLPK9/xvkT NRRgp1fpZ9oKEVoazcxxMKqySiSxXMwWavJRX/ptVRGX1PIuDrfXHH2H5DAv2nCE uausEf6voLA9iGpFH9PDeZyNGCXz58md -----END CERTIFICATE-----Generated at Sun Jun 29 20:17:19 2025 by rpki-client