$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft File: MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json) Hash identifier: YDIqcbWFrT6vmWuZhbcq+3bi5DO0FopIy/uvlDf2qos= Subject key identifier: E0:AC:2C:37:D7:16:91:AF:C9:82:13:58:82:27:F5:11:CA:FA:C3:BF Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft Manifest number: 03AE Signing time: Sat 23 Aug 2025 01:04:08 +0000 Manifest this update: Sat 23 Aug 2025 01:04:08 +0000 Manifest next update: Sat 30 Aug 2025 01:04:08 +0000 Files and hashes: 1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: gdzKTQn5nitcvsDogi5tw01uahRgB4W736mFYn9kirw=) 2: 3A3E36B6631811F089107C4AC4F9AE02.roa (hash: LItmSY3Ra1Iy4gmT11d9DvsCigq7vdXD6JtTRrSnrY4=) 3: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (hash: HfH3bnjSArZqBmb++sIR3SfMhcyn2TdNR3uddhdO4C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Validity Not Before: Aug 23 01:04:08 2025 GMT Not After : Aug 30 01:04:08 2025 GMT Subject: CN=68a91388-7895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:a7:8b:23:9a:1a:76:83:95:3e:bc:d2:44: 40:0c:f7:3d:6e:c8:43:db:0e:bf:ce:fe:92:8c:a7: d5:9b:31:0f:ce:04:88:e4:f9:7e:31:d6:85:18:14: cf:e5:58:2d:ee:8d:2b:bb:2a:9e:f4:d8:04:e9:e4: e8:fa:72:af:32:3c:89:1c:75:1d:b2:5d:a9:ae:23: 18:90:2c:f7:1c:e0:b1:e1:95:cd:e9:7c:5a:e7:f0: ec:86:4e:fc:ee:5e:35:ad:24:c6:b0:82:53:76:2c: 33:11:a0:fe:2f:b9:3c:21:16:f8:69:4f:58:94:6e: 2d:46:d9:22:dc:27:7b:4c:78:29:c8:b1:ac:11:8d: db:0d:5a:63:b9:93:e9:bd:46:e0:c0:20:38:ea:9d: 1f:23:06:81:45:63:75:0c:e5:32:70:dc:01:20:7f: b6:3f:c6:6c:3d:ec:57:73:11:25:9e:98:29:93:9a: 82:2e:47:e8:50:6f:99:fe:a9:a0:91:6c:d3:e9:0a: e1:21:9c:32:fe:7b:96:2c:f2:ca:dc:09:51:83:99: 0f:b3:b0:b6:e1:8c:de:40:3f:21:a2:34:a7:a3:60: 2f:4c:d2:0b:58:4d:55:55:a2:6f:bf:4d:18:bd:e3: 80:df:79:93:07:f0:a7:fb:e8:03:19:00:f9:ce:da: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AC:2C:37:D7:16:91:AF:C9:82:13:58:82:27:F5:11:CA:FA:C3:BF X509v3 Authority Key Identifier: keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:97:56:a2:05:d5:d2:aa:91:8e:4e:14:2d:a8:f5:ef:c2:aa: 36:37:e9:28:54:54:fb:bd:75:2d:af:ed:a3:a2:7c:96:f2:d6: 1d:2b:4a:e0:62:bb:21:ab:85:ba:95:22:74:d6:4f:b8:63:da: 35:82:99:42:d1:95:7e:0c:bb:14:30:94:e5:5e:1b:83:20:98: 81:e8:ef:26:df:c7:1c:c7:69:5a:a0:75:3a:e2:1a:4d:55:db: 40:c0:ad:dc:9d:c8:1b:f7:02:74:df:95:30:4c:98:b2:e9:91: ff:1c:49:63:07:92:03:04:dc:7f:83:ad:5a:99:18:3f:37:8f: 9d:6e:c7:59:7e:c3:d4:dc:6d:55:1d:3a:0d:c0:ad:da:04:72: 11:3c:0b:7b:f7:80:37:df:04:5c:e4:85:53:40:9e:4e:59:7b: 84:2d:67:35:e2:5f:47:e0:58:37:7a:db:61:fe:45:7c:4d:af: 70:9f:be:d5:d1:a7:a3:89:ac:44:a9:d3:56:ca:03:6b:5d:af: 05:d2:b3:ce:37:13:b4:26:5d:49:a3:9f:23:be:d8:2d:30:66: 48:fa:6b:75:9a:ec:d1:e2:ed:0a:6e:fa:ed:a5:46:2b:aa:e9: 5f:f3:86:d1:d5:5c:1a:a2:58:3d:ff:ae:11:d8:fc:7b:f3:90: 8b:39:8a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3 QUJGOTdERTMwHhcNMjUwODIzMDEwNDA4WhcNMjUwODMwMDEwNDA4WjAYMRYwFAYD VQQDEw02OGE5MTM4OC03ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ6niyOaGnaDlT680kRADPc9bshD2w6/zv6SjKfVmzEPzgSI5Pl+MdaFGBTP 5Vgt7o0ruyqe9NgE6eTo+nKvMjyJHHUdsl2priMYkCz3HOCx4ZXN6Xxa5/Dshk78 7l41rSTGsIJTdiwzEaD+L7k8IRb4aU9YlG4tRtki3Cd7THgpyLGsEY3bDVpjuZPp vUbgwCA46p0fIwaBRWN1DOUycNwBIH+2P8ZsPexXcxElnpgpk5qCLkfoUG+Z/qmg kWzT6QrhIZwy/nuWLPLK3AlRg5kPs7C24YzeQD8hojSno2AvTNILWE1VVaJvv00Y veOA33mTB/Cn++gDGQD5ztqlpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCsLDfX FpGvyYITWIIn9RHK+sO/MB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc3MS81NUYyRjBGRUIxN0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1Vy cXNPemdhdWt6RE42djVmZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCal1aiBdXSqpGOThQtqPXvwqo2N+koVFT7vXUtr+2jonyW8tYdK0rg Yrshq4W6lSJ01k+4Y9o1gplC0ZV+DLsUMJTlXhuDIJiB6O8m38ccx2laoHU64hpN VdtAwK3cncgb9wJ035UwTJiy6ZH/HEljB5IDBNx/g61amRg/N4+dbsdZfsPU3G1V HToNwK3aBHIRPAt794A33wRc5IVTQJ5OWXuELWc14l9H4Fg3etth/kV8Ta9wn77V 0aejiaxEqdNWygNrXa8F0rPONxO0Jl1Jo58jvtgtMGZI+mt1muzR4u0KbvrtpUYr qulf84bR1Vwaolg9/64R2Px785CLOYoT -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:51 2025 by rpki-client