$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: iaL7c0XrICO9klWL4N6UtaWS3LRVGbA6DOgQ4RGyQaY= Subject key identifier: 2E:97:00:41:BA:46:CC:7B:EC:71:EE:6A:6B:E8:55:24:51:CA:22:A5 Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 068A Signing time: Mon 30 Jun 2025 22:34:59 +0000 Manifest this update: Mon 30 Jun 2025 22:34:59 +0000 Manifest next update: Mon 07 Jul 2025 22:34:59 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: Uke1s5EYy8/z1cw7gtTEerrduO/FwyLdhDodSz6F0mE=) 2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE=) 3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: elY+yIl1H3F26OUjA40A23dujn0CummnltINa5yusRE=) 4: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: kssI5Drais5SXspTClU/NbBaSd+qkoi5idfDTiL4j3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: Jun 30 22:34:59 2025 GMT Not After : Jul 7 22:34:59 2025 GMT Subject: CN=68631113-94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:82:fd:c6:05:b8:c7:97:c4:cf:b4:9a:b5: a7:63:07:08:af:c3:e9:64:9f:f4:ca:55:6e:23:b5: 69:7c:83:34:0d:77:17:d4:ed:8b:0c:c6:e3:bb:94: 0e:93:46:3d:eb:c5:8d:87:44:19:78:8e:32:f7:15: c8:f1:cb:43:95:1e:6d:bd:d2:23:5c:61:58:2a:c1: 7a:17:48:36:e2:f7:a5:5c:61:05:06:82:57:e2:48: 0f:1e:0c:c0:1d:bd:4c:92:91:c1:b0:ab:7e:86:ad: e8:52:3a:7a:29:a3:2d:fd:1d:ef:66:74:c0:e2:87: 7c:97:ca:30:50:9a:58:53:df:2f:06:24:55:3b:46: cf:92:70:fd:bf:1b:2c:40:73:40:07:e2:f2:11:70: 0a:9f:73:40:47:1f:94:59:93:d3:22:b2:68:4c:6b: d1:78:d4:34:48:1e:70:15:9e:a5:4d:7e:ab:96:10: 0b:b5:e4:74:60:10:28:11:54:38:0b:a5:80:9c:f5: 9c:ed:2d:ba:50:78:0c:93:17:2a:10:34:a5:51:64: 44:e9:04:14:c0:a7:8f:63:d4:c3:a1:2f:1a:17:42: 41:87:13:53:b8:c5:df:ce:33:74:9b:04:91:55:84: c1:c0:43:9a:72:30:88:b4:e3:34:51:73:ac:10:36: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:97:00:41:BA:46:CC:7B:EC:71:EE:6A:6B:E8:55:24:51:CA:22:A5 X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6a:e4:3c:1f:f4:10:48:46:cb:23:6f:cd:b4:ad:bc:10:6d: 0c:15:c5:54:5d:9a:70:63:fc:71:ce:05:c4:af:02:66:c3:80: 2f:09:90:1c:38:61:02:fa:cd:ef:08:4e:49:a5:4a:cb:87:e0: f4:4b:6b:41:b1:e0:a3:4a:42:7e:42:3d:5b:b4:b2:bf:5b:d6: b4:24:e1:a5:23:fd:92:57:c5:91:6e:c0:8c:7c:6a:27:9b:79: 33:84:10:ff:87:5f:39:e2:d7:69:35:c3:c5:09:b1:b8:65:ab: 80:00:af:cd:08:37:b3:a1:e9:f0:24:d9:3f:cb:eb:b3:01:b6: d9:66:18:2f:2d:a5:94:c2:e5:38:b4:c6:3f:c7:b9:85:15:4d: 16:0a:19:4e:95:91:2d:a5:d5:c1:f8:2d:39:bc:1c:7c:34:a7: 61:06:66:ef:43:6f:66:a6:7d:21:f8:a9:f9:c6:13:f8:66:66: 58:e9:bd:54:42:28:63:de:21:09:97:28:ab:e0:61:97:47:13: d1:3d:1c:3c:da:3f:56:a5:4d:34:0a:d6:e2:b4:63:39:cd:b1: df:51:08:be:5c:15:3b:d8:2f:2c:d7:e6:41:3d:75:bd:02:f1: 90:24:81:6c:3e:7a:38:fe:83:d6:c1:4c:bc:a3:66:12:af:95: 0b:7c:ef:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjUwNjMwMjIzNDU5WhcNMjUwNzA3MjIzNDU5WjAYMRYwFAYD VQQDEw02ODYzMTExMy05NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuteC/cYFuMeXxM+0mrWnYwcIr8PpZJ/0ylVuI7VpfIM0DXcX1O2LDMbju5QO k0Y968WNh0QZeI4y9xXI8ctDlR5tvdIjXGFYKsF6F0g24velXGEFBoJX4kgPHgzA Hb1MkpHBsKt+hq3oUjp6KaMt/R3vZnTA4od8l8owUJpYU98vBiRVO0bPknD9vxss QHNAB+LyEXAKn3NARx+UWZPTIrJoTGvReNQ0SB5wFZ6lTX6rlhALteR0YBAoEVQ4 C6WAnPWc7S26UHgMkxcqEDSlUWRE6QQUwKePY9TDoS8aF0JBhxNTuMXfzjN0mwSR VYTBwEOacjCItOM0UXOsEDY0GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6XAEG6 Rsx77HHuamvoVSRRyiKlMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKauQ8H/QQSEbLI2/NtK28EG0MFcVUXZpwY/xxzgXErwJmw4AvCZAc OGEC+s3vCE5JpUrLh+D0S2tBseCjSkJ+Qj1btLK/W9a0JOGlI/2SV8WRbsCMfGon m3kzhBD/h1854tdpNcPFCbG4ZauAAK/NCDezoenwJNk/y+uzAbbZZhgvLaWUwuU4 tMY/x7mFFU0WChlOlZEtpdXB+C05vBx8NKdhBmbvQ29mpn0h+Kn5xhP4ZmZY6b1U Qihj3iEJlyir4GGXRxPRPRw82j9WpU00CtbitGM5zbHfUQi+XBU72C8s1+ZBPXW9 AvGQJIFsPno4/oPWwUy8o2YSr5ULfO/J -----END CERTIFICATE-----Generated at Tue Jul 1 22:51:32 2025 by rpki-client