$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: X/LZI5L1/HIItkKK9ALYnp8pX5EuHDvQFR9K1UEGntc= Subject key identifier: 41:F5:16:72:50:7F:0D:7B:A6:60:54:E7:1D:60:47:B7:7B:62:0F:03 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 114E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0CFC Signing time: Fri 22 Aug 2025 20:40:52 +0000 Manifest this update: Fri 22 Aug 2025 20:40:52 +0000 Manifest next update: Fri 29 Aug 2025 20:40:52 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: Oss/k+VAr5limjgXvfD0IxCbhpS72ChoOmm2USzc/8M=) 2: 3A371ADC6EBE11F085F17D3AC4F9AE02.roa (hash: lBpcvgH1EVPmL9AGa9SmGGk5uCpEQgFCvirH/9iS5nU=) 3: A173B894112711F0845DF16FC4F9AE02.roa (hash: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U=) 4: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4nldf+8SF0UXyvc5ZFdPynmdfFfU94WXlTR6JoprTg=) 5: 396F61FE6EBE11F085F17D3AC4F9AE02.roa (hash: CE23sNAGQ72kvCJUhMKCCjdRdULm9pFJDWl36wscsUk=) 6: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: NAdbZTtzlwtewbjTfuMORoVz4S6lpr350iCxdpAhbLc=) 7: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: LcfL6WlPDAVnfVe8FVQ0PTDxHLr1cQFF1C/EotpyU7g=) 8: FA9BC95A548711EF89E24A18C4F9AE02.roa (hash: Lh2x2UhtnOihYNKj9Kn76/xvcicNSKGJ9zs/lJzF/lU=) 9: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4430 (0x114e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Aug 22 20:40:52 2025 GMT Not After : Aug 29 20:40:52 2025 GMT Subject: CN=68a8d5d4-4db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:8c:08:df:e3:44:b2:84:74:29:2e:c0:6d: ea:74:b1:a7:33:85:eb:52:d9:1c:a4:ba:d7:bd:15: 62:30:03:65:f7:74:c5:3e:7a:d2:d2:8e:ed:71:39: 34:9c:3f:11:74:91:b2:94:82:fe:0b:b1:b9:2d:d3: ae:8b:8b:01:95:f8:59:1f:9a:1f:2e:d1:f6:d5:44: f6:c9:61:a4:0a:8a:aa:c1:4a:e0:41:80:32:76:66: df:9f:80:d6:45:85:a0:c5:f8:3c:6b:ec:08:5d:36: ca:0b:75:e0:c1:e6:e6:cd:10:f2:96:35:51:10:cc: f7:64:49:d5:c3:ef:a7:43:6c:5b:5f:5b:82:c8:82: 54:85:69:94:0c:22:28:0d:96:3c:a7:94:ac:06:af: 50:d9:ef:af:6f:82:18:2d:7c:e3:5d:1b:3e:82:5b: 95:2e:26:45:c9:11:8f:31:d1:96:80:26:6d:d8:f5: 7d:87:cf:f7:c6:48:f5:cd:50:0f:34:3e:17:ad:a0: 59:ac:2a:98:e4:93:96:f2:58:b6:76:20:e7:7f:a4: a0:3c:35:71:0a:9d:81:bc:b5:fd:75:2c:27:6b:37: 18:46:5f:c7:4e:20:51:92:df:9b:4e:a7:e7:03:02: 77:f7:4a:ef:88:ec:6a:29:fa:e7:af:72:06:ca:ec: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F5:16:72:50:7F:0D:7B:A6:60:54:E7:1D:60:47:B7:7B:62:0F:03 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:d5:7d:97:66:01:1d:a1:76:60:41:d4:8b:e9:bf:3f:73:aa: 1d:9f:9e:06:a2:48:e3:be:d8:66:10:1d:b8:c9:e7:74:40:f7: a4:a0:a0:e2:9f:dc:60:59:1b:cc:d3:24:8c:27:a3:cb:88:e4: f1:57:ff:6c:13:da:b9:c1:65:27:9f:2a:18:f4:9b:40:80:9c: 81:e3:7a:fc:d9:3f:f3:0b:c4:b9:29:1c:1f:b9:e6:d6:ae:e4: 36:02:af:b7:3f:78:86:3c:38:54:0b:1d:ec:97:22:a9:94:60: f6:05:23:b1:e6:8e:5e:8f:ca:a8:24:a5:63:b4:8f:e8:b1:07: 4f:4a:9f:fd:fd:0f:65:6c:7f:5a:62:f6:2f:db:ea:0a:ba:37: 88:fa:0f:41:97:d1:77:fb:f4:55:b6:5a:0d:7d:a8:32:42:44: d5:99:8d:50:6a:b4:a6:a3:28:fa:8a:2b:86:c0:7b:9c:d4:c0: 66:0d:d8:c8:49:ca:ac:d6:d3:aa:14:a4:f0:56:e0:cb:17:59: c1:7e:98:12:a5:8a:02:df:31:20:18:79:8d:7e:37:f8:95:13: a4:a8:ab:b9:d0:cd:a5:c1:6a:d1:62:89:d5:fb:56:ea:14:53: 52:e4:e4:8e:a5:74:b6:b3:fd:fd:41:b9:d5:92:0a:c6:37:b8: b1:07:bd:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwODIyMjA0MDUyWhcNMjUwODI5MjA0MDUyWjAYMRYwFAYD VQQDEw02OGE4ZDVkNC00ZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzA+MCN/jRLKEdCkuwG3qdLGnM4XrUtkcpLrXvRViMANl93TFPnrS0o7tcTk0 nD8RdJGylIL+C7G5LdOui4sBlfhZH5ofLtH21UT2yWGkCoqqwUrgQYAydmbfn4DW RYWgxfg8a+wIXTbKC3XgwebmzRDyljVREMz3ZEnVw++nQ2xbX1uCyIJUhWmUDCIo DZY8p5SsBq9Q2e+vb4IYLXzjXRs+gluVLiZFyRGPMdGWgCZt2PV9h8/3xkj1zVAP ND4XraBZrCqY5JOW8li2diDnf6SgPDVxCp2BvLX9dSwnazcYRl/HTiBRkt+bTqfn AwJ390rviOxqKfrnr3IGyuyBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH1FnJQ fw17pmBU5x1gR7d7Yg8DMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX1X2XZgEdoXZgQdSL6b8/c6odn54GokjjvthmEB24yed0QPekoKDi n9xgWRvM0ySMJ6PLiOTxV/9sE9q5wWUnnyoY9JtAgJyB43r82T/zC8S5KRwfuebW ruQ2Aq+3P3iGPDhUCx3slyKplGD2BSOx5o5ej8qoJKVjtI/osQdPSp/9/Q9lbH9a YvYv2+oKujeI+g9Bl9F3+/RVtloNfagyQkTVmY1QarSmoyj6iiuGwHuc1MBmDdjI Scqs1tOqFKTwVuDLF1nBfpgSpYoC3zEgGHmNfjf4lROkqKu50M2lwWrRYonV+1bq FFNS5OSOpXS2s/39QbnVkgrGN7ixB71X -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:16 2025 by rpki-client