$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json) Hash identifier: rdYcat4wIzoMn6bUR5D4jNQhiW8ceg94lCiO9WmslKI= Subject key identifier: 93:BD:EE:96:F8:0B:D0:4A:42:0D:8B:57:35:7B:71:6E:B7:69:41:5C Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft Manifest number: BC Signing time: Sat 23 Aug 2025 06:07:09 +0000 Manifest this update: Sat 23 Aug 2025 06:07:09 +0000 Manifest next update: Sat 30 Aug 2025 06:07:09 +0000 Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 3xDC6oajkF0QqivnNdr6yJwL1JyFmJkjwGPc9EO7wyA=) 2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: rkbHYDL4xMD/8dSkmSRkDGyoT+DaGTrMwqprB8nP7g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966 Validity Not Before: Aug 23 06:07:09 2025 GMT Not After : Aug 30 06:07:09 2025 GMT Subject: CN=68a95a8d-f339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e4:f3:dc:21:20:e3:e6:bc:47:3c:f9:02:9e: 62:0a:49:4b:9f:a1:1e:58:67:29:e2:06:5f:b7:71: f4:65:5e:b6:92:d6:a0:3b:b6:b5:6f:9d:fa:ff:6b: e3:dd:53:72:99:7f:b9:8a:fd:bb:ab:cf:a1:1a:1b: 39:7e:22:17:6d:14:76:9a:7f:71:f8:4e:2c:d8:78: 53:1a:56:28:18:13:29:45:67:f3:f2:71:f8:03:76: fa:0f:87:93:98:16:34:27:35:8c:48:4b:99:8c:85: 85:28:e7:40:72:b7:d9:2a:dc:9b:f9:50:5a:f1:c1: 0f:ec:74:44:4e:df:76:f3:65:58:cd:2d:34:e1:b1: 9a:85:d0:e9:64:bd:dc:6c:5c:e9:3a:12:44:07:f0: 0e:f3:c9:3b:b0:b3:5e:d9:33:d5:7e:37:e6:e5:6d: 2f:67:8a:45:d8:f2:1a:e7:1a:fe:14:d1:6a:08:b8: 43:92:25:9c:f4:9f:7c:d1:c5:27:b8:84:0d:9c:e9: 2e:3b:00:fb:d8:a4:ea:d4:80:cf:94:95:1b:47:c6: 70:99:18:c1:19:3c:23:f8:6f:a8:76:7e:52:4c:01: ff:ca:43:9b:a4:3a:62:44:bc:c5:4d:de:ca:0b:23: 80:8e:9d:df:b8:cc:e2:88:51:1a:ee:66:69:ce:98: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BD:EE:96:F8:0B:D0:4A:42:0D:8B:57:35:7B:71:6E:B7:69:41:5C X509v3 Authority Key Identifier: keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f0:c2:f3:82:b2:d2:0f:d9:0d:a8:d4:4c:d4:c8:a9:1d:11: 8c:fb:24:e3:5e:83:fe:d7:8c:b7:7b:f8:a2:af:92:d1:08:6f: d9:74:2e:3a:c7:d4:1b:8b:89:f2:a2:e9:9f:b9:1f:5f:58:68: 0c:27:02:69:e4:7f:13:03:76:89:94:db:ef:52:b9:dd:73:3d: 44:27:6e:aa:22:54:10:77:22:f5:3f:2a:0f:e6:c0:f9:19:af: 17:8f:ca:f3:e3:67:ed:d8:0e:f6:a4:8e:2a:81:fe:5e:90:b8: 0f:a3:1a:17:9b:5b:91:00:38:21:25:0f:04:b4:44:a1:9f:fa: 44:5c:2f:a6:4b:6b:d7:9c:23:dc:84:5e:4f:df:f4:af:6b:15: 35:2d:c4:35:6e:ef:63:13:4d:0a:31:5f:c5:a7:36:23:1e:c6: 72:8a:19:de:e6:1e:28:1a:cf:c6:00:f1:15:59:b4:a5:d0:2f: 67:4a:6d:bb:9c:6d:67:8a:7f:62:6f:c2:cd:b5:71:be:e3:1a: d9:d6:28:26:84:61:9e:3a:7e:91:ed:4e:4f:c2:b7:8a:6f:fe: 3c:04:30:eb:af:fb:56:85:b4:29:b2:89:f0:0a:4b:ff:2b:01: f2:65:0d:c6:1a:41:3d:e7:54:a1:06:9c:c3:96:e7:77:ff:f3: 30:d8:b9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKDMyN0I4RTgzRDU0QkE2OUQ3QzM1QzZBMzQ0NDdEMUIx QjAxMUQ5NjYwHhcNMjUwODIzMDYwNzA5WhcNMjUwODMwMDYwNzA5WjAYMRYwFAYD VQQDEw02OGE5NWE4ZC1mMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+Tz3CEg4+a8Rzz5Ap5iCklLn6EeWGcp4gZft3H0ZV62ktagO7a1b536/2vj 3VNymX+5iv27q8+hGhs5fiIXbRR2mn9x+E4s2HhTGlYoGBMpRWfz8nH4A3b6D4eT mBY0JzWMSEuZjIWFKOdAcrfZKtyb+VBa8cEP7HRETt9282VYzS004bGahdDpZL3c bFzpOhJEB/AO88k7sLNe2TPVfjfm5W0vZ4pF2PIa5xr+FNFqCLhDkiWc9J980cUn uIQNnOkuOwD72KTq1IDPlJUbR8ZwmRjBGTwj+G+odn5STAH/ykObpDpiRLzFTd7K CyOAjp3fuMziiFEa7mZpzphGPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO97pb4 C9BKQg2LVzV7cW63aUFcMB8GA1UdIwQYMBaAFDJ7joPVS6adfDXGo0RH0bGwEdlm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xQTEwNkNEMDYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBwMThOY2FqUkVmUnNiQVIy V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01udU9nOVZMcHAxOE5jYWpSRWZSc2JBUjJXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xQTEwNkNEMDYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi9NbnVPZzlWTHBw MThOY2FqUkVmUnNiQVIyV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC48MLzgrLSD9kNqNRM1MipHRGM+yTjXoP+14y3e/iir5LRCG/ZdC46 x9Qbi4nyoumfuR9fWGgMJwJp5H8TA3aJlNvvUrndcz1EJ26qIlQQdyL1PyoP5sD5 Ga8Xj8rz42ft2A72pI4qgf5ekLgPoxoXm1uRADghJQ8EtEShn/pEXC+mS2vXnCPc hF5P3/SvaxU1LcQ1bu9jE00KMV/FpzYjHsZyihne5h4oGs/GAPEVWbSl0C9nSm27 nG1nin9ib8LNtXG+4xrZ1igmhGGeOn6R7U5PwreKb/48BDDrr/tWhbQpsonwCkv/ KwHyZQ3GGkE951ShBpzDlud3//Mw2LnQ -----END CERTIFICATE-----Generated at Sun Aug 24 11:11:10 2025 by rpki-client