$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: 1rN/8uSM/XP9xBtNoIwc1lUOTENiE7IqyaQ4bOZCC4A= Subject key identifier: 6F:90:28:B7:C3:46:39:C0:7A:C4:07:E4:24:0A:4A:2B:71:56:40:2E Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C4E Signing time: Fri 22 Aug 2025 18:42:27 +0000 Manifest this update: Fri 22 Aug 2025 18:42:27 +0000 Manifest next update: Fri 29 Aug 2025 18:42:27 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: tjI9H08RPDJFk1Sn/dHzZM9LVd57jGkft6xcJ7AiaLY=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Aug 22 18:42:27 2025 GMT Not After : Aug 29 18:42:27 2025 GMT Subject: CN=68a8ba13-c951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:99:73:bc:5c:e5:fb:fc:f3:66:24:d6:6a: e9:23:60:a0:ef:64:62:9b:dc:27:62:04:37:e4:3c: 2c:5c:7e:07:51:69:1f:b0:af:3d:2e:74:96:21:46: c8:8a:47:62:a2:90:64:ff:01:42:8d:85:ce:f1:19: f7:c9:02:98:f4:14:8d:57:b2:eb:1a:c7:fa:31:66: 53:1e:6b:9a:79:7e:7d:68:13:75:a2:81:b9:39:42: 84:e8:7e:03:e7:ce:95:53:7c:d8:14:1c:5b:a8:94: 06:38:c2:d8:2b:31:5f:d8:69:ee:b2:c2:f2:1f:9c: b6:3d:a8:cf:6f:37:fe:3c:ae:11:f5:c1:f3:73:c7: 5c:7c:7b:ed:b6:68:4b:72:30:0a:b3:9a:ba:94:84: 8a:f8:36:ff:43:e1:6e:4f:f9:41:f7:c0:bf:1c:de: 0b:6c:2b:37:90:97:5b:1a:59:4e:c5:02:a0:44:bf: 8b:2f:46:d1:41:7c:90:54:0c:7b:0a:53:11:af:27: 82:16:47:91:56:9a:ff:bc:a1:bd:f6:a7:2c:1d:39: a6:0f:3c:eb:16:5f:f0:2c:d0:80:f6:cf:6d:df:e8: 02:72:29:7a:b4:2d:cf:e6:00:07:7f:ec:f6:e0:0e: 58:81:f1:fa:39:bb:17:5b:31:60:0e:5e:e5:63:d6: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:90:28:B7:C3:46:39:C0:7A:C4:07:E4:24:0A:4A:2B:71:56:40:2E X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:77:59:9e:09:8d:22:66:f2:ed:ed:db:65:b3:c3:7d:e5:c4: e2:ee:70:96:7c:ec:0c:ed:b5:0f:df:fe:e4:01:b3:9e:d3:36: 56:49:02:e7:df:da:35:47:b2:76:73:1b:39:70:fc:5a:5f:31: cc:a6:de:3f:b4:f2:71:cd:7c:e3:7a:00:fc:b7:e5:ca:88:fb: 6d:e1:0e:59:2e:8c:88:e0:98:3f:f5:cd:4f:7b:88:3d:ca:5e: 6c:26:63:7a:e3:22:74:92:07:14:36:ef:51:da:3b:d9:2e:7c: 8f:0d:d0:e3:00:f6:65:cd:f3:30:f4:f3:c9:29:12:b7:e9:4d: 61:42:16:af:ed:9d:d1:4c:5e:24:00:43:04:59:7c:4f:ed:92: 9c:e1:fa:c1:9c:a5:15:ae:a0:9d:56:15:60:66:fc:3b:eb:c3: ea:08:5a:b7:9d:eb:4b:0f:d3:49:e5:30:b9:73:c9:0f:80:43: 9b:72:87:dc:55:a9:4e:7a:2f:6f:dd:c5:bf:cd:b4:f9:f5:d7: 1b:09:30:13:33:13:08:78:a7:8c:4d:4b:6d:8f:be:42:55:98: 75:18:dc:bc:65:cf:6c:af:8f:07:31:d1:fd:bf:71:50:45:5d: 00:90:f9:a8:a5:17:48:e1:5f:ed:62:31:73:49:f5:90:00:a7: a4:ae:2f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUwODIyMTg0MjI3WhcNMjUwODI5MTg0MjI3WjAYMRYwFAYD VQQDEw02OGE4YmExMy1jOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhCZc7xc5fv882Yk1mrpI2Cg72Rim9wnYgQ35DwsXH4HUWkfsK89LnSWIUbI ikdiopBk/wFCjYXO8Rn3yQKY9BSNV7LrGsf6MWZTHmuaeX59aBN1ooG5OUKE6H4D 586VU3zYFBxbqJQGOMLYKzFf2GnussLyH5y2PajPbzf+PK4R9cHzc8dcfHvttmhL cjAKs5q6lISK+Db/Q+FuT/lB98C/HN4LbCs3kJdbGllOxQKgRL+LL0bRQXyQVAx7 ClMRryeCFkeRVpr/vKG99qcsHTmmDzzrFl/wLNCA9s9t3+gCcil6tC3P5gAHf+z2 4A5YgfH6ObsXWzFgDl7lY9ZVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+QKLfD RjnAesQH5CQKSitxVkAuMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPd1meCY0iZvLt7dtls8N95cTi7nCWfOwM7bUP3/7kAbOe0zZWSQLn 39o1R7J2cxs5cPxaXzHMpt4/tPJxzXzjegD8t+XKiPtt4Q5ZLoyI4Jg/9c1Pe4g9 yl5sJmN64yJ0kgcUNu9R2jvZLnyPDdDjAPZlzfMw9PPJKRK36U1hQhav7Z3RTF4k AEMEWXxP7ZKc4frBnKUVrqCdVhVgZvw768PqCFq3netLD9NJ5TC5c8kPgEObcofc ValOei9v3cW/zbT59dcbCTATMxMIeKeMTUttj75CVZh1GNy8Zc9sr48HMdH9v3FQ RV0AkPmopRdI4V/tYjFzSfWQAKekri9p -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:42 2025 by rpki-client