$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: MqEofzhETA2Q+jIY+9QAks98y/VaVetFPfw2K4x/qt4= Subject key identifier: DF:D7:B0:6E:EB:A1:30:7C:8F:2A:90:8A:53:90:29:0A:4D:FC:16:0E Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1DE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1DC2 Signing time: Fri 22 Aug 2025 16:10:21 +0000 Manifest this update: Fri 22 Aug 2025 16:10:20 +0000 Manifest next update: Fri 29 Aug 2025 16:10:20 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: +OE+PB28tlI9CVSdv08pPwoJPlVlADXK3eV0/RXe9Gc=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7653 (0x1de5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Aug 22 16:10:20 2025 GMT Not After : Aug 29 16:10:20 2025 GMT Subject: CN=68a8966d-c480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:28:fe:33:7f:b6:02:ef:22:67:7b:d0:79: 60:4b:cb:3a:8d:ab:c7:51:b1:e5:a7:6a:c6:1e:31: a8:68:8a:22:ed:b8:15:65:01:77:42:19:76:c0:39: 0e:18:47:9e:0e:e4:a3:eb:2e:ad:d7:f4:32:1f:f6: 93:96:e0:6b:06:95:e6:1b:c2:d7:fc:59:da:05:bd: 5e:d1:4b:4e:18:57:14:46:a2:cd:ce:b8:fa:07:40: 67:25:21:03:30:49:7d:95:10:f6:8a:ae:9d:be:37: 07:a2:0f:7b:f2:06:f3:06:48:be:67:b0:ff:5b:cf: c9:8d:7a:4b:c9:fc:8a:e2:32:79:23:be:af:87:0f: b2:41:bc:f9:dc:ae:76:39:66:18:ac:83:17:b6:a7: ac:11:4d:75:c4:c1:e5:91:14:38:cc:88:32:e7:89: 51:e1:bf:51:47:75:76:fb:96:16:c7:de:b5:9e:94: 22:38:48:b4:ea:0f:52:5f:6a:96:5f:a1:6f:33:f8: 99:49:56:a8:44:12:51:52:81:c8:10:83:61:ab:7e: 2e:53:7d:95:bb:ed:f6:b9:e4:e0:84:4b:d7:53:91: 11:95:44:82:5b:66:f3:62:43:af:79:36:c8:c5:e1: f3:93:e8:f7:d0:4e:61:07:07:8f:52:64:f5:88:6a: 92:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:B0:6E:EB:A1:30:7C:8F:2A:90:8A:53:90:29:0A:4D:FC:16:0E X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7a:de:a4:df:18:ac:29:19:ba:63:de:4a:79:43:30:25:13: be:02:e5:0e:57:86:ce:5f:df:b1:b7:67:33:48:b9:56:e7:d8: 7d:75:30:7c:88:a9:fa:82:77:85:07:45:3a:22:19:9b:71:1a: 89:f9:ce:fd:25:8f:83:78:74:8d:dc:65:c7:33:07:d8:8a:f9: b3:52:f0:52:68:9f:80:19:4c:ed:91:b6:ea:54:0e:27:b1:6c: 97:53:6b:e0:3d:28:48:2c:51:ba:57:aa:32:f8:85:33:8d:b3: c1:97:f0:b7:4b:69:dc:32:55:70:89:c9:bd:6f:be:d5:d0:ff: 5d:be:f1:9b:7b:aa:8e:0d:e6:cd:8d:12:9d:e2:92:86:5f:c0: 4b:f6:6b:86:e5:3d:ae:9f:9f:45:3f:22:cd:e4:ef:a6:d8:ba: f6:11:a8:7b:af:28:36:90:9d:e8:56:24:1f:5a:22:2b:3c:5a: 2c:df:a5:34:0e:17:27:b2:ff:a8:36:2f:50:61:48:6a:84:e6: 65:1b:dd:6f:ad:6e:50:87:28:ac:e2:6f:6a:f8:12:db:a5:2d: 64:87:57:65:ce:0c:a4:04:e0:e1:13:59:1d:50:15:94:eb:db: ab:c4:ba:a0:f8:9a:94:8f:e4:ec:99:7a:66:24:39:af:55:c8: dc:e0:45:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUwODIyMTYxMDIwWhcNMjUwODI5MTYxMDIwWjAYMRYwFAYD VQQDEw02OGE4OTY2ZC1jNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWko/jN/tgLvImd70HlgS8s6javHUbHlp2rGHjGoaIoi7bgVZQF3Qhl2wDkO GEeeDuSj6y6t1/QyH/aTluBrBpXmG8LX/FnaBb1e0UtOGFcURqLNzrj6B0BnJSED MEl9lRD2iq6dvjcHog978gbzBki+Z7D/W8/JjXpLyfyK4jJ5I76vhw+yQbz53K52 OWYYrIMXtqesEU11xMHlkRQ4zIgy54lR4b9RR3V2+5YWx961npQiOEi06g9SX2qW X6FvM/iZSVaoRBJRUoHIEINhq34uU32Vu+32ueTghEvXU5ERlUSCW2bzYkOveTbI xeHzk+j30E5hBwePUmT1iGqSGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/XsG7r oTB8jyqQilOQKQpN/BYOMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGet6k3xisKRm6Y95KeUMwJRO+AuUOV4bOX9+xt2czSLlW59h9dTB8 iKn6gneFB0U6IhmbcRqJ+c79JY+DeHSN3GXHMwfYivmzUvBSaJ+AGUztkbbqVA4n sWyXU2vgPShILFG6V6oy+IUzjbPBl/C3S2ncMlVwicm9b77V0P9dvvGbe6qODebN jRKd4pKGX8BL9muG5T2un59FPyLN5O+m2Lr2Eah7ryg2kJ3oViQfWiIrPFos36U0 Dhcnsv+oNi9QYUhqhOZlG91vrW5Qhyis4m9q+BLbpS1kh1dlzgykBODhE1kdUBWU 69urxLqg+JqUj+TsmXpmJDmvVcjc4EUe -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:03 2025 by rpki-client