$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: c9Smvn/jWUTqV8L8Ffk6hYcYV3D9DUMmnBWiyqQ08Os= Subject key identifier: 2E:6A:6B:97:B0:8F:FA:38:49:D8:AC:63:C1:98:6F:03:4C:0A:D0:37 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0D1E Signing time: Fri 22 Aug 2025 18:11:16 +0000 Manifest this update: Fri 22 Aug 2025 18:11:15 +0000 Manifest next update: Fri 29 Aug 2025 18:11:15 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: Zcj6OmuX3z6hsPYxmpfQGYme+MfOhGLljxe5BYJwz94=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Aug 22 18:11:15 2025 GMT Not After : Aug 29 18:11:15 2025 GMT Subject: CN=68a8b2c4-3363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:56:2b:d3:ac:37:bf:cc:e1:8e:49:3a:f8: 94:27:d5:6e:68:58:70:45:24:15:5e:ff:3f:ba:9a: 0b:8b:07:a3:93:59:20:31:11:01:66:6b:a8:f0:3d: e2:ba:79:cc:07:ca:db:57:15:a2:85:7a:67:68:7d: 9c:86:01:a3:db:bc:a4:87:5a:ee:0e:50:d9:a6:41: 54:75:55:68:88:87:5a:cd:de:83:f9:4e:ab:8d:95: 1f:47:6c:ac:0f:f2:ba:47:96:fa:03:ca:07:86:43: da:67:66:00:fc:4c:36:70:9f:35:df:8a:7e:76:89: 36:dd:4d:2a:ed:ee:50:4d:75:2b:6a:ee:84:76:8e: ea:63:bd:a8:1e:5d:61:b7:0e:bd:3b:c5:f2:c4:47: e5:86:69:6b:db:a7:8f:8c:11:b8:9d:98:69:88:a3: 40:77:89:9e:e1:46:80:51:06:32:3e:0f:ba:2e:4c: af:fd:4a:33:47:3b:65:db:33:79:98:e7:04:e1:29: d0:07:d3:2a:89:50:2f:63:b0:70:45:c7:89:98:90: 7f:61:b9:9e:27:26:d6:6b:8a:ed:7f:6a:9f:52:40: f2:46:3e:c9:2d:43:fe:6d:af:4e:18:02:2e:df:83: 82:38:a1:29:b4:2f:39:af:1c:d2:5a:6b:8a:90:dd: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:6B:97:B0:8F:FA:38:49:D8:AC:63:C1:98:6F:03:4C:0A:D0:37 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f0:62:1e:5a:16:c7:3b:c2:a3:3c:45:8e:34:81:70:82:bd: 0c:8a:45:62:14:cb:43:9b:00:7f:60:2d:8e:e6:7c:cb:9c:c4: 9b:d0:d3:16:ec:a3:4e:45:6f:3f:42:e7:49:e9:b4:81:cf:54: 8a:94:f2:3e:42:02:a0:ce:b3:5d:91:4e:0c:6f:55:fc:17:cf: ed:68:42:91:09:97:5e:e5:a6:a0:79:d5:ff:eb:8c:3f:11:71: af:ce:73:dd:41:33:c8:46:cd:9e:cb:a2:8e:5e:f6:d2:c6:e2: ee:17:ba:e0:51:03:42:a4:17:5e:33:1b:8c:cc:20:70:a6:58: d2:02:08:45:59:5f:15:7e:8c:c3:b5:af:f8:b3:d5:eb:cc:e4: 6b:16:34:c1:c4:3c:b8:bd:8d:1e:ee:18:82:89:f1:d1:3f:e6: d3:c4:67:91:b3:aa:6f:be:8e:6e:a4:bb:e2:04:59:a5:f6:60: cd:16:29:45:03:ca:2a:29:4d:ca:16:6d:ac:00:ab:13:a7:0d: c1:7c:29:f4:9e:00:7f:57:08:39:86:9e:23:03:13:1e:f0:39: ed:4e:b5:d8:de:29:61:12:db:82:83:7e:3b:94:98:a9:f7:00: a4:fd:cd:a1:42:65:24:ad:04:ad:9e:0a:5b:6e:60:7c:70:6c: 27:f6:e1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwODIyMTgxMTE1WhcNMjUwODI5MTgxMTE1WjAYMRYwFAYD VQQDEw02OGE4YjJjNC0zMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GxWK9OsN7/M4Y5JOviUJ9VuaFhwRSQVXv8/upoLiwejk1kgMREBZmuo8D3i unnMB8rbVxWihXpnaH2chgGj27ykh1ruDlDZpkFUdVVoiIdazd6D+U6rjZUfR2ys D/K6R5b6A8oHhkPaZ2YA/Ew2cJ8134p+dok23U0q7e5QTXUrau6Edo7qY72oHl1h tw69O8XyxEflhmlr26ePjBG4nZhpiKNAd4me4UaAUQYyPg+6Lkyv/UozRztl2zN5 mOcE4SnQB9MqiVAvY7BwRceJmJB/YbmeJybWa4rtf2qfUkDyRj7JLUP+ba9OGAIu 34OCOKEptC85rxzSWmuKkN0PSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5qa5ew j/o4SdisY8GYbwNMCtA3MB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx8GIeWhbHO8KjPEWONIFwgr0MikViFMtDmwB/YC2O5nzLnMSb0NMW 7KNORW8/QudJ6bSBz1SKlPI+QgKgzrNdkU4Mb1X8F8/taEKRCZde5aagedX/64w/ EXGvznPdQTPIRs2ey6KOXvbSxuLuF7rgUQNCpBdeMxuMzCBwpljSAghFWV8VfozD ta/4s9XrzORrFjTBxDy4vY0e7hiCifHRP+bTxGeRs6pvvo5upLviBFml9mDNFilF A8oqKU3KFm2sAKsTpw3BfCn0ngB/Vwg5hp4jAxMe8DntTrXY3ilhEtuCg347lJip 9wCk/c2hQmUkrQStngpbbmB8cGwn9uFw -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:35 2025 by rpki-client