$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: V+jAQsH86xApLxQKxxdlAgH7GF3EPUfQBT4u5ezGIfE= Subject key identifier: 1F:31:AA:8B:76:40:0E:39:1B:42:3F:74:E0:CA:D8:E0:84:B6:60:81 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1A88 Signing time: Fri 22 Aug 2025 16:25:17 +0000 Manifest this update: Fri 22 Aug 2025 16:25:17 +0000 Manifest next update: Fri 29 Aug 2025 16:25:17 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: UsGvDyx/6JGIUW2R6OnjE86UxGmIK8jp1rPE995at2E=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6802 (0x1a92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Aug 22 16:25:17 2025 GMT Not After : Aug 29 16:25:17 2025 GMT Subject: CN=68a899ed-3eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5f:14:6a:15:ab:c8:ed:f9:ee:3f:c7:d8:9d: 10:62:cc:9d:13:82:0c:6d:22:21:44:d1:07:2c:fe: c1:c7:a7:a9:00:d6:25:0a:43:53:04:c1:f8:c3:6a: 22:09:10:03:cc:4c:61:b8:0b:15:1a:5c:db:bf:eb: 76:8f:dc:cf:53:4a:5e:e5:b8:8c:4b:09:4a:4c:2e: 7d:ad:82:91:84:72:ec:8c:d9:12:02:0d:34:3e:ca: b8:ad:18:50:ae:e2:c2:78:d2:5a:51:9e:c1:eb:ac: a2:d2:00:e6:42:f3:8c:9b:d2:a6:52:77:1a:a0:f6: 08:93:0c:74:cd:84:73:d0:45:9a:da:1e:df:18:6c: 60:a6:00:4a:14:5f:8f:2c:5e:ce:01:fa:b2:8d:fa: 84:14:41:98:47:c9:d2:08:76:c0:a5:7a:48:1c:73: 64:14:15:d4:2d:54:fd:ce:17:b4:97:4d:34:67:60: 00:22:9a:2e:4f:1e:f6:df:5c:0b:38:d3:24:43:c3: 56:6b:69:e4:1d:bc:0b:5e:85:d7:02:e3:de:05:46: ad:c2:b8:fb:50:f9:bc:6c:39:ca:7f:de:c5:37:68: c9:f4:f2:6f:e0:e3:d1:27:d5:e8:4b:04:d0:c5:79: 43:5f:8f:8c:ed:8f:6d:a4:0a:47:92:e9:50:e0:83: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:31:AA:8B:76:40:0E:39:1B:42:3F:74:E0:CA:D8:E0:84:B6:60:81 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7f:1f:eb:e4:87:65:7a:42:af:62:03:5e:b3:58:8e:95:ef: 53:67:47:25:1d:b9:fb:22:b9:57:ac:b1:ff:c2:36:66:64:e6: 94:2c:95:db:be:46:01:0c:4e:be:f7:68:21:5a:6a:0c:05:25: 0c:31:2c:f0:6d:41:94:a8:1f:a2:d3:75:47:c9:5b:c3:7a:55: 23:1d:f8:94:06:7f:1e:6d:b5:7a:ef:2d:ab:19:f6:d2:8b:7d: 14:99:f0:38:8a:11:64:b6:e3:50:0d:a7:c4:c8:15:97:71:3b: b2:c0:2e:15:30:f1:5d:ff:74:c8:1d:5e:7a:93:f2:31:50:6b: ce:4f:f8:dd:e5:31:74:db:dc:ea:74:b1:dd:2f:43:25:d6:b8: a7:c1:30:b1:c2:18:24:0b:ed:26:63:2f:91:12:6a:84:7c:49: 11:0c:fc:4e:ea:7a:ea:3d:cc:8c:ca:37:12:6b:74:cb:1c:7a: 52:be:b9:9c:61:73:9f:83:02:64:4d:92:d6:02:92:88:78:17: bd:e4:28:e0:e9:0a:a3:54:f4:53:cb:b4:0d:f5:59:f6:f9:ea: 47:c7:20:12:03:61:7a:ff:83:7a:c9:0e:32:b8:9c:67:c9:a1: 32:bb:e1:ea:8b:5c:67:69:79:9a:06:35:72:a1:37:0a:6e:20: e8:57:81:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUwODIyMTYyNTE3WhcNMjUwODI5MTYyNTE3WjAYMRYwFAYD VQQDEw02OGE4OTllZC0zZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6V8UahWryO357j/H2J0QYsydE4IMbSIhRNEHLP7Bx6epANYlCkNTBMH4w2oi CRADzExhuAsVGlzbv+t2j9zPU0pe5biMSwlKTC59rYKRhHLsjNkSAg00Psq4rRhQ ruLCeNJaUZ7B66yi0gDmQvOMm9KmUncaoPYIkwx0zYRz0EWa2h7fGGxgpgBKFF+P LF7OAfqyjfqEFEGYR8nSCHbApXpIHHNkFBXULVT9zhe0l000Z2AAIpouTx7231wL ONMkQ8NWa2nkHbwLXoXXAuPeBUatwrj7UPm8bDnKf97FN2jJ9PJv4OPRJ9XoSwTQ xXlDX4+M7Y9tpApHkulQ4IOLvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8xqot2 QA45G0I/dODK2OCEtmCBMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCefx/r5IdlekKvYgNes1iOle9TZ0clHbn7IrlXrLH/wjZmZOaULJXb vkYBDE6+92ghWmoMBSUMMSzwbUGUqB+i03VHyVvDelUjHfiUBn8ebbV67y2rGfbS i30UmfA4ihFktuNQDafEyBWXcTuywC4VMPFd/3TIHV56k/IxUGvOT/jd5TF029zq dLHdL0Ml1rinwTCxwhgkC+0mYy+REmqEfEkRDPxO6nrqPcyMyjcSa3TLHHpSvrmc YXOfgwJkTZLWApKIeBe95Cjg6QqjVPRTy7QN9Vn2+epHxyASA2F6/4N6yQ4yuJxn yaEyu+Hqi1xnaXmaBjVyoTcKbiDoV4FL -----END CERTIFICATE-----Generated at Sat Aug 23 13:38:46 2025 by rpki-client