$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: h+Sz1IAXCa5qzBUyprssVSry9NsVtF+i+pEcmUa8fbs= Subject key identifier: C7:56:74:13:6C:0C:52:A6:B5:70:84:7A:62:E8:87:9E:56:CE:6C:D9 Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 0698 Signing time: Fri 22 Aug 2025 22:27:18 +0000 Manifest this update: Fri 22 Aug 2025 22:27:17 +0000 Manifest next update: Fri 29 Aug 2025 22:27:17 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: 6ePAzYdeMjWDFs6XpQWsN4/WjZZl/LT+2OMwxVTofhc=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: +ggMU5apLM7/E36BO1O5K0i1T6Q0H2I5abkvXaYTrxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Aug 22 22:27:17 2025 GMT Not After : Aug 29 22:27:17 2025 GMT Subject: CN=68a8eec5-f0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:85:42:34:a4:32:61:6a:aa:b9:91:56:62: b9:76:28:f0:c9:1a:6e:5f:e9:b4:7a:63:75:6a:ea: 0c:79:e5:ce:b7:4d:0f:cb:a8:11:11:be:df:d9:5e: a8:53:a6:c6:40:cd:06:14:58:ec:84:33:a7:c3:e8: fe:d2:46:2b:da:a0:fb:2c:35:1e:50:d6:7f:50:df: ee:c8:5b:be:54:40:ed:3e:2c:6f:c0:7f:e7:f3:ab: ba:a2:60:e4:fc:00:22:78:31:32:6e:76:67:31:af: 58:56:27:4e:e3:cb:e0:ef:e7:50:e9:61:2d:af:e0: 58:c6:f5:e3:39:54:2c:ad:21:b9:e6:39:dd:5c:e5: cf:e6:50:71:45:ad:c9:b5:42:64:7c:92:9b:16:a1: ab:76:70:03:32:8f:75:da:56:6a:34:3d:5b:a0:a9: 80:cc:50:06:26:8d:92:ef:e9:c0:10:4d:da:c1:32: 8b:1c:1c:24:10:0b:4d:a2:08:02:60:ce:cf:d3:70: ac:09:2a:54:95:52:83:d0:88:bf:89:52:0c:15:f8: 84:43:41:40:0a:1a:1a:ec:c4:5f:58:38:00:a0:9c: 78:1e:02:00:f2:07:9d:90:da:de:62:83:1f:6b:13: d1:a4:eb:8a:d9:e1:04:08:09:bb:10:24:89:ca:80: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:74:13:6C:0C:52:A6:B5:70:84:7A:62:E8:87:9E:56:CE:6C:D9 X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b8:70:3c:fd:84:c0:8b:4d:05:3d:78:b2:c9:55:36:bc:8e: 96:9a:39:af:9c:68:0d:60:28:6e:5c:d4:a3:8f:a3:24:d2:18: 4f:46:c1:a6:fe:3b:3b:54:f8:34:b2:de:3a:33:29:be:96:80: c9:c5:25:13:20:91:07:43:79:2f:40:b3:38:f0:a8:0c:5e:a4: 9c:01:cd:5b:bf:2d:35:bb:ca:0c:fa:52:1f:22:b3:13:e5:e3: 03:19:8b:a3:57:e4:79:39:be:69:43:ff:8c:f4:22:43:49:ab: eb:4b:c7:8a:38:ba:d8:d9:ce:5a:b0:22:fb:ff:f2:51:cc:25: 17:f4:e4:d4:89:30:c6:06:da:54:1c:92:3f:e3:58:36:46:5d: ee:28:a8:02:b6:1c:83:36:a4:70:e6:87:dc:c5:ab:67:6a:ae: 19:45:66:7a:4b:88:4a:01:4f:a2:5f:b8:ba:35:05:61:77:65: ee:a0:f6:4e:15:2a:5b:13:ba:47:25:2f:18:0a:96:59:23:f5: ee:41:fd:38:08:1a:b0:ef:a6:8e:c5:99:1a:21:47:ce:67:56: c5:21:b0:16:7c:26:56:4a:02:6c:b5:eb:c0:de:2d:27:e2:ac: 5f:e7:71:0c:2f:fc:1d:a2:7c:73:8e:c6:b9:ed:28:dc:88:8c: 99:e4:a2:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwODIyMjIyNzE3WhcNMjUwODI5MjIyNzE3WjAYMRYwFAYD VQQDEw02OGE4ZWVjNS1mMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P2FQjSkMmFqqrmRVmK5dijwyRpuX+m0emN1auoMeeXOt00Py6gREb7f2V6o U6bGQM0GFFjshDOnw+j+0kYr2qD7LDUeUNZ/UN/uyFu+VEDtPixvwH/n86u6omDk /AAieDEybnZnMa9YVidO48vg7+dQ6WEtr+BYxvXjOVQsrSG55jndXOXP5lBxRa3J tUJkfJKbFqGrdnADMo912lZqND1boKmAzFAGJo2S7+nAEE3awTKLHBwkEAtNoggC YM7P03CsCSpUlVKD0Ii/iVIMFfiEQ0FAChoa7MRfWDgAoJx4HgIA8gedkNreYoMf axPRpOuK2eEECAm7ECSJyoBctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdWdBNs DFKmtXCEemLoh55WzmzZMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8uHA8/YTAi00FPXiyyVU2vI6WmjmvnGgNYChuXNSjj6Mk0hhPRsGm /js7VPg0st46Mym+loDJxSUTIJEHQ3kvQLM48KgMXqScAc1bvy01u8oM+lIfIrMT 5eMDGYujV+R5Ob5pQ/+M9CJDSavrS8eKOLrY2c5asCL7//JRzCUX9OTUiTDGBtpU HJI/41g2Rl3uKKgCthyDNqRw5ofcxatnaq4ZRWZ6S4hKAU+iX7i6NQVhd2XuoPZO FSpbE7pHJS8YCpZZI/XuQf04CBqw76aOxZkaIUfOZ1bFIbAWfCZWSgJstevA3i0n 4qxf53EML/wdonxzjsa57SjciIyZ5KIe -----END CERTIFICATE-----Generated at Sat Aug 23 10:58:48 2025 by rpki-client