$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: eWcYHHuFi9RPlwoljwyJrQ4pBptiMJWOe2T/aW/AU/I= Subject key identifier: 08:1E:E7:1A:24:F0:E6:5A:02:B7:F8:55:21:7C:0C:59:DE:A5:37:2F Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01B3 Signing time: Thu 03 Jul 2025 03:13:30 +0000 Manifest this update: Thu 03 Jul 2025 03:13:30 +0000 Manifest next update: Thu 10 Jul 2025 03:13:30 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: yrAS3AzGzK5mwr1WgDlCLYUo2F/gPe63DA8cNChCdtk=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Jul 3 03:13:30 2025 GMT Not After : Jul 10 03:13:30 2025 GMT Subject: CN=6865f55a-8a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ed:1f:c3:70:d7:a8:b7:da:ea:1c:a6:a1:1f: 2d:f9:02:71:d7:f3:74:8d:7e:71:91:c1:77:3f:2e: 24:bc:26:cc:da:39:54:a8:83:f4:10:0f:79:4d:a1: 74:52:78:bc:78:ee:5e:a7:1b:21:60:25:e7:4c:a9: 97:e9:63:bf:33:31:4a:d1:71:4c:cb:ef:14:6f:97: 95:2e:79:4b:72:93:8c:a1:1a:13:ca:f7:7e:4d:7b: 64:c8:3b:b5:c1:8c:fa:5e:36:b1:88:fd:e5:f7:b2: 78:cb:5f:88:f1:11:99:15:d5:11:bc:bb:61:69:6e: ae:5e:c0:fb:ad:0c:1f:df:32:b4:d5:75:19:1b:71: 0b:c4:86:7a:25:6e:fa:d3:5e:82:53:6f:1b:6c:7d: df:53:ba:12:39:16:35:6b:4b:0f:4c:a3:a4:59:c6: 04:1f:ce:35:65:22:ee:85:64:7e:91:02:1d:87:4f: 81:57:13:4d:26:6b:d1:df:f9:ce:2b:2a:40:be:53: 31:4b:a4:1b:ef:d7:5a:d0:63:02:41:49:dc:c7:5e: 2a:06:b5:1d:50:cb:35:f9:c9:b1:2b:93:d3:d3:14: 90:08:db:14:a5:93:48:f5:81:56:e7:85:49:3a:6b: aa:c9:ce:c8:47:a2:f0:2a:e4:0b:cf:df:67:c6:92: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:E7:1A:24:F0:E6:5A:02:B7:F8:55:21:7C:0C:59:DE:A5:37:2F X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:54:70:17:bc:b1:50:7b:57:c3:7b:b6:ba:b4:42:19:fe:7a: 33:eb:d6:aa:61:8d:ac:d9:07:47:d9:32:07:f1:39:6e:fb:28: 23:74:4a:5c:58:e0:fc:29:4c:59:3b:ed:10:1d:b3:1f:bb:9f: b6:24:17:40:e6:57:20:bb:e3:e0:0b:93:1d:50:46:92:b1:0e: 04:ca:a1:f5:43:e0:0c:9f:02:11:38:aa:e7:b1:14:72:7c:59: 56:0a:4d:af:0c:4c:5b:11:35:a2:a0:e7:06:fd:48:5e:fa:ce: b1:7f:7e:79:fc:91:79:10:9b:93:6e:ce:47:e7:40:2e:6d:df: ee:c0:37:07:e0:31:db:6d:15:53:d9:26:5b:60:d3:eb:d6:01: 58:1a:87:de:cc:a8:08:9f:b7:c5:c4:dd:a1:8e:bf:7a:9e:15: 56:39:26:64:cf:69:6a:9e:82:af:a6:2a:5a:54:3a:52:32:2e: 13:a9:1b:0c:fd:d2:15:31:ac:01:ed:c3:b1:41:29:f4:4e:73: 8b:65:a6:14:32:58:61:55:24:db:78:0c:16:4f:e7:6d:7e:0b: f5:55:1a:fa:b2:9c:45:8b:11:2b:e4:ac:14:32:00:99:98:b0: 70:7c:9d:9d:6b:29:e4:c1:07:af:f0:21:38:90:73:ef:22:f7: 36:61:94:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUwNzAzMDMxMzMwWhcNMjUwNzEwMDMxMzMwWjAYMRYwFAYD VQQDEw02ODY1ZjU1YS04YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8O0fw3DXqLfa6hymoR8t+QJx1/N0jX5xkcF3Py4kvCbM2jlUqIP0EA95TaF0 Uni8eO5epxshYCXnTKmX6WO/MzFK0XFMy+8Ub5eVLnlLcpOMoRoTyvd+TXtkyDu1 wYz6XjaxiP3l97J4y1+I8RGZFdURvLthaW6uXsD7rQwf3zK01XUZG3ELxIZ6JW76 016CU28bbH3fU7oSORY1a0sPTKOkWcYEH841ZSLuhWR+kQIdh0+BVxNNJmvR3/nO KypAvlMxS6Qb79da0GMCQUncx14qBrUdUMs1+cmxK5PT0xSQCNsUpZNI9YFW54VJ Omuqyc7IR6LwKuQLz99nxpJCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAge5xok 8OZaArf4VSF8DFnepTcvMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEVHAXvLFQe1fDe7a6tEIZ/noz69aqYY2s2QdH2TIH8Tlu+ygjdEpc WOD8KUxZO+0QHbMfu5+2JBdA5lcgu+PgC5MdUEaSsQ4EyqH1Q+AMnwIROKrnsRRy fFlWCk2vDExbETWioOcG/Uhe+s6xf355/JF5EJuTbs5H50Aubd/uwDcH4DHbbRVT 2SZbYNPr1gFYGofezKgIn7fFxN2hjr96nhVWOSZkz2lqnoKvpipaVDpSMi4TqRsM /dIVMawB7cOxQSn0TnOLZaYUMlhhVSTbeAwWT+dtfgv1VRr6spxFixEr5KwUMgCZ mLBwfJ2daynkwQev8CE4kHPvIvc2YZSx -----END CERTIFICATE-----Generated at Thu Jul 3 12:15:17 2025 by rpki-client