$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json) Hash identifier: +TkqcNnWqaxOnRB2FAOa/VpOEnNhO5pv5HY60Vx6kp4= Subject key identifier: 92:99:CC:6B:94:DA:B5:8C:CF:D9:DE:2D:35:F1:B5:B4:12:F9:BC:BA Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft Manifest number: C9 Signing time: Sat 19 Jul 2025 05:55:33 +0000 Manifest this update: Sat 19 Jul 2025 05:55:32 +0000 Manifest next update: Sat 26 Jul 2025 05:55:32 +0000 Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: jLO6SGDpv9LyWFCZiG5SimFmd6DI7cHuqo3OVXlNBF0=) 2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: GXX1SqQqnLs/QR8YWu9cJWfVt1DZZvg7YhJhKqg5IbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Validity Not Before: Jul 19 05:55:32 2025 GMT Not After : Jul 26 05:55:32 2025 GMT Subject: CN=687b3354-189b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:83:f6:7c:d7:17:1d:a9:2b:71:2b:6b:20: 57:3a:29:88:3d:40:d8:3a:4a:22:35:3b:be:06:f8: cf:58:60:87:b5:6c:5f:fa:8b:3d:92:57:7e:26:97: 7e:f8:ca:21:93:45:99:8e:41:9f:10:71:0c:fd:16: ca:e0:b9:4a:ed:25:43:9f:0b:a3:20:46:b6:92:2f: 95:1c:4f:97:c3:39:6d:00:99:5d:c2:ce:8a:6b:75: 3e:be:0a:3b:ff:20:b0:76:91:e2:5c:80:ef:77:80: 84:b5:7f:d2:3e:f7:ce:de:98:25:f3:21:47:53:15: af:58:cc:69:32:2c:7c:76:51:be:0d:ee:b2:15:98: 52:77:2a:1c:6e:01:21:26:05:44:9a:04:e4:38:07: a5:5b:bb:6d:a3:b2:f9:ae:74:07:4e:92:e7:74:d4: 64:03:61:66:7a:ac:f7:d8:d8:9c:8d:fd:a4:e4:0c: a3:b1:f1:8c:3f:54:8a:19:e8:6f:63:63:7d:17:35: df:6f:6e:2f:c5:97:2e:dc:9d:5c:ab:e2:e5:97:8f: 47:fe:50:ac:73:c5:40:f9:e7:c8:1a:59:8f:30:df: 1e:4e:a4:99:4c:fa:a1:5d:95:19:e4:62:ff:b3:1c: 64:9c:e5:c0:79:96:51:0e:b6:b0:db:75:9b:63:34: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:CC:6B:94:DA:B5:8C:CF:D9:DE:2D:35:F1:B5:B4:12:F9:BC:BA X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f5:af:24:64:aa:60:93:66:56:91:f7:1a:27:23:7a:43:7b: 6c:4f:ef:38:df:85:2c:61:42:2c:ca:e3:a8:5c:5f:80:88:86: ae:62:86:e0:31:53:ea:eb:56:d1:81:a8:06:77:2b:fe:73:5e: 17:1a:6b:6b:10:a5:9b:fc:05:41:60:bc:46:2c:6c:68:1f:1b: 5e:0d:3e:fc:08:88:28:23:1b:85:3d:df:ce:80:d1:a0:0e:e2: 09:0d:53:02:cc:e7:8d:6c:aa:5e:d5:bf:04:0d:2b:e9:3d:79: 69:89:86:bb:10:fa:b1:9d:91:4e:92:0f:77:4e:76:9f:47:35: 8b:c8:5e:83:32:51:05:f1:37:2f:3f:79:70:ea:c5:4a:f8:e4: 4d:58:cb:61:76:2a:f9:08:09:54:95:b8:4c:f7:1d:1b:8e:c9: 60:54:36:ab:f9:47:4b:ce:da:be:4f:7c:c3:a7:cf:57:13:ae: 1e:42:7b:8a:49:75:12:29:e3:d3:ec:40:f5:1c:58:00:fc:db: 1b:28:71:a4:5d:fb:38:d6:75:b6:d7:47:b7:af:65:8c:0b:b2: 98:17:05:bc:d3:72:8a:73:b1:c0:58:0a:4b:f7:5c:ff:b2:ba: 94:71:89:70:86:2d:2c:d3:56:ff:66:af:32:41:02:b8:1e:15: e2:f6:17:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjUwNzE5MDU1NTMyWhcNMjUwNzI2MDU1NTMyWjAYMRYwFAYD VQQDEw02ODdiMzM1NC0xODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/OD9nzXFx2pK3ErayBXOimIPUDYOkoiNTu+BvjPWGCHtWxf+os9kld+Jpd+ +Mohk0WZjkGfEHEM/RbK4LlK7SVDnwujIEa2ki+VHE+XwzltAJldws6Ka3U+vgo7 /yCwdpHiXIDvd4CEtX/SPvfO3pgl8yFHUxWvWMxpMix8dlG+De6yFZhSdyocbgEh JgVEmgTkOAelW7tto7L5rnQHTpLndNRkA2Fmeqz32Nicjf2k5AyjsfGMP1SKGehv Y2N9FzXfb24vxZcu3J1cq+Lll49H/lCsc8VA+efIGlmPMN8eTqSZTPqhXZUZ5GL/ sxxknOXAeZZRDraw23WbYzR8qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKZzGuU 2rWMz9neLTXxtbQS+by6MB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx9a8kZKpgk2ZWkfcaJyN6Q3tsT+8434UsYUIsyuOoXF+AiIauYobg MVPq61bRgagGdyv+c14XGmtrEKWb/AVBYLxGLGxoHxteDT78CIgoIxuFPd/OgNGg DuIJDVMCzOeNbKpe1b8EDSvpPXlpiYa7EPqxnZFOkg93TnafRzWLyF6DMlEF8Tcv P3lw6sVK+ORNWMthdir5CAlUlbhM9x0bjslgVDar+UdLztq+T3zDp89XE64eQnuK SXUSKePT7ED1HFgA/NsbKHGkXfs41nW210e3r2WMC7KYFwW803KKc7HAWApL91z/ srqUcYlwhi0s01b/Zq8yQQK4HhXi9hfI -----END CERTIFICATE-----Generated at Sun Jul 20 03:47:38 2025 by rpki-client