$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: 6BNOg9Js5pGw+4oNoLmJUJs/pv+OSh6IV2zRqM0R8D8= Subject key identifier: AB:19:7B:C1:9B:74:AD:8B:5C:6B:F9:9A:26:AA:AA:2B:2A:C7:1B:07 Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 07D6 Signing time: Fri 18 Jul 2025 21:26:47 +0000 Manifest this update: Fri 18 Jul 2025 21:26:46 +0000 Manifest next update: Fri 25 Jul 2025 21:26:46 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: xTbM9qJFDDgQJSivTpIAVIHPIqcL7g2q02OLMqXmNO4=) 2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: LwB2LqDOhHIBTqs2GBEUbqXjt3VBU4kWjANTbQ1spqo=) 3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +6R7bMqMqpzAOMYELOdkWclWKRtU/auj18n3CAr0V2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: Jul 18 21:26:46 2025 GMT Not After : Jul 25 21:26:46 2025 GMT Subject: CN=687abc17-533b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:3b:70:24:4f:15:98:8d:f4:60:45:0d:56: 36:e6:5f:0d:b9:f7:b9:43:03:b1:9f:f3:b7:28:9c: 1c:26:76:6b:3d:c0:09:4d:53:85:b0:89:67:3b:2c: 4a:96:69:91:43:2e:3f:ca:e0:71:76:89:9e:54:11: 2a:e0:d3:98:8b:39:ce:1f:22:85:2d:5e:7d:81:a0: 02:5c:99:6a:b0:2b:6f:80:8f:a6:61:0a:50:3f:44: 62:e0:f9:58:55:8e:9d:92:b7:5a:8e:67:d1:e3:b8: c9:d7:82:7c:12:d1:02:bc:aa:fb:ce:09:27:e5:cd: c7:8f:bc:01:2f:ca:cd:05:5f:51:0b:e3:8b:a6:29: 78:0e:32:81:1f:72:f9:c3:68:16:74:5b:b2:0a:df: 89:ce:9c:2c:fa:e0:ee:37:2e:1b:62:5a:71:59:af: c3:e6:c9:74:f1:7c:d4:26:7e:6f:3c:53:d4:aa:b0: b3:e2:33:77:83:68:d9:b9:25:1e:66:5b:7f:ce:92: 6a:4b:5b:87:77:18:8e:a0:97:1d:e1:03:c5:51:b2: 1b:4b:c5:ec:67:4c:2b:e7:dd:8d:9a:3f:1b:1b:19: 52:cb:10:6f:9e:85:e7:57:65:61:0b:11:43:39:1f: 97:c6:55:b0:ba:78:87:ad:66:17:ec:ea:81:c0:df: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:19:7B:C1:9B:74:AD:8B:5C:6B:F9:9A:26:AA:AA:2B:2A:C7:1B:07 X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:93:f8:85:2d:18:03:4d:e7:fc:bf:94:59:b6:ee:ab:78:80: 00:3f:db:2c:74:4d:3d:d2:56:77:b2:d2:fa:42:88:ec:cd:5b: a1:8a:37:60:ba:61:45:b0:45:ea:3d:10:77:a0:f4:91:e7:7a: fc:b7:48:80:02:75:85:f5:7d:32:de:5d:b5:4e:d0:56:1c:94: 97:32:b0:46:79:2a:06:b2:75:7a:1c:68:71:b4:82:1a:f2:66: 7a:b1:2b:2e:09:28:54:e8:70:51:2e:1e:02:13:c4:1a:4f:04: a7:43:1d:ca:16:86:2b:87:29:31:f5:b3:57:db:d8:71:c8:bd: 18:84:a9:72:49:96:89:f3:c3:86:06:28:54:7e:f3:d3:5e:c9: 2c:52:eb:bb:ba:21:37:bb:53:45:ff:43:15:04:54:ad:a3:7f: 67:f4:3b:98:9f:55:d1:e1:f5:63:80:ff:0e:13:84:25:8d:f8: a4:08:98:f6:8f:20:92:91:17:25:fe:21:a9:bd:28:d4:a4:ef: 80:e2:47:09:a2:77:10:23:7f:59:d7:42:8e:2f:0e:2d:8a:91: 50:2c:9c:93:2a:04:9d:1a:3f:f6:e1:eb:21:a9:cc:0d:81:87: 7b:57:6a:7c:98:89:5c:e8:67:73:8d:5f:fd:44:39:9d:49:b7: e2:15:5c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjUwNzE4MjEyNjQ2WhcNMjUwNzI1MjEyNjQ2WjAYMRYwFAYD VQQDEw02ODdhYmMxNy01MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNI7cCRPFZiN9GBFDVY25l8Nufe5QwOxn/O3KJwcJnZrPcAJTVOFsIlnOyxK lmmRQy4/yuBxdomeVBEq4NOYiznOHyKFLV59gaACXJlqsCtvgI+mYQpQP0Ri4PlY VY6dkrdajmfR47jJ14J8EtECvKr7zgkn5c3Hj7wBL8rNBV9RC+OLpil4DjKBH3L5 w2gWdFuyCt+Jzpws+uDuNy4bYlpxWa/D5sl08XzUJn5vPFPUqrCz4jN3g2jZuSUe Zlt/zpJqS1uHdxiOoJcd4QPFUbIbS8XsZ0wr592Nmj8bGxlSyxBvnoXnV2VhCxFD OR+XxlWwuniHrWYX7OqBwN9mUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsZe8Gb dK2LXGv5miaqqisqxxsHMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrk/iFLRgDTef8v5RZtu6reIAAP9ssdE090lZ3stL6QojszVuhijdg umFFsEXqPRB3oPSR53r8t0iAAnWF9X0y3l21TtBWHJSXMrBGeSoGsnV6HGhxtIIa 8mZ6sSsuCShU6HBRLh4CE8QaTwSnQx3KFoYrhykx9bNX29hxyL0YhKlySZaJ88OG BihUfvPTXsksUuu7uiE3u1NF/0MVBFSto39n9DuYn1XR4fVjgP8OE4QljfikCJj2 jyCSkRcl/iGpvSjUpO+A4kcJoncQI39Z10KOLw4tipFQLJyTKgSdGj/24eshqcwN gYd7V2p8mIlc6GdzjV/9RDmdSbfiFVzp -----END CERTIFICATE-----Generated at Sun Jul 20 13:37:33 2025 by rpki-client