$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: vgHGH29wVTzHM8B0CmS3k4Fwz674BByqaCS76w0Xinc= Subject key identifier: 59:28:47:7E:45:23:FF:C8:69:BC:10:B6:E4:1F:64:2A:C7:31:60:03 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0C6A Signing time: Fri 18 Jul 2025 18:29:53 +0000 Manifest this update: Fri 18 Jul 2025 18:29:52 +0000 Manifest next update: Fri 25 Jul 2025 18:29:52 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: tIbyw8O/BGhCut/qBhxnv6oAYj1ltXE2jedtyL0eGpA=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Jul 18 18:29:52 2025 GMT Not After : Jul 25 18:29:52 2025 GMT Subject: CN=687a92a0-32ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:9e:17:b2:0d:3e:bf:e4:a9:16:ab:af:81: 53:77:14:5a:54:dc:5c:52:e8:80:2f:b6:64:b4:11: 52:14:48:b7:1d:80:00:f1:fe:6a:7d:0f:d8:3c:e6: 65:ed:d2:7f:69:b8:70:ed:88:16:2b:39:e8:6b:c9: ef:6d:6e:62:9e:1c:3f:27:c1:ea:8c:b8:f1:56:2b: 8d:f5:aa:fd:da:40:f9:c9:64:5c:a7:25:ef:82:87: df:a5:72:37:20:58:0a:3e:85:13:1b:58:23:ec:55: 40:93:b9:0f:68:a2:2f:ce:9f:3a:e4:dc:ea:a4:ef: 81:da:82:78:5f:7d:ae:65:ff:d8:69:b0:b2:cd:35: ba:dc:4e:3f:43:8b:bc:2e:64:0f:09:f0:8f:2a:d3: d8:32:19:81:ef:83:60:24:63:14:49:e0:1e:be:aa: df:20:f9:c3:02:1c:3d:d4:56:a1:4d:26:34:bb:a4: a6:41:0c:eb:3f:9f:83:99:ba:19:80:4f:d9:c1:d7: 5d:57:9c:7b:6c:65:a5:11:f2:7b:17:e1:46:9e:dd: 71:7e:a3:02:23:0c:d2:18:f0:f9:d2:71:9b:31:d4: 1f:bb:21:ed:f0:e9:32:39:58:31:bd:46:94:a0:e5: b8:1f:92:ee:d8:07:05:16:e9:04:d9:69:f5:3e:15: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:47:7E:45:23:FF:C8:69:BC:10:B6:E4:1F:64:2A:C7:31:60:03 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:e6:a6:78:53:c3:de:11:36:05:85:a9:58:6b:bd:4b:8a:02: 28:3d:82:58:0c:6d:0c:be:6f:a8:af:82:7a:49:a8:fd:9c:02: a6:dd:6b:c5:1a:ad:76:6e:90:63:dc:9b:1e:15:da:0d:3a:c0: aa:32:45:35:2c:ef:97:16:4d:c9:a7:dc:fe:03:3c:93:b3:87: 30:25:85:d7:0b:5e:eb:3e:3b:dc:32:48:d8:57:3f:39:37:04: 56:f9:c0:33:52:43:a3:c3:93:51:83:6e:ab:07:94:a3:c4:c2: b2:d5:86:58:3c:5d:9f:01:e6:97:4b:11:ed:69:0f:ab:dc:1a: 40:5d:de:40:50:63:a0:90:f0:e8:07:b8:44:c6:42:f6:4c:c6: d3:98:02:c4:88:8d:59:99:d5:d8:e0:9b:26:28:7d:de:cb:d2: 65:5b:ee:65:47:37:76:c4:2e:e8:ad:ac:02:42:63:5e:a5:4d: 58:7e:f1:90:39:6f:13:2d:4b:c0:c9:52:98:e6:4a:0e:8d:4b: c3:27:f8:1b:33:da:de:67:07:0f:0a:40:26:41:94:f3:f1:72: 63:bc:73:07:58:8b:b1:ed:52:80:f6:0e:99:35:7a:bc:0b:cc: 37:a6:b4:c5:26:8e:84:e3:a3:50:d5:78:cd:5e:b3:da:a9:09: 43:1d:1b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUwNzE4MTgyOTUyWhcNMjUwNzI1MTgyOTUyWjAYMRYwFAYD VQQDEw02ODdhOTJhMC0zMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxKeF7INPr/kqRarr4FTdxRaVNxcUuiAL7ZktBFSFEi3HYAA8f5qfQ/YPOZl 7dJ/abhw7YgWKznoa8nvbW5inhw/J8HqjLjxViuN9ar92kD5yWRcpyXvgoffpXI3 IFgKPoUTG1gj7FVAk7kPaKIvzp865NzqpO+B2oJ4X32uZf/YabCyzTW63E4/Q4u8 LmQPCfCPKtPYMhmB74NgJGMUSeAevqrfIPnDAhw91FahTSY0u6SmQQzrP5+DmboZ gE/ZwdddV5x7bGWlEfJ7F+FGnt1xfqMCIwzSGPD50nGbMdQfuyHt8OkyOVgxvUaU oOW4H5Lu2AcFFukE2Wn1PhWFvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkoR35F I//IabwQtuQfZCrHMWADMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC5qZ4U8PeETYFhalYa71LigIoPYJYDG0Mvm+or4J6Saj9nAKm3WvF Gq12bpBj3JseFdoNOsCqMkU1LO+XFk3Jp9z+AzyTs4cwJYXXC17rPjvcMkjYVz85 NwRW+cAzUkOjw5NRg26rB5SjxMKy1YZYPF2fAeaXSxHtaQ+r3BpAXd5AUGOgkPDo B7hExkL2TMbTmALEiI1ZmdXY4JsmKH3ey9JlW+5lRzd2xC7orawCQmNepU1YfvGQ OW8TLUvAyVKY5koOjUvDJ/gbM9reZwcPCkAmQZTz8XJjvHMHWIux7VKA9g6ZNXq8 C8w3prTFJo6E46NQ1XjNXrPaqQlDHRtw -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:43 2025 by rpki-client