$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: NOlAy87JWZ8Vyz297RQKP2kBCnHWQVt6dJiNH77Ul/U= Subject key identifier: DA:16:DF:16:4B:39:57:2D:95:52:2E:E6:F0:FD:7B:B6:0C:21:79:C9 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03D2 Signing time: Mon 21 Jul 2025 00:50:56 +0000 Manifest this update: Mon 21 Jul 2025 00:50:56 +0000 Manifest next update: Mon 28 Jul 2025 00:50:56 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: ZLlLrsUU7ZvV3mnodZaQxNaPhafpP0GDL9ZTf5Y7Y2k=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 7R3hysbeSbUFb8HWymJrPzj8ZBNf1N511Ldy7MXSF9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Jul 21 00:50:56 2025 GMT Not After : Jul 28 00:50:56 2025 GMT Subject: CN=687d8ef0-154b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4b:55:a0:62:17:0c:36:30:6c:7e:41:5a:7c: bb:f1:83:e1:de:c8:2f:77:68:da:d7:6b:8d:cb:37: cb:6f:ab:03:eb:3b:fd:6a:0d:4b:3c:06:76:31:08: aa:85:a3:f2:2c:cf:48:91:29:07:f6:bd:63:d2:8c: a3:43:b0:84:e1:20:f9:24:94:36:64:b2:6e:22:ed: 1c:3e:0c:b2:64:61:c9:84:a1:4b:1c:39:35:78:56: a9:f5:83:c8:37:ec:83:1c:f6:29:f8:c7:05:59:5b: 30:d0:53:66:53:cf:15:0d:9f:33:92:18:5a:be:2d: 8c:e9:f9:fa:bf:3f:d0:33:78:1d:a9:47:b3:3f:2c: 7d:21:53:a0:e8:63:ce:8c:2a:53:58:7d:07:a6:74: da:63:9b:98:b5:93:d9:2d:2f:cd:3a:d6:ae:ff:4d: 1b:d6:42:62:24:12:48:d2:18:ce:6a:c4:07:f5:98: c4:77:8d:5a:77:b1:f8:0c:94:69:0f:63:a4:fb:67: b3:57:21:99:4d:2b:40:f6:0e:01:d0:2b:f8:5c:22: 54:e4:2c:c6:e6:e0:7c:e9:22:34:d0:4f:c4:be:e5: 79:46:3d:0c:f4:9b:8e:a3:79:8f:91:6a:87:e4:5f: d1:a3:b9:7d:55:9f:46:24:4e:3e:d9:64:9e:cd:eb: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:16:DF:16:4B:39:57:2D:95:52:2E:E6:F0:FD:7B:B6:0C:21:79:C9 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:e7:83:3d:c8:07:25:15:5e:bf:19:d5:42:fc:89:58:f7:47: 66:c8:dc:9d:16:c9:d3:34:78:ee:e6:3e:f1:ee:ea:43:78:4f: bf:23:c5:2b:f4:9e:8e:a1:fb:26:90:5b:31:b3:f8:38:2c:4d: d2:6d:65:50:41:2a:87:10:89:da:77:5b:03:a8:ea:74:5b:c4: d7:10:fb:7f:95:9a:fa:93:17:1b:0e:c6:69:2d:94:41:a5:96: e9:5c:fb:81:2f:ed:04:67:07:e8:ef:68:aa:d6:95:03:e3:e1: 49:f2:4b:1c:c1:c2:52:e0:a2:55:fe:7e:8f:5f:af:f7:38:f6: 72:a1:eb:f1:42:27:ae:a1:a2:ce:7c:94:1b:be:d3:b7:40:e5: 0f:38:56:e0:25:84:9c:dd:4c:a8:71:10:a7:4f:0a:9f:1c:f3: 7b:6e:81:6b:9d:f1:61:05:7a:02:42:fc:67:29:6e:eb:64:d9: a7:a1:7e:d9:d4:68:a8:21:96:86:45:33:13:e7:9a:6b:54:8b: 91:b7:f3:f4:1b:c9:27:99:4c:de:ad:a4:05:1b:2b:65:56:d1: 09:89:63:a3:56:d6:be:9c:e3:a0:99:5d:e0:3f:d9:53:05:6f: c0:ca:99:06:5e:3e:d6:19:ad:35:31:c4:8e:77:7f:e4:42:04: 8b:b2:8d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwNzIxMDA1MDU2WhcNMjUwNzI4MDA1MDU2WjAYMRYwFAYD VQQDEw02ODdkOGVmMC0xNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40tVoGIXDDYwbH5BWny78YPh3sgvd2ja12uNyzfLb6sD6zv9ag1LPAZ2MQiq haPyLM9IkSkH9r1j0oyjQ7CE4SD5JJQ2ZLJuIu0cPgyyZGHJhKFLHDk1eFap9YPI N+yDHPYp+McFWVsw0FNmU88VDZ8zkhhavi2M6fn6vz/QM3gdqUezPyx9IVOg6GPO jCpTWH0HpnTaY5uYtZPZLS/NOtau/00b1kJiJBJI0hjOasQH9ZjEd41ad7H4DJRp D2Ok+2ezVyGZTStA9g4B0Cv4XCJU5CzG5uB86SI00E/EvuV5Rj0M9JuOo3mPkWqH 5F/Ro7l9VZ9GJE4+2WSezetjeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoW3xZL OVctlVIu5vD9e7YMIXnJMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC854M9yAclFV6/GdVC/IlY90dmyNydFsnTNHju5j7x7upDeE+/I8Ur 9J6OofsmkFsxs/g4LE3SbWVQQSqHEInad1sDqOp0W8TXEPt/lZr6kxcbDsZpLZRB pZbpXPuBL+0EZwfo72iq1pUD4+FJ8kscwcJS4KJV/n6PX6/3OPZyoevxQieuoaLO fJQbvtO3QOUPOFbgJYSc3UyocRCnTwqfHPN7boFrnfFhBXoCQvxnKW7rZNmnoX7Z 1GioIZaGRTMT55prVIuRt/P0G8knmUzeraQFGytlVtEJiWOjVta+nOOgmV3gP9lT BW/AypkGXj7WGa01McSOd3/kQgSLso06 -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:12 2025 by rpki-client