$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: 6I3Z1bT9+2Uw/WOB4Ao4HlT0zsUAixtikoEJyRN6AwI= Subject key identifier: 21:C9:0A:CA:46:2E:C1:6B:2F:7E:99:67:47:6D:C9:80:B7:11:23:80 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0172 Signing time: Sat 19 Jul 2025 04:03:34 +0000 Manifest this update: Sat 19 Jul 2025 04:03:34 +0000 Manifest next update: Sat 26 Jul 2025 04:03:34 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: gDtAXSnGIjXFQ0t+i5m/r0tD9B+w3toiDTpFfVsePIA=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: kgaZFM6PEa7OxBpQNYQJyC2BXzh6kZmUunDtbxoanho=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: vxzRpo3gFHIybngZJMla9i3xRZ+JSBWrRy4xi4ckalM=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: D8dAG/9CmCMBEAtiY945ZqCN3MyX7EsagCsHQSrxDDU=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: uxmO0Zu81b9ijLgJWFAnqvmhDLc0ZfCAbuCH6EbXLi0=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: SpJD8GcSBoUz5MPi6PJr9VjMBRC58LFgHcmGttoe0yo=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: G4Dla87V8rtQVoFrowa7K0BJ1dHwJVBSq0/2lBCHVpo=) 8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: sVe/dlsdpYGwjAAFXOmmuTaA1ya2H4hHFG6dxtS3qXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Jul 19 04:03:34 2025 GMT Not After : Jul 26 04:03:34 2025 GMT Subject: CN=687b1916-7a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:b4:cb:a2:f3:a1:77:7d:29:23:f0:fa:83: 7a:78:5b:b7:7e:b7:85:79:33:9e:68:7f:78:ab:9e: 01:7f:a9:e8:b7:87:85:1a:6b:08:ca:ef:79:40:31: 4b:c7:cc:e9:72:12:c6:bc:77:f4:34:81:0a:9e:04: 84:6e:5e:69:2e:27:bd:18:4d:4e:03:57:da:1b:68: 3e:45:c9:ac:29:92:79:c3:35:56:a5:0d:5f:c0:63: af:17:90:73:94:54:0c:43:32:19:39:fe:59:5d:13: 84:70:ce:d0:37:01:7c:a3:23:67:1e:5e:23:71:d3: 13:22:14:f2:51:56:80:07:b0:78:71:dd:1d:79:87: a1:e8:a2:d1:eb:cb:31:30:fa:5f:89:20:c1:ca:28: f9:69:17:b6:83:85:de:2d:57:31:a1:ac:41:20:0f: 1c:22:1a:a6:ea:d0:79:d0:f4:c0:d9:58:92:a7:a0: 09:83:f1:19:29:4c:b5:36:d2:d4:82:3f:9b:7b:44: 44:34:19:9a:2e:ee:ad:d9:98:ab:b1:e9:e1:e3:1e: 4e:29:3d:6d:08:47:ce:68:29:81:dc:cd:6f:c2:ae: 5b:9c:36:f9:aa:fc:63:4c:8d:e1:7a:e5:1e:32:51: 59:61:20:39:a7:fc:8b:bc:8b:44:d5:58:a5:fd:b5: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:0A:CA:46:2E:C1:6B:2F:7E:99:67:47:6D:C9:80:B7:11:23:80 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:7b:6e:c0:0f:04:ea:58:9f:e5:10:03:3c:2a:4f:81:5a: 35:d0:d1:90:fd:7e:2f:a3:af:38:03:56:81:85:47:6a:b5:f3: 06:39:23:44:2d:60:a0:67:7c:51:3a:16:5b:31:39:6e:cd:cf: 67:e4:79:fc:90:e2:7e:ac:28:15:f8:36:09:54:c0:e8:c5:34: 3c:43:12:e4:80:b3:77:54:7e:22:6f:36:8c:c6:4c:c8:74:86: 86:8a:65:c1:03:bb:01:d4:ee:f4:df:1c:fd:6e:9b:7c:c0:69: ec:3d:f2:c7:31:97:b3:62:74:c6:bd:fa:c7:70:be:1c:6b:cf: 52:cc:77:de:12:a0:35:51:8b:12:ae:fd:e2:33:8f:df:a4:8c: cf:12:b9:3a:18:ea:82:8e:b3:fc:6c:1e:12:b3:89:ee:05:f7: 2e:92:dd:25:4c:82:38:68:d8:4b:31:6a:79:2d:9e:c8:3c:0c: 68:49:54:97:a3:72:57:8e:3b:46:56:72:88:56:63:91:c3:70: 7b:6c:19:90:09:3d:32:27:ec:76:a3:42:30:b6:a3:ae:5a:66: a9:de:6e:28:b8:12:06:ee:2d:cd:98:0c:01:db:09:99:2d:7f: b5:1b:43:fd:5b:9c:b4:39:9c:05:e2:7f:77:31:8e:7b:ad:62: c8:46:50:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwNzE5MDQwMzM0WhcNMjUwNzI2MDQwMzM0WjAYMRYwFAYD VQQDEw02ODdiMTkxNi03YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTy0y6LzoXd9KSPw+oN6eFu3freFeTOeaH94q54Bf6not4eFGmsIyu95QDFL x8zpchLGvHf0NIEKngSEbl5pLie9GE1OA1faG2g+RcmsKZJ5wzVWpQ1fwGOvF5Bz lFQMQzIZOf5ZXROEcM7QNwF8oyNnHl4jcdMTIhTyUVaAB7B4cd0deYeh6KLR68sx MPpfiSDByij5aRe2g4XeLVcxoaxBIA8cIhqm6tB50PTA2ViSp6AJg/EZKUy1NtLU gj+be0RENBmaLu6t2Zirsenh4x5OKT1tCEfOaCmB3M1vwq5bnDb5qvxjTI3heuUe MlFZYSA5p/yLvItE1Vil/bWrFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHJCspG LsFrL36ZZ0dtyYC3ESOAMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHlXtuwA8E6lif5RADPCpPgVo10NGQ/X4vo684A1aBhUdqtfMGOSNE LWCgZ3xROhZbMTluzc9n5Hn8kOJ+rCgV+DYJVMDoxTQ8QxLkgLN3VH4ibzaMxkzI dIaGimXBA7sB1O703xz9bpt8wGnsPfLHMZezYnTGvfrHcL4ca89SzHfeEqA1UYsS rv3iM4/fpIzPErk6GOqCjrP8bB4Ss4nuBfcukt0lTII4aNhLMWp5LZ7IPAxoSVSX o3JXjjtGVnKIVmORw3B7bBmQCT0yJ+x2o0IwtqOuWmap3m4ouBIG7i3NmAwB2wmZ LX+1G0P9W5y0OZwF4n93MY57rWLIRlB7 -----END CERTIFICATE-----Generated at Sun Jul 20 13:49:49 2025 by rpki-client