$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: 77SXotDxjaXy4UUmDfVhQ5UJVYkj63FtDIff6mm/eco= Subject key identifier: E2:B1:05:13:FB:01:2B:16:BE:51:F2:79:3C:C8:2D:2A:18:DB:BC:3B Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 06E1 Signing time: Fri 18 Jul 2025 22:18:26 +0000 Manifest this update: Fri 18 Jul 2025 22:18:25 +0000 Manifest next update: Fri 25 Jul 2025 22:18:25 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: TdAYItYlqSVUw8tJuecs0es8+BQJNy2y62A3Qs348mE=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: Jul 18 22:18:25 2025 GMT Not After : Jul 25 22:18:25 2025 GMT Subject: CN=687ac831-bfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:6d:c4:7c:e9:9f:3c:aa:1e:54:43:a8:78: 5c:73:34:96:f2:39:a9:09:ef:f3:46:29:ac:9a:5a: 9a:98:24:c7:5b:d0:44:7a:06:8b:96:fe:5c:ef:b9: 38:8e:c8:96:9c:0f:75:09:3b:29:7f:2c:a4:81:23: df:36:69:e6:5e:80:13:b3:73:27:85:e4:ad:49:82: 31:eb:0f:55:38:0e:fa:30:60:52:a2:25:34:16:07: b0:0a:b7:d9:57:77:6c:37:a2:64:c4:95:6a:4b:36: eb:46:a2:67:51:b3:54:21:c8:83:12:d3:1c:50:5a: 70:d8:23:68:ce:b7:e3:08:ca:2a:1a:61:70:b1:65: 66:0d:42:d8:17:c0:c1:c2:68:87:61:db:79:11:e0: 6e:d4:0f:f8:14:1b:50:0a:10:c3:85:0c:45:61:da: de:59:1b:30:4d:b3:19:7e:3a:86:5b:dd:b0:6f:80: 0a:87:f8:06:f1:53:78:81:1d:64:ad:02:01:75:d2: c8:83:15:51:97:b9:df:81:92:9f:11:69:b2:6b:61: a8:b3:07:8a:a5:f4:51:b0:26:87:5e:78:2d:d5:f1: b5:76:44:e3:d7:87:9b:11:0b:5f:70:19:2f:b4:aa: 0c:87:c0:fb:7e:12:48:63:1f:d6:6f:cf:94:10:23: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:05:13:FB:01:2B:16:BE:51:F2:79:3C:C8:2D:2A:18:DB:BC:3B X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5b:12:5b:c0:83:90:53:ee:8f:9d:7a:ab:d6:6f:0a:8c:8a: b9:d7:8e:dc:78:7c:a4:13:4a:52:94:74:d7:ea:8a:33:a3:31: d2:dd:8b:23:29:73:b6:55:6a:2d:bb:e6:86:85:4a:0e:f0:44: 03:75:81:54:1e:28:f9:b4:8b:12:01:bb:c0:2a:ce:71:86:85: 0e:2d:4b:3e:2f:71:3c:32:e1:2c:15:3b:15:71:26:4d:45:d1: 14:65:c9:9f:b8:b7:db:23:0b:50:f5:e0:b2:01:dd:43:36:73: f2:40:65:0a:5f:f7:c2:72:a1:ff:a6:b6:dc:6e:1d:e1:e7:94: 1f:9e:9b:94:64:cf:d9:f9:4d:5d:c0:9c:31:a2:00:7a:37:ef: 1d:85:2e:75:b4:1d:de:cd:13:d2:a3:2d:c1:52:e9:3c:64:19: 2f:7c:e8:12:a4:2a:e6:ac:09:92:60:aa:21:f5:96:52:cc:29: 3b:97:0f:ea:f8:8c:9f:27:a3:49:48:01:82:90:3c:ff:64:cb: db:dc:ed:f0:79:3f:23:e9:6e:79:fd:37:d3:12:9f:3a:61:a4: 60:54:7e:9e:a7:76:e9:2b:f8:77:31:f2:75:80:bc:0d:3a:65: d8:fd:7d:f3:20:62:30:a7:99:d1:48:11:f7:04:92:2a:ae:03: 33:8a:1b:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUwNzE4MjIxODI1WhcNMjUwNzI1MjIxODI1WjAYMRYwFAYD VQQDEw02ODdhYzgzMS1iZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQttxHzpnzyqHlRDqHhcczSW8jmpCe/zRimsmlqamCTHW9BEegaLlv5c77k4 jsiWnA91CTspfyykgSPfNmnmXoATs3MnheStSYIx6w9VOA76MGBSoiU0FgewCrfZ V3dsN6JkxJVqSzbrRqJnUbNUIciDEtMcUFpw2CNozrfjCMoqGmFwsWVmDULYF8DB wmiHYdt5EeBu1A/4FBtQChDDhQxFYdreWRswTbMZfjqGW92wb4AKh/gG8VN4gR1k rQIBddLIgxVRl7nfgZKfEWmya2GosweKpfRRsCaHXngt1fG1dkTj14ebEQtfcBkv tKoMh8D7fhJIYx/Wb8+UECO3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKxBRP7 ASsWvlHyeTzILSoY27w7MB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChWxJbwIOQU+6PnXqr1m8KjIq5147ceHykE0pSlHTX6oozozHS3Ysj KXO2VWotu+aGhUoO8EQDdYFUHij5tIsSAbvAKs5xhoUOLUs+L3E8MuEsFTsVcSZN RdEUZcmfuLfbIwtQ9eCyAd1DNnPyQGUKX/fCcqH/prbcbh3h55QfnpuUZM/Z+U1d wJwxogB6N+8dhS51tB3ezRPSoy3BUuk8ZBkvfOgSpCrmrAmSYKoh9ZZSzCk7lw/q +IyfJ6NJSAGCkDz/ZMvb3O3weT8j6W55/TfTEp86YaRgVH6ep3bpK/h3MfJ1gLwN OmXY/X3zIGIwp5nRSBH3BJIqrgMzihsX -----END CERTIFICATE-----Generated at Sun Jul 20 15:22:47 2025 by rpki-client