$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json) Hash identifier: UU2wuW1CCyFPbqA4Fe+I7+pCQRoptldvMa8f+RtjYSo= Subject key identifier: CE:4B:85:1C:6B:7A:F3:F5:CA:C9:1E:C0:35:C2:83:6F:72:89:59:19 Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft Manifest number: D1 Signing time: Fri 18 Jul 2025 15:50:14 +0000 Manifest this update: Fri 18 Jul 2025 15:50:14 +0000 Manifest next update: Fri 25 Jul 2025 15:50:14 +0000 Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: XftqaxDxS8Iu9pgWNBA9JIIsXa/ef/24PbJi0jr0UrM=) 2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: nEx36xMYEspoRTHpBzsjyglWKve6HGzaUV9gJlWDtWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Validity Not Before: Jul 18 15:50:14 2025 GMT Not After : Jul 25 15:50:14 2025 GMT Subject: CN=687a6d36-0171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:82:36:4a:ed:4e:e8:63:c6:7d:f0:a5:17: 47:6d:27:49:ab:f0:36:0b:ed:18:0a:cd:3b:44:89: 53:2f:b7:e0:c3:ad:b5:eb:e9:0d:d8:f6:11:2a:61: ac:78:16:70:0e:29:ce:12:97:8a:91:e0:32:d0:91: 39:fe:2a:c2:8e:4b:2f:53:64:a2:5a:6c:a4:d3:53: 26:26:0e:0e:cf:0f:b8:52:4b:35:02:6a:b8:15:fd: 2a:2d:1c:f2:25:30:31:89:8e:08:05:ec:7f:57:2f: 7e:4f:a1:25:56:2e:75:04:fc:1d:72:e8:98:67:40: 33:c9:55:b2:18:36:ae:43:1d:ec:66:a5:d5:62:91: 02:7d:24:11:2b:9a:c1:70:fc:ab:c6:16:46:38:c5: 0f:ab:52:b4:5b:e8:3c:b2:0d:25:a8:a8:ed:cd:d5: 33:b3:99:a5:e0:98:ba:25:de:5d:b5:0b:07:bf:33: 8d:de:87:ab:33:0a:61:c4:a7:7b:bb:89:a1:e0:e5: 8c:95:46:eb:36:f2:9c:3c:06:e3:a4:97:68:70:02: 85:db:62:7c:c9:f7:95:e2:8b:c8:6b:e6:e3:96:83: e7:95:7e:86:14:b3:eb:4b:57:8c:d5:e8:44:b5:c7: 65:33:c5:86:28:23:df:42:aa:cf:b5:5f:f8:ae:93: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4B:85:1C:6B:7A:F3:F5:CA:C9:1E:C0:35:C2:83:6F:72:89:59:19 X509v3 Authority Key Identifier: keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:df:a8:3d:d6:d8:94:b6:5d:0f:f1:39:4f:ee:bc:50:c5:6a: 22:9d:2c:7a:bb:10:62:74:30:6a:fe:11:a1:ed:27:0f:a2:88: f7:b8:29:63:59:b9:49:1e:15:62:17:fe:e1:d8:6f:27:27:f2: 82:62:71:65:2f:24:1d:07:36:70:03:54:2c:8f:0c:e1:32:bc: 0c:3f:54:35:a9:26:86:6c:19:12:4f:1a:a0:cd:74:d1:d7:1e: b0:07:47:2f:81:c6:14:30:8e:0f:81:63:69:fe:32:d8:ed:e2: 20:55:8b:e9:34:b9:cf:f3:6b:0a:3a:01:2b:58:3b:36:95:fc: bb:da:01:d7:f4:6e:03:f6:56:4c:54:5b:5c:74:59:39:09:d0: 96:d9:a8:a8:90:de:a8:f7:c7:f3:c1:ca:78:5c:71:70:b7:1d: 00:e0:b5:24:27:1d:f8:ee:ec:20:e2:cf:e3:ab:0b:3a:db:a5: e0:81:09:0c:78:b4:de:8e:94:2e:14:a3:1d:c0:27:92:62:17: d7:84:f1:f2:92:65:2f:d3:93:14:96:f8:b4:60:9b:58:8f:f5: 91:d3:7c:61:a1:67:c4:2b:ad:fb:0c:b1:21:49:30:a0:c7:4c: 97:0d:98:cd:d1:94:a4:b1:25:08:1c:7b:d5:bf:0a:ac:0e:03: 80:c1:bc:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKDMwNjcwRjYxQjdFNTBFMEIwQjg4RTcyNTFERTg3ODRD MDNDOUU0NjIwHhcNMjUwNzE4MTU1MDE0WhcNMjUwNzI1MTU1MDE0WjAYMRYwFAYD VQQDEw02ODdhNmQzNi0wMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncKCNkrtTuhjxn3wpRdHbSdJq/A2C+0YCs07RIlTL7fgw6216+kN2PYRKmGs eBZwDinOEpeKkeAy0JE5/irCjksvU2SiWmyk01MmJg4Ozw+4Uks1Amq4Ff0qLRzy JTAxiY4IBex/Vy9+T6ElVi51BPwdcuiYZ0AzyVWyGDauQx3sZqXVYpECfSQRK5rB cPyrxhZGOMUPq1K0W+g8sg0lqKjtzdUzs5ml4Ji6Jd5dtQsHvzON3oerMwphxKd7 u4mh4OWMlUbrNvKcPAbjpJdocAKF22J8yfeV4ovIa+bjloPnlX6GFLPrS1eM1ehE tcdlM8WGKCPfQqrPtV/4rpMARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5LhRxr evP1yskewDXCg29yiVkZMB8GA1UdIwQYMBaAFDBnD2G35Q4LC4jnJR3oeEwDyeRi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy8wODJBODlGMDJB MjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERnc0xpT2NsSGVoNFRBUEo1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HY1BZYmZsRGdzTGlPY2xIZWg0VEFQSjVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy8wODJBODlGMDJBMjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERn c0xpT2NsSGVoNFRBUEo1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv36g91tiUtl0P8TlP7rxQxWoinSx6uxBidDBq/hGh7ScPooj3uClj WblJHhViF/7h2G8nJ/KCYnFlLyQdBzZwA1QsjwzhMrwMP1Q1qSaGbBkSTxqgzXTR 1x6wB0cvgcYUMI4PgWNp/jLY7eIgVYvpNLnP82sKOgErWDs2lfy72gHX9G4D9lZM VFtcdFk5CdCW2aiokN6o98fzwcp4XHFwtx0A4LUkJx347uwg4s/jqws626XggQkM eLTejpQuFKMdwCeSYhfXhPHykmUv05MUlvi0YJtYj/WR03xhoWfEK637DLEhSTCg x0yXDZjN0ZSksSUIHHvVvwqsDgOAwbxl -----END CERTIFICATE-----Generated at Sun Jul 20 02:38:23 2025 by rpki-client