$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: EqooLiU3AY6tL3XnkDXCWMv6Ibc87FqGBY6DYRhR7oY= Subject key identifier: 60:AF:0E:AD:9E:70:81:F4:60:4B:0F:A7:54:99:1F:5A:1E:C7:55:02 Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 01C8 Signing time: Sat 19 Jul 2025 03:21:30 +0000 Manifest this update: Sat 19 Jul 2025 03:21:29 +0000 Manifest next update: Sat 26 Jul 2025 03:21:29 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: DaFjPUg7VL8bI4xaB5l0H6UHaj4cv/270CnSI4B7aZU=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: T+JOCtPDki/xHSSeZ1AMylOFrQqsxCA9cKvI0yaY7C0=) 3: 73CB38E81CF011F0B59DB522C4F9AE02.roa (hash: llOCDx1EbOCJWqDxiCkgBWEB8PNLgQ3QGDsGfn8WZKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Jul 19 03:21:29 2025 GMT Not After : Jul 26 03:21:29 2025 GMT Subject: CN=687b0f3a-e66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6d:16:ca:8e:9e:c0:9d:2c:5f:e7:24:39:43: 1e:66:05:13:26:9f:b3:23:26:db:c3:1b:8e:d7:05: c1:46:50:11:8b:c6:e6:64:52:1c:ab:da:8f:c3:49: 15:c2:d9:92:4f:32:f7:f0:35:56:25:dc:aa:46:a3: 17:27:b2:aa:33:7f:b1:57:fa:cb:f9:6b:ca:94:3d: 50:0c:69:b2:a4:7d:0b:2a:3b:08:1d:bd:f2:e6:d4: 0d:a7:d3:ea:d6:f1:a1:a3:26:2a:95:df:2e:5d:50: 13:d8:77:00:bf:9b:e5:91:58:22:11:fb:d6:c1:24: ed:c5:4c:95:f9:8e:f4:37:7a:e8:07:28:54:18:90: 27:fa:09:77:a7:b3:ed:5b:be:d1:db:d5:d4:41:8f: 7e:34:d2:6c:70:97:34:66:6c:c2:f2:e6:e8:b5:d9: df:ac:dc:c6:34:92:21:6b:02:30:01:fb:45:51:b7: f4:28:6b:3b:af:f3:e9:af:ba:b0:65:7f:24:55:ce: 12:dc:5d:cb:2e:75:b5:ff:10:bb:a2:8e:0e:02:a2: 1a:c9:e4:47:6f:65:0d:24:66:58:f7:a0:b8:b2:3a: 16:47:00:7a:22:5a:61:90:88:fb:64:ef:49:16:47: eb:f0:8b:52:f5:8b:41:c9:1f:39:ec:30:35:00:c8: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:0E:AD:9E:70:81:F4:60:4B:0F:A7:54:99:1F:5A:1E:C7:55:02 X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:16:be:5a:c2:f9:70:93:66:0f:2a:79:52:bc:01:bb:ec:26: 2c:1a:84:f2:09:2d:62:66:28:f6:a1:9e:8e:5f:33:3d:87:dc: 29:ca:4a:c3:99:57:52:7d:b3:f6:6c:9f:1f:92:87:26:95:93: 20:98:05:01:0b:36:a3:0e:0d:ab:6a:b7:68:28:6f:3f:49:b5: 51:69:ff:cb:9c:be:65:2d:96:43:71:fd:40:83:1e:4d:a8:ea: fa:a3:b6:f9:e4:68:5d:cd:fd:12:c2:96:ef:d5:c3:17:bc:e6: 2a:3d:99:09:29:b0:e2:8f:12:f8:72:62:e5:f2:b5:92:f8:bf: ad:d4:e5:58:cd:22:d1:44:d7:cd:f2:97:29:ed:f2:14:b4:08: 8c:fe:be:8b:e7:d2:5f:ef:2e:80:b9:13:e9:1c:e0:41:14:ad: 51:94:27:5c:7a:e8:f0:0b:b0:98:42:b0:92:2c:e4:82:65:88: ad:d2:04:c4:5f:75:e4:88:a5:ac:5a:1a:cf:3a:46:e9:d2:7e: 16:5f:c8:d7:63:1a:95:fa:6a:cd:ad:63:17:f0:59:2e:24:21: c6:55:41:42:19:f0:21:f9:6b:20:4f:d7:eb:03:44:f0:00:55: 78:e9:29:26:d7:48:f6:9a:77:0f:3d:86:7b:38:cb:45:7d:c0: 45:a2:9c:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUwNzE5MDMyMTI5WhcNMjUwNzI2MDMyMTI5WjAYMRYwFAYD VQQDEw02ODdiMGYzYS1lNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3m0Wyo6ewJ0sX+ckOUMeZgUTJp+zIybbwxuO1wXBRlARi8bmZFIcq9qPw0kV wtmSTzL38DVWJdyqRqMXJ7KqM3+xV/rL+WvKlD1QDGmypH0LKjsIHb3y5tQNp9Pq 1vGhoyYqld8uXVAT2HcAv5vlkVgiEfvWwSTtxUyV+Y70N3roByhUGJAn+gl3p7Pt W77R29XUQY9+NNJscJc0ZmzC8ubotdnfrNzGNJIhawIwAftFUbf0KGs7r/Ppr7qw ZX8kVc4S3F3LLnW1/xC7oo4OAqIayeRHb2UNJGZY96C4sjoWRwB6IlphkIj7ZO9J Fkfr8ItS9YtByR857DA1AMj8QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCvDq2e cIH0YEsPp1SZH1oex1UCMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpFr5awvlwk2YPKnlSvAG77CYsGoTyCS1iZij2oZ6OXzM9h9wpykrD mVdSfbP2bJ8fkocmlZMgmAUBCzajDg2rardoKG8/SbVRaf/LnL5lLZZDcf1Agx5N qOr6o7b55Ghdzf0Swpbv1cMXvOYqPZkJKbDijxL4cmLl8rWS+L+t1OVYzSLRRNfN 8pcp7fIUtAiM/r6L59Jf7y6AuRPpHOBBFK1RlCdceujwC7CYQrCSLOSCZYit0gTE X3XkiKWsWhrPOkbp0n4WX8jXYxqV+mrNrWMX8FkuJCHGVUFCGfAh+WsgT9frA0Tw AFV46Skm10j2mncPPYZ7OMtFfcBFopzW -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:59 2025 by rpki-client