$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: QY5t8IfN7EfVj1d8ujV13vVd1i5NuZ7OLbo0pW2/0Aw= Subject key identifier: 9E:25:B9:06:B3:C6:17:72:89:C3:4C:07:F1:B6:69:7F:9B:00:3D:C0 Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 0843 Signing time: Fri 18 Jul 2025 20:59:22 +0000 Manifest this update: Fri 18 Jul 2025 20:59:22 +0000 Manifest next update: Fri 25 Jul 2025 20:59:22 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: gJi43KAmK1g1kj5EbZHOr290rrEk73tWEp4e6mDdImg=) 2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: xQNJE/wFi8JMz2ss0ss1yj9BAf/VPU6rBNzmi8uV9UI=) 3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: j94hdqhS8hEZkUNMK0Gy0/wMaWkISNSvPZJQcef/86U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Jul 18 20:59:22 2025 GMT Not After : Jul 25 20:59:22 2025 GMT Subject: CN=687ab5aa-b151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:c8:38:1b:ff:dc:2c:32:c2:1f:7a:d7:e6: 7e:e0:ec:bd:31:0a:70:7e:e0:a6:ff:c8:c6:1b:b7: f2:66:51:35:2b:3b:f2:2c:d1:4f:65:7d:2b:7b:bd: 39:01:b6:42:8c:4c:57:aa:b9:3d:f5:9f:a5:90:18: 01:f0:27:32:92:1a:94:b2:4c:af:a4:29:62:d5:44: 78:3e:2b:b2:f6:a6:18:20:a3:a6:33:fe:e0:83:e0: f3:ac:cd:a8:f7:89:3c:1d:df:a5:3a:50:97:14:b8: 28:dc:4a:01:fe:dd:08:64:0a:c1:6a:19:93:67:cf: 67:57:60:b8:9c:2e:2b:82:5e:e7:94:72:b7:8f:c2: 53:11:49:b1:2b:25:6f:54:c9:ba:ee:e8:26:08:f5: de:6c:9a:c8:4b:7d:20:8e:7a:57:eb:4b:bd:bc:97: b0:a2:a5:af:3a:fd:52:31:7a:ce:97:d4:80:27:f9: a7:c1:75:5f:d1:7d:73:ba:d5:f5:d5:e1:2c:db:51: 7e:0b:1d:4d:d8:13:ab:40:66:fa:af:d6:d9:ea:35: d6:52:60:e7:29:23:05:f0:cb:b1:65:68:27:11:1b: 40:6d:ca:b4:36:e6:d7:ad:e0:30:ac:55:4c:02:cc: c3:69:bf:86:41:06:82:ec:64:56:1e:18:62:eb:a1: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:B9:06:B3:C6:17:72:89:C3:4C:07:F1:B6:69:7F:9B:00:3D:C0 X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e8:18:98:36:7a:0a:c0:77:e7:47:e6:d1:ec:3e:a8:a6:f1: a4:0e:77:db:f9:51:1b:f2:90:37:2d:69:84:be:53:d2:f6:78: df:98:04:d2:a2:2c:fb:d0:58:d3:18:c7:00:64:4a:1f:9b:4a: 97:27:cb:08:99:46:9b:95:0e:86:46:5c:4a:10:92:e3:c9:6e: 5a:cb:3d:a1:b5:ab:2f:c5:4a:ef:9c:63:d3:ba:a4:11:d7:95: 84:61:0b:c2:99:37:c6:71:2f:75:70:97:3b:a7:c1:59:4a:e9: 5a:3f:23:c3:ec:70:58:67:77:52:74:50:fa:9c:7a:98:27:ad: 62:da:39:2c:25:d7:83:e3:7e:c3:42:c8:c3:8b:3b:f0:b3:ee: 69:46:cb:da:c8:41:e9:9a:1b:ad:67:9f:d6:5f:e3:dc:f0:a9: 44:70:50:ef:17:84:59:01:00:94:28:0d:ba:24:0a:05:8f:16: 9a:40:a4:5c:61:94:49:fb:25:88:07:a4:f8:4d:03:3c:73:33: 91:2d:b5:f3:0e:1f:8b:bb:cb:dd:1f:05:3d:f5:9b:bf:b9:5c: e7:ce:22:07:87:3b:9d:c3:f8:0f:41:6e:84:c0:46:d2:36:e5: 74:d9:ae:8d:5c:29:7c:82:cd:29:d0:22:0d:e0:2e:62:97:f2: 1a:01:7a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUwNzE4MjA1OTIyWhcNMjUwNzI1MjA1OTIyWjAYMRYwFAYD VQQDEw02ODdhYjVhYS1iMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdTIOBv/3Cwywh961+Z+4Oy9MQpwfuCm/8jGG7fyZlE1KzvyLNFPZX0re705 AbZCjExXqrk99Z+lkBgB8CcykhqUskyvpCli1UR4Piuy9qYYIKOmM/7gg+DzrM2o 94k8Hd+lOlCXFLgo3EoB/t0IZArBahmTZ89nV2C4nC4rgl7nlHK3j8JTEUmxKyVv VMm67ugmCPXebJrIS30gjnpX60u9vJewoqWvOv1SMXrOl9SAJ/mnwXVf0X1zutX1 1eEs21F+Cx1N2BOrQGb6r9bZ6jXWUmDnKSMF8MuxZWgnERtAbcq0NubXreAwrFVM AszDab+GQQaC7GRWHhhi66FUnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4luQaz xhdyicNMB/G2aX+bAD3AMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR6BiYNnoKwHfnR+bR7D6opvGkDnfb+VEb8pA3LWmEvlPS9njfmATS oiz70FjTGMcAZEofm0qXJ8sImUablQ6GRlxKEJLjyW5ayz2htasvxUrvnGPTuqQR 15WEYQvCmTfGcS91cJc7p8FZSulaPyPD7HBYZ3dSdFD6nHqYJ61i2jksJdeD437D QsjDizvws+5pRsvayEHpmhutZ5/WX+Pc8KlEcFDvF4RZAQCUKA26JAoFjxaaQKRc YZRJ+yWIB6T4TQM8czORLbXzDh+Lu8vdHwU99Zu/uVznziIHhzudw/gPQW6EwEbS NuV02a6NXCl8gs0p0CIN4C5il/IaAXpQ -----END CERTIFICATE-----Generated at Sun Jul 20 16:28:19 2025 by rpki-client