$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: 900MTbodKMlV2ymcqKq7VaEwIpUnhEsawDGYDEkQO5Y= Subject key identifier: B8:EB:CD:2D:AE:04:DC:47:5D:49:86:2E:AC:99:D7:C8:FB:28:08:E2 Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 0694 Signing time: Sun 20 Jul 2025 22:22:57 +0000 Manifest this update: Sun 20 Jul 2025 22:22:57 +0000 Manifest next update: Sun 27 Jul 2025 22:22:57 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: EpROx/4qYMUHiWHFCI4BKpsvktaPA1jzcXuno6xTIR4=) 2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE=) 3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: elY+yIl1H3F26OUjA40A23dujn0CummnltINa5yusRE=) 4: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: kssI5Drais5SXspTClU/NbBaSd+qkoi5idfDTiL4j3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: Jul 20 22:22:57 2025 GMT Not After : Jul 27 22:22:57 2025 GMT Subject: CN=687d6c41-20aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:d2:c1:ed:4f:a1:f8:33:9a:cf:f2:64:09: bb:17:e4:78:08:2e:a7:33:d6:a5:7f:8e:9f:83:2c: c1:4d:a6:29:bc:64:45:cd:85:b8:e2:93:76:e2:03: 73:2d:16:41:63:15:cb:54:fb:82:fa:3e:25:52:c6: 4e:6d:e2:c9:da:fb:2f:1d:f8:04:df:1f:53:ec:af: 6e:1a:7c:6a:ba:76:02:fe:12:45:8f:fe:33:78:7c: 6f:a7:cf:5b:31:9f:62:32:92:f5:05:b6:61:99:a1: b9:74:c7:58:e4:2a:26:1a:ab:75:2a:96:5f:da:24: 28:ec:2d:fe:c1:a8:06:d3:9f:cd:64:b5:b2:ee:e4: e0:e1:9d:00:8f:bc:4c:53:85:54:1d:32:55:2f:f4: 85:19:29:21:c8:69:62:f8:4f:c2:21:60:91:c2:d0: 05:93:db:08:8a:d0:d8:1a:ba:a3:80:50:29:ce:65: 54:90:38:66:e8:a0:ee:16:af:40:48:b5:6d:a4:f1: ed:5a:20:16:a2:3d:59:a3:da:15:24:6c:0b:70:ea: a4:23:94:42:80:07:56:64:f5:75:10:17:3c:6d:e5: 0b:ca:aa:e4:b3:4b:d1:b8:fd:4d:5e:16:1a:5c:43: 11:45:20:10:c0:75:0a:84:0e:52:bb:35:f5:75:13: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:CD:2D:AE:04:DC:47:5D:49:86:2E:AC:99:D7:C8:FB:28:08:E2 X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:48:e4:85:84:64:75:d6:22:df:a1:9a:59:4c:90:83:62:4f: fb:e4:3e:68:35:83:ac:01:00:bf:09:bf:49:a1:fc:24:29:ee: b7:ee:b8:3c:0d:43:85:fc:1a:91:81:48:20:48:92:d2:9d:35: ad:3b:22:d6:33:7c:f0:70:92:c5:7a:46:f2:70:26:38:09:d1: 72:82:04:d8:ba:11:b0:38:56:89:e6:9e:2c:96:7c:ab:b7:57: a2:d0:93:bf:af:85:98:0e:20:db:4b:4c:4f:5a:79:f7:b2:e2: 3c:74:d5:26:e9:c6:6f:72:56:bf:b2:ac:e3:21:2a:d5:28:89: e3:a2:4a:39:b6:73:4f:98:bb:9f:a6:1f:9f:7e:a2:cd:cb:15: 66:3c:cc:c6:c3:b6:ca:c6:b2:20:75:2d:20:9f:78:7c:b8:4d: 92:70:24:a4:c0:6c:a9:54:4c:00:5c:13:a2:20:b8:9d:0a:aa: 2f:30:0a:54:41:d2:ed:0a:df:3f:fb:57:5b:70:f6:e1:ef:27: 7a:9b:b4:3f:5e:43:d3:b6:78:44:54:06:41:88:9d:2d:dd:8c: fe:60:c3:12:f8:17:bd:38:e4:9f:b8:2d:4b:c7:04:31:d8:e6: 66:61:8f:83:d1:58:9f:d7:3d:4f:80:69:31:d1:15:25:ee:7f: 1a:21:e4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjUwNzIwMjIyMjU3WhcNMjUwNzI3MjIyMjU3WjAYMRYwFAYD VQQDEw02ODdkNmM0MS0yMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjDSwe1Pofgzms/yZAm7F+R4CC6nM9alf46fgyzBTaYpvGRFzYW44pN24gNz LRZBYxXLVPuC+j4lUsZObeLJ2vsvHfgE3x9T7K9uGnxqunYC/hJFj/4zeHxvp89b MZ9iMpL1BbZhmaG5dMdY5ComGqt1KpZf2iQo7C3+wagG05/NZLWy7uTg4Z0Aj7xM U4VUHTJVL/SFGSkhyGli+E/CIWCRwtAFk9sIitDYGrqjgFApzmVUkDhm6KDuFq9A SLVtpPHtWiAWoj1Zo9oVJGwLcOqkI5RCgAdWZPV1EBc8beULyqrks0vRuP1NXhYa XEMRRSAQwHUKhA5SuzX1dROQYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjrzS2u BNxHXUmGLqyZ18j7KAjiMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARSOSFhGR11iLfoZpZTJCDYk/75D5oNYOsAQC/Cb9JofwkKe637rg8 DUOF/BqRgUggSJLSnTWtOyLWM3zwcJLFekbycCY4CdFyggTYuhGwOFaJ5p4slnyr t1ei0JO/r4WYDiDbS0xPWnn3suI8dNUm6cZvcla/sqzjISrVKInjoko5tnNPmLuf ph+ffqLNyxVmPMzGw7bKxrIgdS0gn3h8uE2ScCSkwGypVEwAXBOiILidCqovMApU QdLtCt8/+1dbcPbh7yd6m7Q/XkPTtnhEVAZBiJ0t3Yz+YMMS+Be9OOSfuC1LxwQx 2OZmYY+D0Vif1z1PgGkx0RUl7n8aIeTI -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:28 2025 by rpki-client