$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: vbFNfKFjrAxUBSfdjPrFNYLuGKdUIFD+V6xe83PoXpg= Subject key identifier: 03:36:11:35:17:9E:6A:39:A3:0C:6B:CF:1B:68:BB:0B:3D:AF:56:21 Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 14AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 1498 Signing time: Fri 18 Jul 2025 17:00:25 +0000 Manifest this update: Fri 18 Jul 2025 17:00:24 +0000 Manifest next update: Fri 25 Jul 2025 17:00:24 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: S0PxGZL51SlJntf+1OLJDeWaqzXm3xpmsHG6fFl0I0E=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: fzmHVxiTK7D8PG5yindwGef8+csbEOVTRn9jS+V30ac=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: iYa29kjN+8nhwT/98WnKo7Pi7A7FL3PggbbxiD2rxqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5292 (0x14ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: Jul 18 17:00:24 2025 GMT Not After : Jul 25 17:00:24 2025 GMT Subject: CN=687a7da8-ec96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:6f:43:66:66:d3:e2:fe:9a:c9:24:8b:c7: 12:ab:c9:fc:64:cc:ba:6a:80:e7:4b:8d:c5:eb:ce: 12:03:de:35:79:21:0c:5c:80:21:7f:5d:bb:34:0c: 56:77:80:3c:8e:35:75:61:2f:06:53:64:49:69:89: 65:c7:83:11:e9:1f:48:64:cb:07:fb:09:a2:a6:23: 1c:89:e2:50:e8:bb:81:89:df:b7:58:a3:27:94:37: e3:ac:01:d3:12:9c:6e:ec:ad:41:56:1d:3e:dc:d5: 98:ba:86:82:4d:2e:c9:b1:7a:c6:f1:2f:6a:a7:92: fc:66:73:71:63:81:a5:a7:cf:fb:48:27:d0:d9:d6: 67:24:70:db:dd:a8:d4:ee:6d:0b:7c:aa:a7:cb:42: 30:73:a7:d0:b7:30:b0:a1:62:6e:3c:7c:8f:76:8b: 26:b6:3b:08:5d:8c:1f:a2:dd:1d:be:69:f4:fb:a0: 74:78:c8:a1:cf:fd:05:9d:b4:ee:a6:6a:42:a3:4f: 6e:53:02:6b:a0:98:bf:41:cc:8e:8e:15:f1:90:82: 89:8e:03:11:a1:ab:17:a8:96:d7:57:c0:19:94:6c: a7:d6:fe:31:2e:57:5c:67:df:99:5b:fb:93:d5:d8: a3:1f:5d:40:73:a0:a5:62:c1:59:59:c6:00:bf:ee: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:11:35:17:9E:6A:39:A3:0C:6B:CF:1B:68:BB:0B:3D:AF:56:21 X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:62:1a:41:78:a0:fc:96:42:f7:8b:24:f1:3a:6e:21:7c:b8: b1:83:59:8a:11:67:06:2d:bc:4f:07:b8:0f:d1:ca:07:7d:cd: 3b:ef:ed:ef:e8:af:ff:3a:08:a6:3b:4e:f1:8f:a8:20:93:dc: 0e:46:fc:1e:56:4e:9d:45:32:1c:5d:b8:26:fe:0a:99:14:30: 09:2c:4a:ef:5b:5a:62:50:01:87:28:7c:4c:19:8b:ba:26:97: 7a:03:6d:66:df:27:38:e5:3f:15:c3:29:29:12:d1:5f:b3:ae: b4:91:50:16:ef:b2:22:7c:08:f1:6b:9d:7d:c7:1e:2e:6a:96: d3:78:56:fc:81:5c:f3:3e:ce:1b:1a:c4:a9:6a:5c:22:3a:23: 33:f7:34:a8:b5:f9:e3:65:8c:d6:17:0f:71:7b:e3:6e:26:d4: 41:6c:d4:bd:b0:4b:70:3d:27:39:8f:d4:53:eb:1a:31:54:3c: 6a:06:0f:1f:7c:81:e8:43:48:38:8b:6f:6e:71:f9:a5:ca:01: fd:3f:f2:c5:ec:b1:ed:e7:bd:55:24:20:26:a4:4a:30:15:28: 0d:07:e8:c9:e6:8c:91:2f:2c:b7:97:e7:1f:5a:b8:a3:84:7a: 79:2f:a5:d1:e8:82:2b:78:2c:62:13:32:d1:4d:e3:81:0c:0d: f0:30:81:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjUwNzE4MTcwMDI0WhcNMjUwNzI1MTcwMDI0WjAYMRYwFAYD VQQDEw02ODdhN2RhOC1lYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BRvQ2Zm0+L+mskki8cSq8n8ZMy6aoDnS43F684SA941eSEMXIAhf127NAxW d4A8jjV1YS8GU2RJaYllx4MR6R9IZMsH+wmipiMcieJQ6LuBid+3WKMnlDfjrAHT Epxu7K1BVh0+3NWYuoaCTS7JsXrG8S9qp5L8ZnNxY4Glp8/7SCfQ2dZnJHDb3ajU 7m0LfKqny0Iwc6fQtzCwoWJuPHyPdosmtjsIXYwfot0dvmn0+6B0eMihz/0FnbTu pmpCo09uUwJroJi/QcyOjhXxkIKJjgMRoasXqJbXV8AZlGyn1v4xLldcZ9+ZW/uT 1dijH11Ac6ClYsFZWcYAv+4/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAM2ETUX nmo5owxrzxtouws9r1YhMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1YhpBeKD8lkL3iyTxOm4hfLixg1mKEWcGLbxPB7gP0coHfc077+3v 6K//OgimO07xj6ggk9wORvweVk6dRTIcXbgm/gqZFDAJLErvW1piUAGHKHxMGYu6 Jpd6A21m3yc45T8VwykpEtFfs660kVAW77IifAjxa519xx4uapbTeFb8gVzzPs4b GsSpalwiOiMz9zSotfnjZYzWFw9xe+NuJtRBbNS9sEtwPSc5j9RT6xoxVDxqBg8f fIHoQ0g4i29ucfmlygH9P/LF7LHt571VJCAmpEowFSgNB+jJ5oyRLyy3l+cfWrij hHp5L6XR6IIreCxiEzLRTeOBDA3wMIFa -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:21 2025 by rpki-client