$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: zXuT3Zb39bynhs/qGuccIah4ZfT6M3G4TJTEjbhSARQ= Subject key identifier: 26:17:35:D1:E7:6F:0D:9F:09:C0:A6:75:72:D8:5D:0D:EA:3A:F6:7A Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C3C Signing time: Fri 18 Jul 2025 18:46:57 +0000 Manifest this update: Fri 18 Jul 2025 18:46:57 +0000 Manifest next update: Fri 25 Jul 2025 18:46:57 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: /WryrxTUAnDKqTHB8PZJX059oZ/rqq3u4ijUT1TY3Z4=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Jul 18 18:46:57 2025 GMT Not After : Jul 25 18:46:57 2025 GMT Subject: CN=687a96a1-bdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:bf:3f:3f:d9:00:dc:83:d2:61:bd:c2:ea: fc:1c:0d:e9:cd:d1:3f:97:16:d8:8c:b5:f4:a8:a7: 40:cb:bb:10:11:57:77:42:53:b8:71:31:3d:7f:9e: a8:b9:65:f0:b3:72:0c:e5:80:86:bb:91:23:45:45: 15:ff:17:6b:e4:de:bc:a1:d9:d9:d8:c3:79:78:78: 0e:f7:68:dd:25:f9:f7:cf:4a:19:03:4c:a9:77:d5: b9:5f:14:f8:4c:26:c7:69:dd:08:96:41:58:f0:56: d4:f1:64:31:5f:4e:87:46:fa:d0:f4:32:d3:9b:6d: 63:d7:f2:78:f5:79:75:43:08:91:eb:2e:86:94:1e: a3:e9:21:48:2a:da:5c:d9:56:38:25:a8:e0:f8:9b: c5:17:28:51:0e:85:f6:0f:07:d5:44:a3:7e:40:d3: 42:e2:44:48:db:ec:95:3d:65:69:9f:40:c3:94:f1: 9d:7f:b4:53:d7:b3:92:fb:9d:53:ea:e9:4c:8f:a3: a7:42:4f:54:bc:3d:38:2d:9d:0f:4e:2d:2e:42:da: 2f:d8:92:da:58:42:68:6f:9b:cd:d9:4b:98:9c:4a: 34:fc:0f:29:17:cc:9b:e4:d7:46:0b:89:73:91:28: 43:e7:1a:53:88:7b:27:f3:c4:ac:76:9b:6c:cb:83: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:17:35:D1:E7:6F:0D:9F:09:C0:A6:75:72:D8:5D:0D:EA:3A:F6:7A X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9f:8d:7b:45:9a:39:66:79:7a:cd:40:f7:1a:0c:74:a9:20: c2:f7:08:de:cd:f5:36:47:37:42:d8:70:ac:cd:ce:f7:8a:da: ec:03:d3:43:7a:07:dd:ff:62:e5:ee:3b:20:56:e4:4f:ac:16: 1f:34:f5:ce:9f:32:d1:79:88:0e:19:5b:9f:e0:73:7c:80:ce: 25:1a:09:87:76:7a:cd:bc:c3:e6:25:b9:c7:7d:e0:bf:9d:ac: b2:97:44:15:ec:75:d1:f6:27:ec:3f:af:f1:d9:67:39:36:5a: 85:fd:08:3c:09:0e:13:6e:db:41:0c:cb:84:b9:26:5b:9c:2d: 92:b3:36:27:35:2d:58:b3:98:b4:f8:60:97:ed:c6:38:3a:14: c5:8d:e8:7a:50:7e:68:b8:ef:b0:18:44:56:2b:64:a9:f5:f3: 42:85:37:b3:69:d3:d7:3b:d5:e1:88:c2:71:34:c0:1b:81:8d: 53:59:38:d6:9c:d3:86:5b:82:b4:ee:e6:4d:52:f0:1e:1e:fb: e6:f1:fa:1e:1a:7e:78:d9:97:cc:0d:c4:1e:58:82:63:84:f8: 88:c9:04:d5:b7:2f:da:6f:a0:d4:05:c9:bd:57:73:26:9c:41: 7f:ae:03:77:78:ee:3d:30:ad:79:59:2f:da:3f:82:06:de:2b: 89:59:8c:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUwNzE4MTg0NjU3WhcNMjUwNzI1MTg0NjU3WjAYMRYwFAYD VQQDEw02ODdhOTZhMS1iZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Re/Pz/ZANyD0mG9wur8HA3pzdE/lxbYjLX0qKdAy7sQEVd3QlO4cTE9f56o uWXws3IM5YCGu5EjRUUV/xdr5N68odnZ2MN5eHgO92jdJfn3z0oZA0ypd9W5XxT4 TCbHad0IlkFY8FbU8WQxX06HRvrQ9DLTm21j1/J49Xl1QwiR6y6GlB6j6SFIKtpc 2VY4Jajg+JvFFyhRDoX2DwfVRKN+QNNC4kRI2+yVPWVpn0DDlPGdf7RT17OS+51T 6ulMj6OnQk9UvD04LZ0PTi0uQtov2JLaWEJob5vN2UuYnEo0/A8pF8yb5NdGC4lz kShD5xpTiHsn88Ssdptsy4N0KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYXNdHn bw2fCcCmdXLYXQ3qOvZ6MB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjn417RZo5Znl6zUD3Ggx0qSDC9wjezfU2RzdC2HCszc73itrsA9ND egfd/2Ll7jsgVuRPrBYfNPXOnzLReYgOGVuf4HN8gM4lGgmHdnrNvMPmJbnHfeC/ nayyl0QV7HXR9ifsP6/x2Wc5NlqF/Qg8CQ4TbttBDMuEuSZbnC2SszYnNS1Ys5i0 +GCX7cY4OhTFjeh6UH5ouO+wGERWK2Sp9fNChTezadPXO9XhiMJxNMAbgY1TWTjW nNOGW4K07uZNUvAeHvvm8foeGn542ZfMDcQeWIJjhPiIyQTVty/ab6DUBcm9V3Mm nEF/rgN3eO49MK15WS/aP4IG3iuJWYwr -----END CERTIFICATE-----Generated at Sun Jul 20 16:39:17 2025 by rpki-client