$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json) Hash identifier: XSGWn0m/viLKGy7NfaO97XG8xstPVT09lYMvSVNQADQ= Subject key identifier: DC:4D:25:41:80:F9:25:ED:F4:1E:A7:23:C5:D5:AE:B2:23:0D:A0:79 Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Certificate serial: 1463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft Manifest number: 1447 Signing time: Mon 28 Jul 2025 17:09:39 +0000 Manifest this update: Mon 28 Jul 2025 17:09:38 +0000 Manifest next update: Mon 04 Aug 2025 17:09:38 +0000 Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: A6EMDfvYiyW90PCFyD13uz4km/1HmHZyxYvmkr0fy+k=) 2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 17:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5219 (0x1463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Validity Not Before: Jul 28 17:09:38 2025 GMT Not After : Aug 4 17:09:38 2025 GMT Subject: CN=6887aed2-1bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:d7:69:95:16:8b:13:40:5b:8d:62:90:01: 18:65:5b:b8:1a:33:d7:21:27:e2:78:2c:22:b7:d2: 83:51:22:c8:a2:10:ef:a7:22:15:9f:ec:35:a2:64: 38:2a:b4:a2:18:5d:47:54:1b:20:a4:9d:e0:3f:89: 68:cb:f7:19:fd:c4:5c:36:6a:91:b1:8e:f0:f7:80: 87:81:3b:1c:95:d2:d6:e0:f0:66:de:57:d1:80:e9: 06:17:19:fc:03:46:63:5e:36:5c:eb:55:c6:5b:df: e3:67:84:24:e5:5b:d5:dd:4a:43:69:8e:75:a4:75: 23:bd:84:2c:39:2a:02:91:3e:4c:3e:e3:e0:51:2d: fc:3d:85:9f:67:e6:e0:a8:c0:46:1b:57:1c:b1:7d: 8a:1a:22:5d:79:f5:29:e6:54:ef:59:8d:ad:85:2f: cb:81:36:5f:80:a1:d0:7f:fa:27:cc:57:7d:2b:2f: 2a:6b:df:ff:e1:90:93:3a:25:d1:a2:55:c2:b7:1b: bf:55:f4:b9:70:31:0c:e5:ab:fe:ce:90:5d:2d:0a: b0:79:75:ba:74:1b:e7:d5:7b:42:d9:0c:69:a4:28: 27:2c:9f:99:87:d9:62:7b:5a:6c:85:fd:54:5d:4d: fa:af:9e:bd:53:9b:cf:26:58:22:11:b8:b7:5a:7b: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4D:25:41:80:F9:25:ED:F4:1E:A7:23:C5:D5:AE:B2:23:0D:A0:79 X509v3 Authority Key Identifier: keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:65:5e:a1:49:c1:7d:02:ab:c7:0b:1c:f2:08:b9:0a:a2:97: f0:88:69:08:9f:bc:6a:94:eb:aa:dd:0b:87:e3:cb:46:70:7e: fc:0c:3b:de:37:ed:7d:e3:ec:4d:ee:8d:0d:fa:97:95:b5:dd: a5:6e:4e:b9:48:c6:ad:f1:ba:ba:08:88:87:76:e5:c8:c5:e7: 3f:a7:de:ac:c3:c9:ce:6a:aa:3a:d4:b4:02:21:47:e5:8f:91: 22:68:5f:32:a8:88:4e:bf:cb:a5:5d:eb:61:dc:a2:57:96:6c: 5f:bd:84:b7:ee:f1:ba:19:31:a9:72:0a:90:ee:f6:78:5b:02: 7c:71:20:2b:a0:65:5d:97:84:52:b0:3f:8f:c3:2f:5e:05:46: a8:f2:7e:4e:fb:b5:6e:bd:ab:6f:29:5e:0c:ad:45:99:8f:57: f1:40:a2:a4:81:91:37:a4:24:26:89:f2:ae:64:a0:ad:38:0f: 84:e4:27:54:b3:7c:a7:43:dd:60:5c:fe:45:ac:08:3b:bf:c6: 8d:88:6b:d6:7c:7f:45:0a:d2:c9:78:66:52:d0:1c:d0:21:66: 54:ad:58:e2:8e:85:50:9e:d9:5e:a5:bf:a5:11:36:1b:d7:67: 7a:23:85:fc:a8:aa:dc:a8:25:d6:57:a6:d9:e0:87:1e:75:33: dc:d8:7d:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2QjgxMTAvBgNVBAUTKDMwRTdERUIxQzUyMkU3OTE1OTg1OTJCNjQ1MzA4ODYz Q0EwMDBFMTgwHhcNMjUwNzI4MTcwOTM4WhcNMjUwODA0MTcwOTM4WjAYMRYwFAYD VQQDEw02ODg3YWVkMi0xYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qrXaZUWixNAW41ikAEYZVu4GjPXISfieCwit9KDUSLIohDvpyIVn+w1omQ4 KrSiGF1HVBsgpJ3gP4loy/cZ/cRcNmqRsY7w94CHgTscldLW4PBm3lfRgOkGFxn8 A0ZjXjZc61XGW9/jZ4Qk5VvV3UpDaY51pHUjvYQsOSoCkT5MPuPgUS38PYWfZ+bg qMBGG1ccsX2KGiJdefUp5lTvWY2thS/LgTZfgKHQf/onzFd9Ky8qa9//4ZCTOiXR olXCtxu/VfS5cDEM5av+zpBdLQqweXW6dBvn1XtC2QxppCgnLJ+Zh9lie1pshf1U XU36r569U5vPJlgiEbi3WnuHLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxNJUGA +SXt9B6nI8XVrrIjDaB5MB8GA1UdIwQYMBaAFDDn3rHFIueRWYWStkUwiGPKAA4Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZCOC9GRjE1MDhFRTdF OUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1RlpoWksyUlRDSVk4b0FE aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PZmVzY1VpNTVGWmhaSzJSVENJWThvQURoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzZCOC9GRjE1MDhFRTdFOUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1 RlpoWksyUlRDSVk4b0FEaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtZV6hScF9AqvHCxzyCLkKopfwiGkIn7xqlOuq3QuH48tGcH78DDve N+194+xN7o0N+peVtd2lbk65SMat8bq6CIiHduXIxec/p96sw8nOaqo61LQCIUfl j5EiaF8yqIhOv8ulXeth3KJXlmxfvYS37vG6GTGpcgqQ7vZ4WwJ8cSAroGVdl4RS sD+Pwy9eBUao8n5O+7VuvatvKV4MrUWZj1fxQKKkgZE3pCQmifKuZKCtOA+E5CdU s3ynQ91gXP5FrAg7v8aNiGvWfH9FCtLJeGZS0BzQIWZUrVjijoVQntlepb+lETYb 12d6I4X8qKrcqCXWV6bZ4IcedTPc2H3X -----END CERTIFICATE-----Generated at Tue Jul 29 18:55:09 2025 by rpki-client