$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: G1wrA2nClynL+JhHTaoNKVt+u5W77IRb89uKmIbaync= Subject key identifier: 6C:B9:FE:25:1D:F9:E8:F1:53:89:23:27:DB:6B:CA:41:9A:C5:F0:A7 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0D0C Signing time: Fri 18 Jul 2025 18:15:27 +0000 Manifest this update: Fri 18 Jul 2025 18:15:26 +0000 Manifest next update: Fri 25 Jul 2025 18:15:26 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: F3O4dLRWC0vJ9uDGl6rgRApiw7lSJuNP5v/bluHu/TM=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Jul 18 18:15:26 2025 GMT Not After : Jul 25 18:15:26 2025 GMT Subject: CN=687a8f3e-6fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:38:b5:00:c0:23:7c:f3:be:9d:47:55:9e:a1: 14:b0:1d:df:08:c3:37:99:6b:cc:44:0e:e2:06:c5: 3e:6d:6c:37:70:08:8d:7b:53:b5:88:d8:e8:9b:67: d0:c1:87:d7:55:0f:28:e2:a7:a9:dc:e0:48:37:a8: be:6e:c5:99:4b:ce:ca:bb:66:1f:d4:29:10:80:01: 7f:66:28:33:35:1d:7d:be:51:6d:c8:d0:6e:fe:94: b0:92:3d:b9:c7:ff:14:b1:85:77:bf:44:e0:45:b9: c4:d4:a9:81:27:b1:3c:8b:33:a7:29:bb:e9:82:cf: fd:4f:09:2f:32:81:01:4e:cf:c8:18:b7:04:03:13: ca:35:91:c8:dd:6e:b6:74:f4:a9:e0:2e:07:2d:1b: ea:23:4e:61:8d:ac:e2:d5:31:51:fc:0c:e5:37:6d: 67:64:ea:53:c0:27:65:b8:55:3d:aa:08:ce:e1:22: 79:83:df:a3:95:87:9e:db:35:0d:12:97:d7:12:7d: a7:47:83:98:0b:97:e2:b7:1b:60:e8:c8:9a:6a:e7: 50:a0:f7:a3:d0:4e:1a:43:f1:c9:97:9b:3f:9e:01: 34:0d:79:cc:43:7d:a4:4e:c3:d7:48:5c:5b:50:a7: a7:d8:df:f9:11:12:32:f8:63:a6:53:1f:1e:ca:57: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B9:FE:25:1D:F9:E8:F1:53:89:23:27:DB:6B:CA:41:9A:C5:F0:A7 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e2:79:81:42:08:a9:2f:9f:2e:e8:db:09:22:84:ed:ac:8f: a5:77:37:59:da:b2:07:05:93:34:7d:68:5f:5b:e2:06:df:ff: 82:ed:a2:84:e0:de:cd:6a:83:83:96:2e:dd:8b:ff:84:2e:db: c5:21:d1:a6:d0:53:7c:16:a3:ce:25:dd:69:b4:13:11:1f:eb: c0:35:f5:3f:d5:7f:93:bc:07:45:b0:96:d2:7b:32:ac:c4:ee: 66:60:4f:be:64:c9:53:1d:6d:8b:9b:44:95:2e:1a:5e:8f:e0: 4b:74:b4:13:27:60:66:c0:6c:6f:4d:fd:29:e0:00:67:09:6a: d3:89:a8:85:ec:64:32:4b:5b:5c:8b:7e:d7:08:df:ef:fd:99: f0:0f:87:7c:fa:67:d6:38:50:e0:c5:d6:42:26:c8:fa:ea:e0: 5c:7c:fb:5e:6e:c7:44:e4:73:d7:38:37:58:3f:69:16:b0:65: 04:77:c9:e0:c7:c3:8e:b9:d1:9f:52:b1:b7:ec:2f:6b:92:20: 2f:81:c2:e4:d9:84:ae:fa:f6:08:35:b4:1f:5d:64:a7:f8:d0: 88:65:93:15:a6:eb:d7:93:19:d9:e2:c1:7d:ea:4b:15:2c:51: 63:8c:4a:8b:d0:1a:07:14:e1:de:d2:b3:88:20:86:1c:c0:ef: d3:72:f0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwNzE4MTgxNTI2WhcNMjUwNzI1MTgxNTI2WjAYMRYwFAYD VQQDEw02ODdhOGYzZS02ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ti1AMAjfPO+nUdVnqEUsB3fCMM3mWvMRA7iBsU+bWw3cAiNe1O1iNjom2fQ wYfXVQ8o4qep3OBIN6i+bsWZS87Ku2Yf1CkQgAF/ZigzNR19vlFtyNBu/pSwkj25 x/8UsYV3v0TgRbnE1KmBJ7E8izOnKbvpgs/9TwkvMoEBTs/IGLcEAxPKNZHI3W62 dPSp4C4HLRvqI05hjazi1TFR/AzlN21nZOpTwCdluFU9qgjO4SJ5g9+jlYee2zUN EpfXEn2nR4OYC5fitxtg6MiaaudQoPej0E4aQ/HJl5s/ngE0DXnMQ32kTsPXSFxb UKen2N/5ERIy+GOmUx8eylf90QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy5/iUd +ejxU4kjJ9trykGaxfCnMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD4nmBQgipL58u6NsJIoTtrI+ldzdZ2rIHBZM0fWhfW+IG3/+C7aKE 4N7NaoODli7di/+ELtvFIdGm0FN8FqPOJd1ptBMRH+vANfU/1X+TvAdFsJbSezKs xO5mYE++ZMlTHW2Lm0SVLhpej+BLdLQTJ2BmwGxvTf0p4ABnCWrTiaiF7GQyS1tc i37XCN/v/ZnwD4d8+mfWOFDgxdZCJsj66uBcfPtebsdE5HPXODdYP2kWsGUEd8ng x8OOudGfUrG37C9rkiAvgcLk2YSu+vYINbQfXWSn+NCIZZMVpuvXkxnZ4sF96ksV LFFjjEqL0BoHFOHe0rOIIIYcwO/TcvCq -----END CERTIFICATE-----Generated at Sun Jul 20 03:16:43 2025 by rpki-client