$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: X82Ay2o8OqGvouv7Qkh2x+E/Ppc9rfPnzYpvuQ15P+w= Subject key identifier: CE:DD:94:80:10:EF:93:C4:A4:6C:43:6F:3A:1E:4D:53:65:22:D0:6F Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1A77 Signing time: Sun 20 Jul 2025 16:22:08 +0000 Manifest this update: Sun 20 Jul 2025 16:22:08 +0000 Manifest next update: Sun 27 Jul 2025 16:22:08 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: JJe/vXe/mqLuUOaMqxQhC8sBi7ENMVKeUeGSVjgeFFk=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6785 (0x1a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Jul 20 16:22:08 2025 GMT Not After : Jul 27 16:22:08 2025 GMT Subject: CN=687d17b0-6d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:57:e0:4d:f9:3e:57:ea:ba:d4:70:75:fb: 1c:ad:67:cd:d3:f8:e9:c2:89:ab:fd:1d:3d:de:42: cb:1a:49:b6:16:cf:96:16:9d:7f:ad:b2:40:e0:d3: 5b:4f:14:d9:a5:bd:f0:1f:53:72:6f:28:10:22:4e: 2a:52:7d:0a:f7:17:67:88:7e:1b:da:89:ff:9f:6c: e9:a1:68:21:39:4c:02:bb:ca:21:e8:23:5c:f5:17: 0f:af:53:d7:51:69:e1:6f:a9:a2:79:d5:4c:cc:40: d4:8d:9f:e1:3f:36:d5:15:f7:fa:ed:9c:23:f2:3d: 9a:c2:72:00:c0:7e:9b:66:60:67:27:e8:aa:b8:25: 03:ca:aa:33:c2:46:ad:53:b4:7d:eb:26:fc:d0:b1: 68:47:29:e1:0a:27:c6:31:57:a5:54:c7:5c:1e:a3: 9e:0b:52:c6:03:0e:12:d8:76:5e:94:5c:5b:12:4b: ca:56:58:f4:e5:22:a4:98:88:61:db:9d:45:98:98: 84:60:7e:fa:f4:79:dc:6b:34:aa:3b:54:b7:b7:e4: 6b:69:2b:de:c1:3c:40:85:d6:87:f0:57:6c:06:53: 7d:9a:30:08:c7:0d:d3:01:e9:cd:dd:d0:f7:79:50: 66:26:a5:1c:42:04:db:f8:8f:0c:e9:82:fe:ef:18: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DD:94:80:10:EF:93:C4:A4:6C:43:6F:3A:1E:4D:53:65:22:D0:6F X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a5:16:3c:ae:4a:3f:e5:2f:e1:9d:ca:9f:e1:f8:ca:59:f0: 14:c2:e9:59:37:3d:e7:f7:c8:08:58:5c:00:d7:70:c1:9e:29: 38:40:9f:44:87:83:77:a2:4e:95:e0:5a:98:61:7c:a8:b1:cd: ab:9d:e9:44:9f:a7:18:c7:65:96:99:53:dc:86:df:34:8a:61: 7c:19:91:1e:c2:e6:3a:ca:8f:46:3e:9e:33:99:eb:81:4e:c4: eb:59:e5:ba:4d:c8:86:79:fe:1f:71:2e:c7:07:13:ef:ed:07: bf:d2:6a:20:b4:f5:df:21:b9:6c:97:8c:a3:de:fb:12:3f:68: 67:92:83:3f:b0:e7:86:b8:51:08:83:ea:11:34:56:b8:da:c1: f2:5a:31:c3:0c:2c:34:e7:ff:44:22:0f:af:0c:04:16:44:88: 98:93:ee:3f:bd:47:24:0e:dd:51:c3:f4:a4:59:cb:8b:fb:c5: fb:d6:3e:16:66:93:92:ba:9c:38:81:60:35:b0:58:ee:42:37: 46:8c:49:c2:0f:91:6b:41:09:8d:ab:1e:74:ac:94:56:ac:60: 3f:2c:18:cb:48:f7:a8:af:26:03:63:66:c9:7a:ed:8e:86:0d: dd:68:d2:1d:e2:7f:a7:55:5f:c5:da:b8:bd:ae:1d:17:04:6d: 02:fa:82:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUwNzIwMTYyMjA4WhcNMjUwNzI3MTYyMjA4WjAYMRYwFAYD VQQDEw02ODdkMTdiMC02ZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy19X4E35PlfqutRwdfscrWfN0/jpwomr/R093kLLGkm2Fs+WFp1/rbJA4NNb TxTZpb3wH1NybygQIk4qUn0K9xdniH4b2on/n2zpoWghOUwCu8oh6CNc9RcPr1PX UWnhb6miedVMzEDUjZ/hPzbVFff67Zwj8j2awnIAwH6bZmBnJ+iquCUDyqozwkat U7R96yb80LFoRynhCifGMVelVMdcHqOeC1LGAw4S2HZelFxbEkvKVlj05SKkmIhh 251FmJiEYH769HncazSqO1S3t+RraSvewTxAhdaH8FdsBlN9mjAIxw3TAenN3dD3 eVBmJqUcQgTb+I8M6YL+7xgW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7dlIAQ 75PEpGxDbzoeTVNlItBvMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCpRY8rko/5S/hncqf4fjKWfAUwulZNz3n98gIWFwA13DBnik4QJ9E h4N3ok6V4FqYYXyosc2rnelEn6cYx2WWmVPcht80imF8GZEewuY6yo9GPp4zmeuB TsTrWeW6TciGef4fcS7HBxPv7Qe/0mogtPXfIblsl4yj3vsSP2hnkoM/sOeGuFEI g+oRNFa42sHyWjHDDCw05/9EIg+vDAQWRIiYk+4/vUckDt1Rw/SkWcuL+8X71j4W ZpOSupw4gWA1sFjuQjdGjEnCD5FrQQmNqx50rJRWrGA/LBjLSPeoryYDY2bJeu2O hg3daNId4n+nVV/F2ri9rh0XBG0C+oL5 -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:08 2025 by rpki-client