$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json) Hash identifier: 03etSVNwAlzuCIujwhJJGTL0rBvOxan/n8x7jDP5Mbc= Subject key identifier: 7A:15:46:39:3D:46:1E:8E:30:15:C7:AE:38:0B:62:00:2D:06:9B:6E Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66 Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft Manifest number: A1 Signing time: Sat 19 Jul 2025 06:27:31 +0000 Manifest this update: Sat 19 Jul 2025 06:27:31 +0000 Manifest next update: Sat 26 Jul 2025 06:27:31 +0000 Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: 7p1TGeLz5SBuJAWyxXHvgr5gjV2uIu7alIoSonBLlBg=) 2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: 7pF3uHzaE+Wewnte+bG2KwxN3eFFLWjZ6eq6MYtYcWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66 Validity Not Before: Jul 19 06:27:31 2025 GMT Not After : Jul 26 06:27:31 2025 GMT Subject: CN=687b3ad3-f3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:0c:b7:84:57:9d:da:80:f8:77:44:ba:e1: 32:52:32:93:4c:ef:31:16:c2:ef:99:b3:e3:76:c5: f3:00:16:e1:2c:1c:22:21:26:85:a5:35:2c:17:21: f5:99:cf:67:27:91:df:23:9e:61:c1:67:a0:84:f9: eb:2d:42:b6:91:b0:c5:28:99:3f:de:7a:b3:76:ba: 05:e8:75:3b:b4:19:f5:be:62:a2:19:dd:02:7b:3b: 3a:01:28:d6:9e:67:3c:11:b6:34:ae:4a:ab:a4:9c: f4:4f:2f:03:6c:76:b4:26:1c:34:72:f6:cc:d9:af: 3d:b5:5e:a7:0a:f5:96:6b:da:4a:92:d9:93:ed:df: 8a:be:36:e9:bc:56:b6:e6:ad:72:b8:ce:bf:25:0a: d9:15:22:d9:64:ec:c9:63:c9:28:df:78:4d:96:bf: cc:b5:d2:c1:45:eb:aa:d8:56:fb:76:a5:48:c0:56: f8:57:b5:d7:ef:1f:89:ee:5a:34:79:26:3d:4e:59: d1:b0:c1:12:e9:97:49:95:67:0b:4f:83:b7:ef:2c: 71:3b:dc:b7:e7:f5:17:ef:1a:32:6b:0b:6f:8c:96: ae:a5:1c:e3:4e:4b:73:35:96:60:51:69:aa:3c:92: 44:90:d9:92:bd:16:b1:5e:bd:22:a0:67:3f:08:59: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:46:39:3D:46:1E:8E:30:15:C7:AE:38:0B:62:00:2D:06:9B:6E X509v3 Authority Key Identifier: keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:86:d5:64:11:0c:1e:bd:8f:ce:c2:ec:c7:dd:e8:c9:02:00: 09:92:b1:7f:db:65:67:c6:0b:7e:34:3a:45:d0:9b:b8:68:bf: f4:8c:c7:71:02:aa:ea:10:86:a0:de:4d:bc:e4:9f:a4:12:63: e6:c4:dc:96:58:88:d6:75:ac:0d:9a:c5:9e:59:9f:fb:74:29: 32:fb:3a:01:d4:3e:36:77:89:e2:9f:9a:32:3f:62:b1:dd:1c: ee:dd:04:07:12:d2:f6:85:4e:d5:e8:5c:54:cd:9a:ff:25:e7: ed:85:f1:45:fe:ea:8a:5d:a1:1e:b2:8e:c3:ff:26:a9:4b:4f: 1f:d8:95:c5:89:5b:e7:c2:d2:d8:fc:36:31:c9:ef:38:6d:3f: 5f:29:6a:e9:8d:ba:ed:41:cb:88:c4:1d:b8:ca:4b:e2:97:88: d2:f3:f8:43:82:b1:5b:66:00:27:3e:a8:8c:44:3f:a5:f3:f2: 46:2e:b8:93:bb:75:2a:48:ae:22:89:74:68:78:6f:05:8c:86: b8:1b:d5:5a:cc:44:54:7b:75:14:eb:2a:ea:28:d0:50:dd:00: 70:8d:1f:0f:3d:7a:94:f5:92:fb:20:69:c2:6b:8d:c2:ec:d2: 22:bf:75:e0:ce:73:a2:64:e8:58:ab:2a:37:bc:5b:98:88:f1: 43:76:bd:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5ODExMTAvBgNVBAUTKDMyMTRFMjYwQTc4RjdEMTY3N0U4MzAxMzdDMTA2NTcz MDAzMUNGNjYwHhcNMjUwNzE5MDYyNzMxWhcNMjUwNzI2MDYyNzMxWjAYMRYwFAYD VQQDEw02ODdiM2FkMy1mM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprkMt4RXndqA+HdEuuEyUjKTTO8xFsLvmbPjdsXzABbhLBwiISaFpTUsFyH1 mc9nJ5HfI55hwWeghPnrLUK2kbDFKJk/3nqzdroF6HU7tBn1vmKiGd0Cezs6ASjW nmc8EbY0rkqrpJz0Ty8DbHa0Jhw0cvbM2a89tV6nCvWWa9pKktmT7d+KvjbpvFa2 5q1yuM6/JQrZFSLZZOzJY8ko33hNlr/MtdLBReuq2Fb7dqVIwFb4V7XX7x+J7lo0 eSY9TlnRsMES6ZdJlWcLT4O37yxxO9y35/UX7xoyawtvjJaupRzjTktzNZZgUWmq PJJEkNmSvRaxXr0ioGc/CFnb3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoVRjk9 Rh6OMBXHrjgLYgAtBptuMB8GA1UdIwQYMBaAFDIU4mCnj30Wd+gwE3wQZXMAMc9m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8yNzJCNEM3MDZD N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZSWjM2REFUZkJCbGN3QXh6 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oVGlZS2VQZlJaMzZEQVRmQkJsY3dBeHoyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk4MS8yNzJCNEM3MDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZS WjM2REFUZkJCbGN3QXh6MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7htVkEQwevY/OwuzH3ejJAgAJkrF/22Vnxgt+NDpF0Ju4aL/0jMdx AqrqEIag3k285J+kEmPmxNyWWIjWdawNmsWeWZ/7dCky+zoB1D42d4nin5oyP2Kx 3Rzu3QQHEtL2hU7V6FxUzZr/JefthfFF/uqKXaEeso7D/yapS08f2JXFiVvnwtLY /DYxye84bT9fKWrpjbrtQcuIxB24ykvil4jS8/hDgrFbZgAnPqiMRD+l8/JGLriT u3UqSK4iiXRoeG8FjIa4G9VazERUe3UU6yrqKNBQ3QBwjR8PPXqU9ZL7IGnCa43C 7NIiv3XgznOiZOhYqyo3vFuYiPFDdr3D -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:13 2025 by rpki-client