$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: QlOU6eDhe1ryB8JrkqmiA4udHeCRQrMqpWVouRs4WX8= Subject key identifier: 4E:26:CD:9B:E0:99:87:24:3F:3B:D2:EA:13:E1:74:FA:CD:D4:ED:07 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 25CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 25B3 Signing time: Sun 24 Aug 2025 15:41:24 +0000 Manifest this update: Sun 24 Aug 2025 15:41:24 +0000 Manifest next update: Sun 31 Aug 2025 15:41:24 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: WgChaTQHKRnJN23i9ByrCrD2dm36ZnKM4Z/6R+k/ixc=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: TDCyPfvl14GmlvtvPX3j8FfT9kdUWeZZya5/K7phv9Q=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: Qmsz/kc6vCM5AVnwbPEOkvoDKpojajE1SGhMXZiiAis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9674 (0x25ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Aug 24 15:41:24 2025 GMT Not After : Aug 31 15:41:24 2025 GMT Subject: CN=68ab32a4-b99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:57:28:48:a0:df:8f:a9:ce:35:16:f7:83: 63:0d:51:90:77:e3:34:80:4c:71:8a:16:d9:9e:30: 8c:4c:b2:40:48:f5:46:69:4d:b2:47:98:8d:2b:51: 96:38:b5:49:31:6b:d7:3c:e3:03:fd:6e:f7:4e:7a: be:31:59:8e:9f:d4:65:70:52:dd:e1:4b:12:1a:4e: d0:af:61:32:b3:ab:4a:c2:f3:5b:53:b5:a6:6f:60: 3d:eb:b0:6b:b2:29:90:f0:95:77:ba:a8:a9:c9:10: 7d:2a:58:d0:0e:7c:1b:89:3c:a7:dc:46:82:5e:de: cf:1a:9b:ba:b1:5b:16:44:a8:0d:86:34:3d:bb:23: e5:f2:7b:61:46:7a:d2:42:f6:d5:cf:8b:86:22:12: 0f:da:5a:e4:88:aa:98:eb:a3:65:21:38:30:47:97: 99:5b:8e:c2:33:81:01:70:c1:18:20:55:ee:eb:f8: 42:79:ac:f8:25:9d:85:1b:39:d4:c2:8c:d6:01:bd: 60:0e:46:a1:30:ce:3f:4f:90:ac:ba:99:d3:8a:95: 23:65:40:7a:fe:3f:f6:af:b8:c1:bf:7d:1a:f4:2b: 21:5a:51:99:2b:64:ed:7f:5a:85:50:07:ef:f3:bf: d7:8e:c9:14:de:b1:fe:ae:85:aa:4d:03:58:f3:cb: d5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:26:CD:9B:E0:99:87:24:3F:3B:D2:EA:13:E1:74:FA:CD:D4:ED:07 X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:06:0e:6c:58:f4:93:82:63:d0:24:03:de:db:77:32:dd:db: 7d:dd:a2:d2:5b:cb:1c:1d:f1:2d:6b:b4:04:bc:fc:bb:43:35: 72:d9:79:24:eb:79:fc:c9:5d:54:86:f8:6b:77:7b:32:d7:71: 71:57:d2:15:40:47:e6:01:82:6b:af:4a:28:bb:12:38:1a:ed: b3:2b:37:7a:d1:e7:4d:9e:15:f4:f0:88:4f:8c:b3:51:d6:6f: 9b:41:ea:c1:74:f1:fa:1d:05:0a:09:8a:5f:d0:c5:c1:81:0b: c9:85:32:a9:c7:3c:b5:dc:62:37:30:2b:e5:c0:88:9a:e4:47: 4f:73:09:3e:5b:81:28:93:8d:bb:65:89:e1:00:8c:70:f4:b2: e0:ae:49:c8:fc:6c:cd:4b:0f:e9:eb:23:8c:ea:1d:b3:8d:84: 02:4f:89:ed:bb:75:9a:35:9c:56:de:25:44:6d:70:d4:54:71: 28:37:69:32:e0:9d:d4:82:9a:0b:63:4d:db:80:0d:f3:ba:a5: 26:09:d7:2c:86:f4:ae:d0:08:e4:42:a0:1c:79:ae:b8:c3:0d: a2:d0:eb:e4:f5:a6:c7:11:ae:fb:52:e2:92:d7:bd:b5:72:f4: 03:9a:a9:5a:1a:b2:c1:7a:e2:66:bb:62:b9:2b:f2:38:28:08: 1e:76:24:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwODI0MTU0MTI0WhcNMjUwODMxMTU0MTI0WjAYMRYwFAYD VQQDEw02OGFiMzJhNC1iOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBNXKEig34+pzjUW94NjDVGQd+M0gExxihbZnjCMTLJASPVGaU2yR5iNK1GW OLVJMWvXPOMD/W73Tnq+MVmOn9RlcFLd4UsSGk7Qr2Eys6tKwvNbU7Wmb2A967Br simQ8JV3uqipyRB9KljQDnwbiTyn3EaCXt7PGpu6sVsWRKgNhjQ9uyPl8nthRnrS QvbVz4uGIhIP2lrkiKqY66NlITgwR5eZW47CM4EBcMEYIFXu6/hCeaz4JZ2FGznU wozWAb1gDkahMM4/T5CsupnTipUjZUB6/j/2r7jBv30a9CshWlGZK2Ttf1qFUAfv 87/XjskU3rH+roWqTQNY88vVvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4mzZvg mYckPzvS6hPhdPrN1O0HMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Bg5sWPSTgmPQJAPe23cy3dt93aLSW8scHfEta7QEvPy7QzVy2Xkk 63n8yV1Uhvhrd3sy13FxV9IVQEfmAYJrr0oouxI4Gu2zKzd60edNnhX08IhPjLNR 1m+bQerBdPH6HQUKCYpf0MXBgQvJhTKpxzy13GI3MCvlwIia5EdPcwk+W4Eok427 ZYnhAIxw9LLgrknI/GzNSw/p6yOM6h2zjYQCT4ntu3WaNZxW3iVEbXDUVHEoN2ky 4J3UgpoLY03bgA3zuqUmCdcshvSu0AjkQqAcea64ww2i0Ovk9abHEa77UuKS1721 cvQDmqlaGrLBeuJmu2K5K/I4KAgediRd -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:00 2025 by rpki-client