$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: zxjkNkxFwtxP8WbUgOUXMsY31Ixj3+V2Clyw87L1o/g= Subject key identifier: CF:7A:9C:7D:29:E4:5D:EB:DB:D1:97:D5:9C:8B:45:F9:23:8E:88:60 Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 79 Signing time: Thu 21 Aug 2025 06:57:02 +0000 Manifest this update: Thu 21 Aug 2025 06:57:01 +0000 Manifest next update: Thu 28 Aug 2025 06:57:01 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: RzrnO9JPP1mqTJwz4ZAQ43S4WKrcMnKeizw58v9g3wA=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Aug 21 06:57:01 2025 GMT Not After : Aug 28 06:57:01 2025 GMT Subject: CN=68a6c33d-3908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:da:44:18:9d:ef:bc:fe:7f:94:1c:1e:f0:fd: 66:5d:71:9c:ee:64:b0:93:af:be:e5:81:8a:5d:7b: 4f:e1:ad:1c:08:96:36:69:ad:f6:81:80:68:e8:45: 3c:7f:40:aa:2d:55:69:37:de:83:88:dc:fc:fe:82: 9e:bb:2a:73:46:c7:db:73:da:87:b2:07:6a:2e:8f: 3f:66:92:73:ad:9e:34:18:95:82:b8:b9:61:da:ab: 06:22:2d:b9:e3:9e:85:be:a3:12:79:15:3b:ab:73: 64:bb:8d:49:77:5a:e0:14:03:de:5c:d6:85:c8:81: aa:17:60:29:26:21:70:1b:1c:60:71:83:2e:3a:e1: d1:70:70:8b:98:68:ef:09:63:9a:3a:cb:d3:ba:62: a7:c0:7f:0b:f7:ab:4f:c8:33:1b:cd:c7:02:a5:11: 77:7b:4c:9e:3d:a1:1c:a0:44:e5:cb:91:00:5c:94: 28:59:29:81:e5:96:25:95:a3:fe:00:19:d7:d0:24: 7d:74:ca:7f:95:33:ce:79:db:c1:e6:38:53:0a:c2: 44:5d:0d:bb:8d:5a:6f:51:17:17:29:7d:93:e5:25: 05:37:84:ce:45:1c:0d:09:85:2a:2f:ae:e9:37:9d: 91:ce:00:db:07:c8:6b:0d:86:1f:25:5e:d6:b9:62: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7A:9C:7D:29:E4:5D:EB:DB:D1:97:D5:9C:8B:45:F9:23:8E:88:60 X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:03:72:f8:90:4f:b4:50:c1:47:1c:ad:6f:91:74:00:2f:bf: 5e:94:53:8b:65:7e:61:d7:69:ad:4e:0b:57:8d:c3:c9:1c:48: 13:8b:d9:8e:9c:1f:ec:48:24:f9:24:67:af:6f:3f:12:91:15: 75:81:27:ca:80:fc:9b:95:08:db:02:df:11:71:11:bb:4a:29: e9:82:ad:6d:d3:b6:de:52:2a:67:40:c9:0d:36:0e:ce:83:8c: 6d:48:d2:e6:d7:37:83:7f:2c:1d:bd:36:4e:c2:4e:07:91:08: dd:8d:9f:6e:a6:29:1a:fe:f4:6b:04:e2:6c:56:bb:b0:27:56: 78:d8:5e:a0:05:01:6c:46:57:76:a4:4e:1d:fd:a2:64:e6:8e: a8:c2:31:c4:9d:32:34:3e:e3:c6:a4:8d:16:ea:eb:8e:2d:74: 6f:48:3b:52:9d:bf:3a:16:be:0d:7e:91:ef:2b:9e:fa:07:5a: 66:5c:bb:f0:78:2a:9f:1a:d9:64:ef:e7:2e:71:53:11:b1:10: 22:20:df:bb:20:88:79:d0:d0:8f:dc:85:a0:76:ed:2f:97:37: 36:aa:3d:ef:28:6c:e6:d6:2c:cf:92:ee:20:4e:9b:27:c2:c5: 4e:5b:6a:f7:c2:94:9d:b1:c6:ab:95:5e:7b:d8:df:f3:a2:db: 61:33:26:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoOTlCNzBCRjIwMjVFRERDREY5MkE0N0QwNENCNzU2QUNC MDczREM0NTAeFw0yNTA4MjEwNjU3MDFaFw0yNTA4MjgwNjU3MDFaMBgxFjAUBgNV BAMTDTY4YTZjMzNkLTM5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD32kQYne+8/n+UHB7w/WZdcZzuZLCTr77lgYpde0/hrRwIljZprfaBgGjoRTx/ QKotVWk33oOI3Pz+gp67KnNGx9tz2oeyB2oujz9mknOtnjQYlYK4uWHaqwYiLbnj noW+oxJ5FTurc2S7jUl3WuAUA95c1oXIgaoXYCkmIXAbHGBxgy464dFwcIuYaO8J Y5o6y9O6YqfAfwv3q0/IMxvNxwKlEXd7TJ49oRygROXLkQBclChZKYHlliWVo/4A GdfQJH10yn+VM85528HmOFMKwkRdDbuNWm9RFxcpfZPlJQU3hM5FHA0JhSovruk3 nZHOANsHyGsNhh8lXta5YsG3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz3qcfSnk Xevb0ZfVnItF+SOOiGAwHwYDVR0jBBgwFoAUmbcL8gJe3c35KkfQTLdWrLBz3EUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzZERUZEQjcwQzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWJjTDhnSmUzYzM1S2tmUVRMZFdyTEJ6M0VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzZERUZEQjcwQzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2Mz NUtrZlFUTGRXckxCejNFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwDcviQT7RQwUccrW+RdAAvv16UU4tlfmHXaa1OC1eNw8kcSBOL2Y6c H+xIJPkkZ69vPxKRFXWBJ8qA/JuVCNsC3xFxEbtKKemCrW3Ttt5SKmdAyQ02Ds6D jG1I0ubXN4N/LB29Nk7CTgeRCN2Nn26mKRr+9GsE4mxWu7AnVnjYXqAFAWxGV3ak Th39omTmjqjCMcSdMjQ+48akjRbq644tdG9IO1KdvzoWvg1+ke8rnvoHWmZcu/B4 Kp8a2WTv5y5xUxGxECIg37sgiHnQ0I/chaB27S+XNzaqPe8obObWLM+S7iBOmyfC xU5bavfClJ2xxquVXnvY3/Oi22EzJr8= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:16 2025 by rpki-client