$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json) Hash identifier: OH7L8Ew55Bn6D91rOjTt0ls+IOC9aEkWydHvJ8fA/q0= Subject key identifier: 21:23:0B:AA:C5:8E:28:28:90:AA:24:42:46:69:E4:4E:16:B6:53:D8 Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft Manifest number: 93 Signing time: Wed 17 Sep 2025 07:09:18 +0000 Manifest this update: Wed 17 Sep 2025 07:09:17 +0000 Manifest next update: Wed 24 Sep 2025 07:09:17 +0000 Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: FwQ1k+ObeYwU3fgeafIb8bN1pRtzQO/4AlIMx3KuS7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Validity Not Before: Sep 17 07:09:17 2025 GMT Not After : Sep 24 07:09:17 2025 GMT Subject: CN=68ca5e9d-9b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:d0:d4:8b:d0:4f:46:cb:68:78:26:14:47: 9c:d5:c3:19:c8:e9:f7:1a:38:2b:d2:9d:ab:ed:77: 80:d4:41:82:b8:99:36:94:19:ef:32:8c:24:71:0c: a6:cc:fd:49:ce:46:01:d8:09:7b:ab:65:54:83:41: 61:cc:8d:89:8a:09:75:e7:26:ca:97:2a:63:b5:75: 13:00:f1:f4:9c:a6:f9:e5:95:c0:a5:52:57:f3:55: 57:90:45:0e:db:a3:b8:6a:a1:43:2c:1a:81:50:c0: 24:d6:0b:84:93:3a:3b:56:92:35:34:e3:d7:13:21: c8:f0:b8:7f:5e:72:55:86:d5:fc:62:02:3a:d7:e8: ec:f4:05:79:f5:74:87:1e:95:0d:4e:14:c7:bd:76: e1:05:5a:ea:e3:3e:1b:5b:11:b0:ef:a1:73:e0:c7: 21:6e:80:a1:1c:47:14:96:74:f9:d8:11:12:73:d6: 4a:22:1f:e7:44:da:28:db:bc:06:cc:36:09:99:4e: 78:cf:02:8f:8d:2f:96:cf:49:48:42:71:6e:4d:47: 55:6c:4b:a6:8b:ce:43:a6:6f:09:78:f2:48:4a:c6: d7:52:66:41:51:bd:bb:4a:62:0e:36:11:d7:12:2f: a8:37:ae:a2:56:3a:24:b6:5a:71:21:db:99:55:ef: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:0B:AA:C5:8E:28:28:90:AA:24:42:46:69:E4:4E:16:B6:53:D8 X509v3 Authority Key Identifier: keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:25:9a:36:88:4a:c6:e5:d6:35:df:d7:02:99:5d:8b:f3:9a: 94:ba:26:8d:68:5c:50:cc:be:17:4a:62:64:c7:b7:7f:56:82: 27:53:cc:1e:dd:61:c4:03:fb:9a:7b:01:c5:9e:49:e2:19:cb: 98:a2:ad:c6:bd:6b:8c:44:6e:a6:4a:19:0b:f5:30:53:64:c8: b1:13:02:e3:b7:fa:f1:7a:62:36:66:2d:34:2a:d9:d8:41:60: c0:e9:1b:09:e0:97:cb:e0:01:39:5a:2a:ca:3b:65:42:3f:0b: 88:6d:31:a2:4f:ea:88:84:d5:00:14:37:3b:ef:75:ae:45:08: 4f:4b:55:ad:2e:bd:2f:ed:90:4e:cf:67:2e:36:07:33:13:21: 37:a2:48:b6:ac:03:72:b4:e8:99:56:19:4e:4f:02:fc:9c:7f: 1d:68:52:a4:8d:90:9c:25:29:79:d4:5a:d0:72:b4:e5:86:7b: 18:dc:6c:94:41:8c:e5:57:f1:0c:6d:5e:b6:c0:99:79:13:37: 72:ce:75:62:8a:0b:ba:0f:a3:38:ac:39:a8:a3:79:5e:45:a1: 99:b6:f8:0f:f0:68:6a:04:b9:61:64:62:48:ee:de:e4:e9:0f: 43:83:fc:c1:82:ba:a9:ec:18:47:5d:42:f8:77:c0:a5:f8:b1: 2a:3f:6f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDMyNzNCRjc0Q0ZEMzdEQzJCMDgwQUE0RjFBRDlFRDVF RDYzRTYzMjAwHhcNMjUwOTE3MDcwOTE3WhcNMjUwOTI0MDcwOTE3WjAYMRYwFAYD VQQDEw02OGNhNWU5ZC05Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6zQ1IvQT0bLaHgmFEec1cMZyOn3Gjgr0p2r7XeA1EGCuJk2lBnvMowkcQym zP1JzkYB2Al7q2VUg0FhzI2Jigl15ybKlypjtXUTAPH0nKb55ZXApVJX81VXkEUO 26O4aqFDLBqBUMAk1guEkzo7VpI1NOPXEyHI8Lh/XnJVhtX8YgI61+js9AV59XSH HpUNThTHvXbhBVrq4z4bWxGw76Fz4MchboChHEcUlnT52BESc9ZKIh/nRNoo27wG zDYJmU54zwKPjS+Wz0lIQnFuTUdVbEumi85Dpm8JePJISsbXUmZBUb27SmIONhHX Ei+oN66iVjoktlpxIduZVe8omQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEjC6rF jigokKokQkZp5E4WtlPYMB8GA1UdIwQYMBaAFDJzv3TP033CsICqTxrZ7V7WPmMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84RTYwOEE4QUIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZjS3dnS3BQR3RudFh0WS1Z eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01uT19kTV9UZmNLd2dLcFBHdG50WHRZLVl5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84RTYwOEE4QUIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZj S3dnS3BQR3RudFh0WS1ZeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByJZo2iErG5dY139cCmV2L85qUuiaNaFxQzL4XSmJkx7d/VoInU8we 3WHEA/uaewHFnkniGcuYoq3GvWuMRG6mShkL9TBTZMixEwLjt/rxemI2Zi00KtnY QWDA6RsJ4JfL4AE5WirKO2VCPwuIbTGiT+qIhNUAFDc773WuRQhPS1WtLr0v7ZBO z2cuNgczEyE3oki2rANytOiZVhlOTwL8nH8daFKkjZCcJSl51FrQcrTlhnsY3GyU QYzlV/EMbV62wJl5EzdyznViigu6D6M4rDmoo3leRaGZtvgP8GhqBLlhZGJI7t7k 6Q9Dg/zBgrqp7BhHXUL4d8Cl+LEqP2+Z -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:12 2025 by rpki-client