$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: YuRJbv4N9E2cIEYUlekA2Bf2jJ9LjG9SkiHUQKEU/3I= Subject key identifier: 9F:F8:E8:70:5B:D9:D9:2E:DD:0A:55:27:18:69:65:F0:09:ED:9C:71 Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: CF Signing time: Sat 23 Aug 2025 05:48:41 +0000 Manifest this update: Sat 23 Aug 2025 05:48:41 +0000 Manifest next update: Sat 30 Aug 2025 05:48:41 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: AO5QAAzbz/X1VVGWUo5GkvknfqXX2ydaAuAX9iUlO8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Aug 23 05:48:41 2025 GMT Not After : Aug 30 05:48:41 2025 GMT Subject: CN=68a95639-a587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:9f:79:18:b2:b8:be:ef:bc:c7:4a:88:6b: 8b:27:f3:e5:6f:83:63:a3:8f:49:67:40:ec:7b:e2: c9:b6:f0:b3:69:b0:27:6f:fd:c8:b7:ea:6e:ac:94: 84:7c:d9:36:1d:82:d2:26:07:d0:46:0a:bc:9f:47: 04:b2:78:02:4d:7d:00:c1:ee:8d:29:0e:e2:50:3d: f5:c3:f8:a4:14:3d:5c:af:6b:8f:71:7b:1b:e7:f2: f6:ad:ca:46:d5:73:2a:d8:8a:aa:c1:1d:33:4d:b5: d1:2a:79:12:0e:10:a4:d6:fe:51:7e:80:66:05:4d: 84:43:59:fb:15:8d:05:26:c7:f6:1c:51:b3:76:7b: a2:be:fd:39:6a:cc:30:1d:aa:a2:de:30:06:fc:fc: e5:55:f9:01:97:1f:83:4b:8e:03:fa:de:96:eb:b9: 87:41:ff:7c:5c:08:4e:ab:f5:e1:10:22:82:d8:20: a0:90:15:74:cb:64:40:e4:5b:9a:0a:c9:14:01:22: be:90:eb:1c:f8:a8:03:de:e5:36:23:7a:50:56:1a: d0:e6:c1:3d:23:7b:a4:29:62:a5:f6:2c:f7:07:98: 7a:4f:5f:31:84:ae:86:5b:39:05:39:6a:1e:dc:c2: 8e:80:f0:37:b5:0e:42:d5:3d:7d:e8:f9:7d:f1:ef: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F8:E8:70:5B:D9:D9:2E:DD:0A:55:27:18:69:65:F0:09:ED:9C:71 X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:60:1a:4f:9b:de:2f:af:d7:e5:29:21:af:e4:41:6a:db:d6: 69:79:b5:72:d3:20:bb:18:bc:85:aa:63:c4:49:a7:af:5f:02: be:e1:37:53:74:38:1e:8a:b5:04:ad:ba:11:f9:cf:c5:e8:ec: 43:32:8f:54:39:fa:03:2a:da:d9:56:1b:49:91:31:a0:3a:ea: f6:a4:e8:46:c0:ec:f3:fa:d1:30:c3:21:d1:80:75:0d:77:8a: 66:44:50:37:5d:60:d4:fd:6b:54:10:d3:53:b3:33:ad:22:a4: 75:2a:58:b9:72:46:99:36:04:c0:ca:77:06:4f:64:f3:74:7c: b4:81:d4:5d:ae:8e:35:52:6b:4a:38:68:d3:a4:af:7c:98:90: 5a:50:51:bd:19:17:95:7f:f0:42:e6:20:ae:6d:a2:00:df:ae: 62:89:28:98:fc:f0:7a:94:3a:4e:5c:3f:96:39:09:34:5d:4b: 96:d8:1b:26:19:6b:83:a9:47:eb:01:27:c2:40:7e:c7:12:60: 14:5d:e8:dc:b9:cb:60:a5:d6:df:ee:4d:6f:e0:fd:cd:86:01: 92:be:a6:a2:c6:1a:95:4f:ee:61:1b:b8:38:90:ce:59:12:ef: b7:7d:c2:bd:11:14:f0:e2:ff:b9:6f:d6:8f:f6:52:cd:9e:f1: 9c:b1:30:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDk5QzEwNkU4N0ZFMUQ2NDExQUVDNzFGODAzOTQ2MjJD ODgxQUFBRDkwHhcNMjUwODIzMDU0ODQxWhcNMjUwODMwMDU0ODQxWjAYMRYwFAYD VQQDEw02OGE5NTYzOS1hNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RGfeRiyuL7vvMdKiGuLJ/Plb4Njo49JZ0Dse+LJtvCzabAnb/3It+purJSE fNk2HYLSJgfQRgq8n0cEsngCTX0Awe6NKQ7iUD31w/ikFD1cr2uPcXsb5/L2rcpG 1XMq2IqqwR0zTbXRKnkSDhCk1v5RfoBmBU2EQ1n7FY0FJsf2HFGzdnuivv05asww Haqi3jAG/PzlVfkBlx+DS44D+t6W67mHQf98XAhOq/XhECKC2CCgkBV0y2RA5Fua CskUASK+kOsc+KgD3uU2I3pQVhrQ5sE9I3ukKWKl9iz3B5h6T18xhK6GWzkFOWoe 3MKOgPA3tQ5C1T196Pl98e+PPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/46HBb 2dku3QpVJxhpZfAJ7ZxxMB8GA1UdIwQYMBaAFJnBBuh/4dZBGuxx+AOUYiyIGqrZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8zNjUxNDBFRTQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFrRWE3SEg0QTVSaUxJZ2Fx dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8zNjUxNDBFRTQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFr RWE3SEg0QTVSaUxJZ2FxdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUYBpPm94vr9flKSGv5EFq29ZpebVy0yC7GLyFqmPESaevXwK+4TdT dDgeirUErboR+c/F6OxDMo9UOfoDKtrZVhtJkTGgOur2pOhGwOzz+tEwwyHRgHUN d4pmRFA3XWDU/WtUENNTszOtIqR1Kli5ckaZNgTAyncGT2TzdHy0gdRdro41UmtK OGjTpK98mJBaUFG9GReVf/BC5iCubaIA365iiSiY/PB6lDpOXD+WOQk0XUuW2Bsm GWuDqUfrASfCQH7HEmAUXejcuctgpdbf7k1v4P3NhgGSvqaixhqVT+5hG7g4kM5Z Eu+3fcK9ERTw4v+5b9aP9lLNnvGcsTAW -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:13 2025 by rpki-client