$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: UjwesRNG6v+XmfYuHZVSl203va2EkKUpdG8OliInhTE= Subject key identifier: 08:95:B9:EC:EA:C9:D4:BD:08:31:F4:7B:59:7C:11:9B:5B:23:77:71 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0C86 Signing time: Wed 10 Sep 2025 18:27:56 +0000 Manifest this update: Wed 10 Sep 2025 18:27:56 +0000 Manifest next update: Wed 17 Sep 2025 18:27:56 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: dOPevcMOBXJ3+BFI3OsVklkrDvhN/MLHdAq7qwzdTFI=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Sep 10 18:27:56 2025 GMT Not After : Sep 17 18:27:56 2025 GMT Subject: CN=68c1c32c-f043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e3:0b:fd:14:d6:d9:4f:22:de:97:ee:50:3e: 4e:e5:e0:99:ea:a1:77:09:e2:b8:26:a2:59:5d:11: fe:5b:a1:d6:26:c6:a3:df:37:cf:42:70:a9:fd:53: 74:01:51:26:fb:c6:54:fa:af:8c:2d:53:cf:54:86: 84:80:de:b0:f4:60:31:a2:17:56:70:0e:d1:26:ff: 3f:90:89:63:3d:71:b0:93:ed:cc:78:59:ad:13:32: a6:a3:c0:27:7a:97:b2:0b:e0:99:fb:48:49:1b:43: 9d:b4:0a:b8:1d:22:18:64:f6:28:c1:ec:0f:0d:c2: 89:86:ec:97:d2:6e:a3:5a:96:c2:3b:f9:24:66:4c: c5:2c:08:ee:73:bd:b3:1c:ce:ff:fe:07:03:29:af: 53:2b:f0:cb:c3:c2:49:dd:32:7a:1f:d2:67:ea:fb: 51:52:c2:cd:e4:79:d9:42:74:69:bc:a0:0a:57:1a: ff:ff:02:4c:fc:03:36:c8:34:d6:f7:ef:8e:cd:5a: 71:97:95:a6:47:41:c9:2e:8c:bf:4a:7d:ef:07:ef: fa:c8:33:86:8a:e8:ed:bf:51:82:e0:9f:28:89:8c: 92:b4:d0:be:dc:74:fe:36:2f:98:8f:91:a3:f6:21: 23:3c:c7:d4:23:31:44:10:94:c6:ca:68:a0:83:fe: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:B9:EC:EA:C9:D4:BD:08:31:F4:7B:59:7C:11:9B:5B:23:77:71 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:b1:42:e8:54:30:9e:f6:2f:37:e2:2a:5c:15:a8:06:39: 12:d3:90:9d:27:d3:e0:17:4d:7d:7b:92:19:1c:10:03:93:cc: 32:f6:af:39:b6:78:0c:78:46:00:bd:73:7c:ad:1f:4a:28:d3: d8:ee:14:b2:51:5a:24:bb:aa:b5:3a:24:a4:8c:a9:f2:c3:90: bf:46:bf:85:81:f1:81:04:ab:02:ed:5e:4f:1e:80:19:46:b7: d7:50:1b:aa:68:7f:d7:32:6c:48:cb:7c:bc:14:32:6d:1e:eb: b7:e4:76:0c:4a:05:ff:76:51:ec:46:d3:1f:6a:1d:bc:9d:c8: 04:9b:0a:e1:41:98:6d:20:9c:f5:a8:df:e0:e3:cd:2c:d0:5c: 1c:1b:55:82:54:9f:1a:b9:5e:33:67:5c:38:a9:6f:16:c9:ff: 96:d8:1f:59:05:31:7a:7c:52:55:64:03:39:97:f9:1e:86:77: f5:8e:4b:2e:33:70:19:ca:c5:45:fa:02:39:a2:2a:1c:dd:ee: fb:c4:36:c7:0a:c4:a9:0b:33:bd:a1:4e:d0:54:bd:26:8c:9b: 82:80:ce:e5:7b:a5:56:5b:8f:4d:a1:b4:21:d2:c9:4c:12:22: 8e:2c:3c:1d:ce:1c:f8:e6:3e:6c:f6:7e:a3:68:55:9f:7c:b2: 26:2b:83:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUwOTEwMTgyNzU2WhcNMjUwOTE3MTgyNzU2WjAYMRYwFAYD VQQDEw02OGMxYzMyYy1mMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+ML/RTW2U8i3pfuUD5O5eCZ6qF3CeK4JqJZXRH+W6HWJsaj3zfPQnCp/VN0 AVEm+8ZU+q+MLVPPVIaEgN6w9GAxohdWcA7RJv8/kIljPXGwk+3MeFmtEzKmo8An epeyC+CZ+0hJG0OdtAq4HSIYZPYowewPDcKJhuyX0m6jWpbCO/kkZkzFLAjuc72z HM7//gcDKa9TK/DLw8JJ3TJ6H9Jn6vtRUsLN5HnZQnRpvKAKVxr//wJM/AM2yDTW 9++OzVpxl5WmR0HJLoy/Sn3vB+/6yDOGiujtv1GC4J8oiYyStNC+3HT+Ni+Yj5Gj 9iEjPMfUIzFEEJTGymigg/4DVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiVuezq ydS9CDH0e1l8EZtbI3dxMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVwrFC6FQwnvYvN+IqXBWoBjkS05CdJ9PgF019e5IZHBADk8wy9q85 tngMeEYAvXN8rR9KKNPY7hSyUVoku6q1OiSkjKnyw5C/Rr+FgfGBBKsC7V5PHoAZ RrfXUBuqaH/XMmxIy3y8FDJtHuu35HYMSgX/dlHsRtMfah28ncgEmwrhQZhtIJz1 qN/g480s0FwcG1WCVJ8auV4zZ1w4qW8Wyf+W2B9ZBTF6fFJVZAM5l/kehnf1jksu M3AZysVF+gI5oioc3e77xDbHCsSpCzO9oU7QVL0mjJuCgM7le6VWW49NobQh0slM EiKOLDwdzhz45j5s9n6jaFWffLImK4P3 -----END CERTIFICATE-----Generated at Thu Sep 11 00:14:39 2025 by rpki-client