$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: xtdY16shTxjHzCbnC2GSJF2pTTxITpMcD9sDuKMNT7E= Subject key identifier: F7:7F:B1:5A:76:AF:05:C8:70:DF:79:B8:73:37:7D:50:7D:B4:08:37 Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 40F3 Signing time: Sun 24 Aug 2025 15:02:24 +0000 Manifest this update: Sun 24 Aug 2025 15:02:24 +0000 Manifest next update: Sun 31 Aug 2025 15:02:24 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: 75ZSF5Tg+OJH6jCwE4E/TE5c9tEKY2HdzI6odKEnzEo=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: Uqr4nD/CZBuD2sTlglQJ4RTyydE1vAssru0oXCdlN74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: Aug 24 15:02:24 2025 GMT Not After : Aug 31 15:02:24 2025 GMT Subject: CN=68ab2980-ab7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:89:ee:71:c5:a1:a6:6e:7a:e7:57:67:27: 7c:f1:4d:0c:4d:a5:a9:64:b6:64:73:70:b1:2f:9f: da:cd:e4:cb:e7:59:5f:80:d7:7a:da:29:de:3b:3b: 2d:f6:4e:c3:ee:cd:fc:50:93:eb:73:fa:a9:82:32: c8:0b:df:d4:05:84:4d:1e:d5:1f:cd:f6:3d:d5:6e: 2f:b0:3b:b1:d1:42:db:97:a6:53:be:d3:61:93:bd: 92:8f:ed:6b:62:6f:85:c6:b1:0a:3c:a3:42:83:cd: db:a8:23:56:aa:57:3a:e8:ec:f1:cd:c2:14:15:19: 9e:87:67:9d:23:2c:0f:7f:ad:21:6c:b3:85:c1:70: 85:28:80:be:63:fc:e2:ff:1a:40:4d:9f:b5:bf:e9: 1b:fe:d1:7a:fd:67:8c:7f:97:75:ae:5f:eb:9a:5a: 6e:4f:f5:23:aa:d8:de:28:4a:9e:68:a2:e5:b7:ee: b6:30:73:e4:5d:26:79:b9:37:3a:59:6a:ce:dc:13: 68:93:1f:e7:9b:68:7e:81:f1:b4:1d:a6:4a:48:0f: 26:e6:c4:9c:e8:31:fa:52:e0:c8:9b:12:de:c0:3e: 85:64:2c:21:26:60:d6:07:20:e5:80:1c:93:6b:aa: 2e:ef:cf:07:ba:8c:04:09:dd:56:4f:da:a9:ad:3e: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7F:B1:5A:76:AF:05:C8:70:DF:79:B8:73:37:7D:50:7D:B4:08:37 X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ea:dd:0e:8e:81:80:bf:e8:cb:ab:23:7f:9c:da:d7:45:bc: 2f:30:12:a7:31:96:d3:ea:40:13:33:a5:18:0b:df:16:ee:38: 03:5a:40:eb:43:53:bf:4f:e0:80:03:c3:01:f9:fd:b6:10:dc: 02:4c:4b:35:72:11:53:3a:7a:ff:10:42:20:d3:73:55:7e:40: 54:59:95:54:b0:38:84:16:bb:1e:94:e1:5c:d5:4c:be:1f:32: 8c:3d:0e:47:15:27:e4:2d:51:8b:dc:ff:29:1e:23:46:23:2d: 8c:41:94:4a:75:37:6b:da:12:60:79:f5:bc:9c:71:e1:52:72: df:89:d0:61:98:3c:61:f5:e8:e4:d5:87:89:b1:97:de:b4:4e: bc:93:cd:b9:4f:eb:63:ad:38:0b:dc:8e:e4:1f:a2:ff:9b:f6: ec:b3:03:10:3e:67:e6:96:2f:09:f8:80:bd:b7:4a:aa:c0:33: 46:ac:dd:17:d0:f3:46:d6:e2:89:65:5c:75:c6:58:6e:42:95: 96:86:4e:04:01:33:6c:9e:18:c8:b1:ec:0a:7d:48:86:88:cd: 5a:7d:4b:2e:03:58:1e:6e:e3:50:a8:79:f5:f5:9f:21:c9:bd: 84:56:9b:10:fe:84:e1:0f:4f:65:55:3e:bb:9c:7a:38:c2:98: 31:68:14:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjUwODI0MTUwMjI0WhcNMjUwODMxMTUwMjI0WjAYMRYwFAYD VQQDEw02OGFiMjk4MC1hYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsuJ7nHFoaZueudXZyd88U0MTaWpZLZkc3CxL5/azeTL51lfgNd62ineOzst 9k7D7s38UJPrc/qpgjLIC9/UBYRNHtUfzfY91W4vsDux0ULbl6ZTvtNhk72Sj+1r Ym+FxrEKPKNCg83bqCNWqlc66OzxzcIUFRmeh2edIywPf60hbLOFwXCFKIC+Y/zi /xpATZ+1v+kb/tF6/WeMf5d1rl/rmlpuT/UjqtjeKEqeaKLlt+62MHPkXSZ5uTc6 WWrO3BNokx/nm2h+gfG0HaZKSA8m5sSc6DH6UuDImxLewD6FZCwhJmDWByDlgByT a6ou788HuowECd1WT9qprT4UfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd/sVp2 rwXIcN95uHM3fVB9tAg3MB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR6t0OjoGAv+jLqyN/nNrXRbwvMBKnMZbT6kATM6UYC98W7jgDWkDr Q1O/T+CAA8MB+f22ENwCTEs1chFTOnr/EEIg03NVfkBUWZVUsDiEFrselOFc1Uy+ HzKMPQ5HFSfkLVGL3P8pHiNGIy2MQZRKdTdr2hJgefW8nHHhUnLfidBhmDxh9ejk 1YeJsZfetE68k825T+tjrTgL3I7kH6L/m/bsswMQPmfmli8J+IC9t0qqwDNGrN0X 0PNG1uKJZVx1xlhuQpWWhk4EATNsnhjIsewKfUiGiM1afUsuA1gebuNQqHn19Z8h yb2EVpsQ/oThD09lVT67nHo4wpgxaBS8 -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:33 2025 by rpki-client