$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: +ifJm49F3mcTc9O4r8HEEP1VayUpy3fQpn/tW0VmTMs= Subject key identifier: 88:6A:B2:50:D5:EB:EE:E7:7E:00:61:99:F0:5B:09:46:26:28:DC:D2 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34C1 Signing time: Mon 08 Sep 2025 14:32:07 +0000 Manifest this update: Mon 08 Sep 2025 14:32:06 +0000 Manifest next update: Mon 15 Sep 2025 14:32:06 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: lD7s6d05FjGGmbrJBWaukCo3pW45oe7KYcHbf8kDYzM=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13509 (0x34c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Sep 8 14:32:06 2025 GMT Not After : Sep 15 14:32:06 2025 GMT Subject: CN=68bee8e6-6067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:d1:07:07:26:94:ee:b5:63:fa:8b:8f:05: 1a:e4:cc:47:86:21:b5:24:aa:28:4d:c4:4b:fc:86: 28:74:6f:36:59:a4:13:6b:29:25:8b:08:d1:22:ee: a4:19:24:9d:8d:cc:40:90:48:7e:55:bd:a5:cd:e3: 18:3e:80:d4:86:28:2e:e0:3e:fb:0d:76:30:79:47: 75:04:9b:bb:d1:50:90:dc:95:a5:bc:f5:a1:f7:34: b5:18:9c:46:3d:b5:b1:94:a6:ec:21:0f:76:f3:ad: 04:69:25:9c:1a:46:66:92:a1:9b:ba:91:dc:34:c1: 7c:de:18:b0:6e:ca:56:74:e0:28:16:01:2d:8e:1c: ee:da:37:4d:de:6c:54:92:a4:02:2e:83:97:b8:a1: 26:0d:09:ce:f1:12:ce:a5:0b:35:ef:5d:5c:d2:4a: 3c:b1:83:18:7f:02:2e:f6:1c:ef:49:ec:47:b2:40: a1:b4:6d:55:24:ff:b2:1c:89:4f:91:51:1c:d0:32: 09:52:6c:29:5e:39:83:66:03:f5:c2:0f:67:f4:aa: ab:b0:d8:ab:a8:cd:67:ab:33:98:8c:b1:f6:76:74: 27:9f:fc:cc:e8:e1:0a:ae:15:33:34:84:7f:c4:a2: 54:9f:8c:b4:d8:d7:73:dc:a3:7c:d0:ba:34:5e:76: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6A:B2:50:D5:EB:EE:E7:7E:00:61:99:F0:5B:09:46:26:28:DC:D2 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c5:80:3b:be:87:39:bf:9d:85:67:6d:0b:52:05:50:bd:4f: 44:00:23:91:ba:dc:a9:bc:8f:5b:93:66:a8:a4:b4:1e:04:70: e1:39:f2:18:44:d8:60:79:a4:33:7f:f9:e4:1f:8b:55:1e:6b: a5:3e:53:be:e9:b6:a4:65:b9:a2:b3:6e:99:21:0b:e2:60:3b: 36:e3:33:0a:9f:ef:46:d2:1a:ba:78:9f:09:70:16:f5:91:ac: a7:44:a0:a2:25:9e:17:68:d5:27:f2:ea:73:b4:05:19:43:f4: c9:64:91:d2:97:98:5e:d1:1a:c5:67:0a:7a:81:d0:f2:69:65: b1:78:d9:7c:86:77:db:af:5b:3c:c3:4c:d7:e5:11:2d:92:62: bc:bc:ba:d0:6c:ff:0b:fd:fd:00:ee:9c:cc:15:b3:7f:88:37: ff:4a:66:b8:96:93:60:fe:10:3e:e8:66:29:68:e0:56:fe:03: e4:36:83:3d:e6:cc:9c:da:33:a4:7d:46:bc:8c:41:d7:f8:0a: 73:aa:8e:d9:ce:ad:1d:86:c8:e7:4e:a9:05:9b:6b:32:3c:d6: 20:7a:d2:af:ab:1f:d6:46:3d:d7:ca:77:e9:f2:a7:08:b2:48: a1:57:29:37:f2:7a:20:08:70:1f:11:0a:df:02:32:09:93:0e: 2a:18:af:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwOTA4MTQzMjA2WhcNMjUwOTE1MTQzMjA2WjAYMRYwFAYD VQQDEw02OGJlZThlNi02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4l3RBwcmlO61Y/qLjwUa5MxHhiG1JKooTcRL/IYodG82WaQTaykliwjRIu6k GSSdjcxAkEh+Vb2lzeMYPoDUhigu4D77DXYweUd1BJu70VCQ3JWlvPWh9zS1GJxG PbWxlKbsIQ92860EaSWcGkZmkqGbupHcNMF83hiwbspWdOAoFgEtjhzu2jdN3mxU kqQCLoOXuKEmDQnO8RLOpQs1711c0ko8sYMYfwIu9hzvSexHskChtG1VJP+yHIlP kVEc0DIJUmwpXjmDZgP1wg9n9KqrsNirqM1nqzOYjLH2dnQnn/zM6OEKrhUzNIR/ xKJUn4y02Ndz3KN80Lo0XnaVTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhqslDV 6+7nfgBhmfBbCUYmKNzSMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5xYA7voc5v52FZ20LUgVQvU9EACORutypvI9bk2aopLQeBHDhOfIY RNhgeaQzf/nkH4tVHmulPlO+6bakZbmis26ZIQviYDs24zMKn+9G0hq6eJ8JcBb1 kaynRKCiJZ4XaNUn8upztAUZQ/TJZJHSl5he0RrFZwp6gdDyaWWxeNl8hnfbr1s8 w0zX5REtkmK8vLrQbP8L/f0A7pzMFbN/iDf/Sma4lpNg/hA+6GYpaOBW/gPkNoM9 5syc2jOkfUa8jEHX+Apzqo7Zzq0dhsjnTqkFm2syPNYgetKvqx/WRj3Xynfp8qcI skihVyk38nogCHAfEQrfAjIJkw4qGK+f -----END CERTIFICATE-----Generated at Tue Sep 9 13:12:15 2025 by rpki-client