$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: UIIvbKNvQfZh40aSdNkNM3HUuneHBIJEDG778UTs/x4= Subject key identifier: 7A:2E:92:0E:25:B4:F1:98:5C:56:9A:2C:9C:EE:B3:E2:95:CF:6A:0B Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 0204 Signing time: Mon 03 Nov 2025 02:36:20 +0000 Manifest this update: Mon 03 Nov 2025 02:36:19 +0000 Manifest next update: Mon 10 Nov 2025 02:36:19 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: Cvzhq2wvgQKmGI1aGcSlv8ZMg6xAZ3OPmAMdJaGyL5U=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: duTYZvXv6lu6t8rEgm3ckGUyqXhrkljrh8aPt8kb7W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Nov 3 02:36:19 2025 GMT Not After : Nov 10 02:36:19 2025 GMT Subject: CN=69081524-f837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:34:1c:c6:b4:01:1e:f1:3e:f5:fa:d7:15: 51:4f:bc:11:fa:aa:66:55:15:4b:01:51:e7:68:d7: 9d:34:1e:f7:c6:80:83:32:81:f4:38:e8:b2:d1:22: 6a:a4:97:18:22:42:6e:06:41:50:6e:5d:73:21:81: 3a:9f:2d:d3:da:5f:48:c5:cb:23:14:de:13:03:98: 0a:ba:5b:a9:11:c0:3a:1c:10:34:2d:3f:1e:8c:d4: a7:10:bf:25:46:f9:ae:d8:7b:96:b9:e5:f7:24:e8: 9a:8f:fc:53:a8:a9:aa:c8:7d:34:f0:11:d8:5e:d8: b4:d5:27:66:dc:04:be:e2:f6:27:ca:00:8a:8a:b3: 52:b3:c5:e3:55:c1:39:96:77:45:04:67:0d:18:38: a4:df:e4:6d:d6:e8:c7:8c:02:e0:18:55:4b:f6:74: ea:0a:dc:e3:d5:2d:72:ec:07:07:a9:44:a0:30:5a: 18:58:51:b8:d4:9e:d9:40:2f:3b:4b:4e:28:4c:e9: 91:33:19:35:39:05:92:e1:de:4f:cd:9c:cb:5c:5b: d2:4f:43:f0:39:4f:9b:da:cf:49:d3:16:e9:e9:90: d2:27:20:40:8c:fa:46:89:89:0c:a6:dd:78:a2:01: 62:73:62:ca:ba:fe:ab:f7:ad:62:50:91:0d:62:8b: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2E:92:0E:25:B4:F1:98:5C:56:9A:2C:9C:EE:B3:E2:95:CF:6A:0B X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:38:0f:a0:ea:6f:8e:17:d1:0e:d0:36:96:d5:a3:6b:45:74: e1:c6:2b:91:91:36:c3:de:9d:54:24:7c:8f:b7:16:9e:57:06: 4f:b4:53:de:d8:a3:fe:7b:4f:41:91:89:58:02:64:1d:53:52: 07:c1:75:88:94:cd:f9:e1:18:51:bf:02:44:aa:98:00:de:e6: 2d:dd:5e:c2:08:43:41:cc:44:f0:91:74:c4:23:68:d5:1e:27: 69:d2:6e:47:e9:70:15:a5:66:04:68:e9:45:f9:1a:89:d4:49: df:cc:20:73:71:37:ca:2f:be:ab:65:ed:f1:61:3e:73:bc:49: 3f:24:a2:a8:3d:1a:df:5e:4a:3c:00:e3:d3:7c:18:b1:ca:5a: ee:f3:fb:fc:01:e5:18:ff:fc:33:97:8a:13:9a:f4:7b:b1:22: 5e:4d:1a:61:a4:e2:41:46:d2:74:23:b7:ff:2d:dc:c6:b6:fb: 56:49:b2:a7:09:0c:20:5c:40:12:fb:8c:00:86:29:dc:e1:a5: b3:c5:87:63:60:cd:67:66:38:46:cd:48:fb:3e:4d:75:5a:c6: ff:37:c8:61:07:eb:94:f6:eb:c5:f1:ac:8e:86:e8:ba:24:45: b1:01:23:68:6c:8b:6d:d7:73:1b:7f:d9:53:a7:6f:48:e5:ad: 91:16:ea:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUxMTAzMDIzNjE5WhcNMjUxMTEwMDIzNjE5WjAYMRYwFAYD VQQDEw02OTA4MTUyNC1mODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNw0HMa0AR7xPvX61xVRT7wR+qpmVRVLAVHnaNedNB73xoCDMoH0OOiy0SJq pJcYIkJuBkFQbl1zIYE6ny3T2l9IxcsjFN4TA5gKulupEcA6HBA0LT8ejNSnEL8l Rvmu2HuWueX3JOiaj/xTqKmqyH008BHYXti01Sdm3AS+4vYnygCKirNSs8XjVcE5 lndFBGcNGDik3+Rt1ujHjALgGFVL9nTqCtzj1S1y7AcHqUSgMFoYWFG41J7ZQC87 S04oTOmRMxk1OQWS4d5PzZzLXFvST0PwOU+b2s9J0xbp6ZDSJyBAjPpGiYkMpt14 ogFic2LKuv6r961iUJENYov61wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoukg4l tPGYXFaaLJzus+KVz2oLMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOA+g6m+OF9EO0DaW1aNrRXThxiuRkTbD3p1UJHyPtxaeVwZPtFPe 2KP+e09BkYlYAmQdU1IHwXWIlM354RhRvwJEqpgA3uYt3V7CCENBzETwkXTEI2jV Hidp0m5H6XAVpWYEaOlF+RqJ1EnfzCBzcTfKL76rZe3xYT5zvEk/JKKoPRrfXko8 AOPTfBixylru8/v8AeUY//wzl4oTmvR7sSJeTRphpOJBRtJ0I7f/LdzGtvtWSbKn CQwgXEAS+4wAhinc4aWzxYdjYM1nZjhGzUj7Pk11Wsb/N8hhB+uU9uvF8ayOhui6 JEWxASNobItt13Mbf9lTp29I5a2RFuqM -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:41 2025 by rpki-client