$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: 1LANGLcBS6oG/qK0eQqzIu3kR0CRF9c+GAkZvK0RjgY= Subject key identifier: CE:AA:04:CE:D0:A6:24:5B:38:3E:4A:9C:37:80:A3:1D:1C:72:87:EF Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 01EE Signing time: Fri 19 Sep 2025 03:17:35 +0000 Manifest this update: Fri 19 Sep 2025 03:17:35 +0000 Manifest next update: Fri 26 Sep 2025 03:17:35 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: fDCMRxYx20qAqF9xPHrfTztxNxfQSTlydT8DsN8ziZU=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: duTYZvXv6lu6t8rEgm3ckGUyqXhrkljrh8aPt8kb7W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Sep 19 03:17:35 2025 GMT Not After : Sep 26 03:17:35 2025 GMT Subject: CN=68cccb4f-9cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:30:98:78:8f:e7:98:27:16:78:eb:30:6f:9c: 75:95:4b:a6:6f:47:51:59:fb:22:bf:68:18:cf:e0: 16:74:df:e0:7f:22:e7:ce:e2:6c:13:6d:32:4d:ad: 59:44:e3:7f:6c:14:94:59:ac:91:46:b3:5e:a5:be: 09:90:d7:7b:12:8f:f1:fe:aa:a3:2d:d4:2e:1b:23: 97:98:e4:7e:ae:70:2a:ad:a6:8f:6e:1c:6b:35:e8: ee:cb:82:87:c7:76:89:d9:e2:05:dd:ba:53:2e:ad: 01:c2:b5:79:ba:b4:b1:d6:c1:f4:88:c4:84:b8:62: ab:e5:31:fd:3e:43:05:a3:79:ba:4c:c1:35:de:3d: 3a:70:2c:0d:0a:ff:ed:bb:1f:c5:96:19:b1:93:fa: 70:66:a0:43:08:07:83:24:5f:83:10:33:a3:6c:86: fa:7f:2f:d6:63:a7:c3:20:2f:a6:1a:0f:bc:c0:e5: 33:bc:5b:38:92:c5:21:eb:0b:48:40:29:1c:29:aa: f4:66:7a:85:34:c4:7f:e0:e8:21:b1:b4:cd:0b:88: 8c:36:72:bc:91:22:41:d5:96:7b:55:0c:67:19:c1: 55:54:74:65:74:ad:c1:48:aa:89:62:40:2c:8b:24: 67:4f:fc:6b:f6:5e:37:95:51:e0:95:11:ab:8e:1e: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:04:CE:D0:A6:24:5B:38:3E:4A:9C:37:80:A3:1D:1C:72:87:EF X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ea:8d:a8:7a:bc:70:97:04:16:9f:44:6e:f5:7b:e8:9e:b0: 0c:3a:3a:16:10:7e:6a:66:e0:99:98:83:c9:3d:c4:b2:be:a9: 9c:8a:af:68:62:a4:9d:71:57:fb:74:32:75:3d:84:1b:c9:ea: 65:7f:62:37:37:bb:61:04:30:8f:a5:b0:5d:4a:50:43:65:16: d0:c4:68:10:b4:1a:61:18:b6:1e:46:36:f6:da:03:42:a8:86: c1:59:05:e3:f8:93:f6:a4:82:d2:c3:5d:ef:b9:ea:96:35:21: f0:d8:19:2d:30:41:a1:2f:d2:d7:4e:a1:26:57:a5:45:08:dd: be:5a:dc:a5:2d:61:4a:cf:c2:50:f2:ef:56:4c:be:7b:1a:44: e3:d8:76:21:e9:ff:18:b8:11:5a:5b:6e:9f:72:dd:b1:83:ff: 31:95:8b:68:6c:48:0a:d8:24:57:e6:07:ea:4b:a5:be:b5:67: 6e:a4:4e:6d:50:47:06:49:56:ab:ff:3e:17:05:8f:11:ac:76: 00:2f:0b:37:70:c1:17:10:4a:38:ac:1e:69:b9:41:39:27:7a: 64:1f:a4:5e:98:8d:b2:31:a6:c6:d6:e1:1d:96:b2:be:42:07: a3:66:ff:46:f2:f4:c1:ce:c1:ce:93:f7:d2:6a:f8:b6:5f:bc: f3:cf:6b:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUwOTE5MDMxNzM1WhcNMjUwOTI2MDMxNzM1WjAYMRYwFAYD VQQDEw02OGNjY2I0Zi05Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TCYeI/nmCcWeOswb5x1lUumb0dRWfsiv2gYz+AWdN/gfyLnzuJsE20yTa1Z RON/bBSUWayRRrNepb4JkNd7Eo/x/qqjLdQuGyOXmOR+rnAqraaPbhxrNejuy4KH x3aJ2eIF3bpTLq0BwrV5urSx1sH0iMSEuGKr5TH9PkMFo3m6TME13j06cCwNCv/t ux/Flhmxk/pwZqBDCAeDJF+DEDOjbIb6fy/WY6fDIC+mGg+8wOUzvFs4ksUh6wtI QCkcKar0ZnqFNMR/4OghsbTNC4iMNnK8kSJB1ZZ7VQxnGcFVVHRldK3BSKqJYkAs iyRnT/xr9l43lVHglRGrjh6BTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6qBM7Q piRbOD5KnDeAox0ccofvMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs6o2oerxwlwQWn0Ru9XvonrAMOjoWEH5qZuCZmIPJPcSyvqmciq9o YqSdcVf7dDJ1PYQbyeplf2I3N7thBDCPpbBdSlBDZRbQxGgQtBphGLYeRjb22gNC qIbBWQXj+JP2pILSw13vueqWNSHw2BktMEGhL9LXTqEmV6VFCN2+WtylLWFKz8JQ 8u9WTL57GkTj2HYh6f8YuBFaW26fct2xg/8xlYtobEgK2CRX5gfqS6W+tWdupE5t UEcGSVar/z4XBY8RrHYALws3cMEXEEo4rB5puUE5J3pkH6RemI2yMabG1uEdlrK+ QgejZv9G8vTBzsHOk/fSavi2X7zzz2uf -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:58 2025 by rpki-client