$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: L2ejHvN8uFOQg7WlmS9p/5Joyh37fa3NIzo05Ue/eUs= Subject key identifier: 2E:B4:2D:8E:0C:03:CE:77:2D:3C:44:8C:2C:2C:59:CD:D6:F9:47:E0 Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 0FE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0FCF Signing time: Mon 18 Aug 2025 17:44:59 +0000 Manifest this update: Mon 18 Aug 2025 17:44:59 +0000 Manifest next update: Mon 25 Aug 2025 17:44:59 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: VjL3c/6jd8vQcnZ9umFI7KMHVLuToIok/FvCKO+BR3I=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Aug 18 17:44:59 2025 GMT Not After : Aug 25 17:44:59 2025 GMT Subject: CN=68a3669b-6bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:a6:40:94:37:f0:84:d7:31:48:c4:83:2e: 0d:be:24:9a:1f:66:a4:a7:f6:24:cd:eb:2c:07:67: 1b:7b:81:7a:97:9e:f1:22:1e:37:e7:2b:4e:89:97: df:97:38:7a:4b:63:22:d9:4e:7a:62:a7:a8:2b:8d: 58:fa:29:a3:e6:f8:71:d0:9d:8e:4e:4f:70:b9:3c: c5:5a:e5:67:fd:fd:18:c1:ca:38:e2:e1:70:b4:b9: f4:b2:9f:bd:36:e4:b2:6c:93:89:35:4e:21:cf:a5: 9c:c1:0d:0a:2b:fb:f3:b8:0e:2a:0a:3e:59:64:e7: a9:25:ac:62:6c:41:76:e0:b3:f8:38:42:23:05:8d: 17:10:25:36:8a:f3:b2:02:b0:23:ce:12:01:6f:ed: ea:0e:2d:67:67:95:63:54:07:76:44:7c:75:ec:e2: 25:fe:45:29:de:94:b3:49:0a:64:0f:5a:8a:fa:ae: 9c:dd:c7:ca:5a:c8:87:9c:3c:23:53:bc:75:7d:ef: be:28:e7:a8:3a:5f:a8:d1:f9:40:b0:83:c1:96:5a: 1e:59:d6:46:16:69:c8:27:63:80:53:5a:72:32:25: dd:25:4e:00:ec:cc:9c:21:ff:f5:69:d7:81:6a:73: f1:71:72:19:e6:7a:be:9c:8c:e3:ae:a1:d9:7a:e6: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:2D:8E:0C:03:CE:77:2D:3C:44:8C:2C:2C:59:CD:D6:F9:47:E0 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:56:f7:6c:83:3b:33:2a:dd:80:bf:d8:b1:2f:0d:be:47:65: 38:55:5f:4d:22:34:a3:78:32:9e:7a:72:9a:97:f9:58:0a:30: e5:b7:7e:cc:17:fc:21:3f:75:ae:7a:3f:25:fd:69:76:15:1b: 03:0d:4f:a9:06:e8:80:9d:dd:09:3b:68:66:51:3f:5c:16:fa: 33:ed:85:a9:d3:6f:d9:42:45:f1:01:14:e7:5d:74:c8:45:d7: 31:d3:2a:e0:bb:fb:9c:28:94:7a:32:9d:cf:b8:1b:c5:e5:ca: 6d:40:a3:96:d3:3e:d0:66:f9:3a:e0:a7:16:72:16:53:a3:93: fa:dd:05:15:e6:bb:ff:a8:1b:4a:54:bb:4c:36:e1:b9:00:99: 37:8d:6e:e5:05:86:7f:53:00:14:c4:c2:0e:e3:e5:b1:81:dd: d7:d2:c2:d5:92:3c:66:f4:6e:71:0c:f9:09:da:0d:c4:fa:3b: 32:1f:f8:55:a1:b7:0e:af:6e:04:49:65:a7:fb:4f:9a:8c:b7: db:64:a9:d3:4e:89:5e:9d:9c:83:02:2b:ff:9a:ee:d4:29:64: f7:7f:2c:36:05:43:b4:6d:63:81:ad:f7:36:67:d2:cf:86:b7: c4:5d:1c:fc:b3:7e:05:3c:fc:4f:89:7f:1e:69:76:53:6b:dd: ae:1b:34:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUwODE4MTc0NDU5WhcNMjUwODI1MTc0NDU5WjAYMRYwFAYD VQQDEw02OGEzNjY5Yi02YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynemQJQ38ITXMUjEgy4NviSaH2akp/YkzessB2cbe4F6l57xIh435ytOiZff lzh6S2Mi2U56YqeoK41Y+imj5vhx0J2OTk9wuTzFWuVn/f0Ywco44uFwtLn0sp+9 NuSybJOJNU4hz6WcwQ0KK/vzuA4qCj5ZZOepJaxibEF24LP4OEIjBY0XECU2ivOy ArAjzhIBb+3qDi1nZ5VjVAd2RHx17OIl/kUp3pSzSQpkD1qK+q6c3cfKWsiHnDwj U7x1fe++KOeoOl+o0flAsIPBlloeWdZGFmnIJ2OAU1pyMiXdJU4A7MycIf/1adeB anPxcXIZ5nq+nIzjrqHZeuauDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC60LY4M A853LTxEjCwsWc3W+UfgMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoVvdsgzszKt2Av9ixLw2+R2U4VV9NIjSjeDKeenKal/lYCjDlt37M F/whP3Wuej8l/Wl2FRsDDU+pBuiAnd0JO2hmUT9cFvoz7YWp02/ZQkXxARTnXXTI Rdcx0yrgu/ucKJR6Mp3PuBvF5cptQKOW0z7QZvk64KcWchZTo5P63QUV5rv/qBtK VLtMNuG5AJk3jW7lBYZ/UwAUxMIO4+Wxgd3X0sLVkjxm9G5xDPkJ2g3E+jsyH/hV obcOr24ESWWn+0+ajLfbZKnTTolenZyDAiv/mu7UKWT3fyw2BUO0bWOBrfc2Z9LP hrfEXRz8s34FPPxPiX8eaXZTa92uGzTh -----END CERTIFICATE-----Generated at Wed Aug 20 16:24:25 2025 by rpki-client