$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: dCriXRAYW+so1wRIZH7cjKhvUqt+2EQaFmRGOfk5aoA= Subject key identifier: 15:C9:02:41:E7:B8:21:29:D6:E6:D5:88:CA:79:06:07:8A:F5:5A:FE Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 1007 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0FEF Signing time: Mon 20 Oct 2025 17:58:02 +0000 Manifest this update: Mon 20 Oct 2025 17:58:01 +0000 Manifest next update: Mon 27 Oct 2025 17:58:01 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: Wru5vB3JHK4fiZ06kmhSJJDW9TWg+T1XynApnoEToEw=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4103 (0x1007) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Oct 20 17:58:01 2025 GMT Not After : Oct 27 17:58:01 2025 GMT Subject: CN=68f67829-824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8d:62:15:40:13:31:71:3e:41:ac:9e:b1:93: 2e:a4:61:f4:55:2a:8f:60:53:41:96:18:17:5f:0e: 36:c1:0c:ae:3e:bc:3f:ad:cc:ad:a8:59:4c:09:ed: a6:1f:f8:db:0d:cb:bf:05:fb:32:d1:f3:f8:51:ed: c8:b2:f6:cc:3f:16:d2:62:98:44:4c:c0:69:54:2c: 87:0c:a7:2b:41:3a:91:70:43:58:3d:ea:1e:12:b0: c8:a8:da:0e:48:d7:cb:f3:17:d5:77:e6:46:0a:69: ca:e9:66:86:e8:d9:cd:49:b8:67:c0:be:d1:8a:52: e9:14:29:42:4d:0b:38:48:91:74:06:16:9b:df:f2: ed:7b:1a:69:a4:ff:3d:b4:12:00:41:4f:cc:91:f5: d2:b9:57:10:f2:b2:2a:f1:2d:c5:bd:8d:76:62:73: e0:ea:e5:59:2f:cc:6d:9c:ad:f3:06:ad:62:23:eb: 2a:ba:b7:42:bb:36:6b:f2:d7:f8:a5:95:5f:27:f3: e6:27:b8:ac:88:73:fb:42:96:76:29:26:36:fb:8b: 84:e4:c6:54:95:50:fe:9d:a4:c2:c5:aa:8d:94:74: 74:7a:b9:52:0f:90:eb:03:11:2c:eb:fa:7e:ab:9f: 96:63:93:c8:70:5b:7d:fa:5c:13:79:30:67:84:19: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:02:41:E7:B8:21:29:D6:E6:D5:88:CA:79:06:07:8A:F5:5A:FE X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0e:79:0b:11:43:9b:70:ad:dd:6a:fe:eb:bb:e5:da:5f:8a: 64:71:54:b3:e8:49:11:0b:c5:b5:3c:6d:a6:dc:bb:3e:81:27: a1:3f:7c:b0:5e:aa:e2:71:1b:ad:c1:61:5a:3b:b2:73:ac:f9: 58:4a:fa:c3:a6:b3:f5:98:11:08:ca:6d:3e:87:28:80:59:50: d6:ed:3d:33:ae:7f:64:86:19:85:df:cb:d5:4a:5e:ee:ce:5f: f5:d0:d9:93:cc:1a:0c:db:c8:c1:5b:04:0a:77:a6:4e:e3:0a: 80:4a:b9:d3:7a:04:74:c0:f0:52:9d:68:54:53:2a:01:34:97: e3:f7:8f:bc:2a:96:ef:d4:f9:23:d8:9d:cf:3a:bb:de:ec:55: 83:27:66:43:54:01:e4:01:4b:06:63:1e:cc:6a:22:a1:78:00: 58:90:10:fc:21:cd:cf:15:8e:b1:e4:75:99:08:e8:62:72:db: 0b:84:c2:e8:46:8c:d3:91:e5:8f:d3:13:c5:5d:2c:c5:eb:9c: a7:61:6d:9c:39:b9:7a:32:a1:0b:5c:5e:e9:9f:5c:07:87:7f: 54:18:a7:dd:10:dc:94:5a:cd:21:5c:63:74:8c:9a:6b:2e:87: a1:88:32:05:3d:8c:50:63:55:a6:4e:35:19:b3:71:4d:e4:56: 1c:2c:1a:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUxMDIwMTc1ODAxWhcNMjUxMDI3MTc1ODAxWjAYMRYwFAYD VQQDEw02OGY2NzgyOS04MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I1iFUATMXE+QayesZMupGH0VSqPYFNBlhgXXw42wQyuPrw/rcytqFlMCe2m H/jbDcu/Bfsy0fP4Ue3IsvbMPxbSYphETMBpVCyHDKcrQTqRcENYPeoeErDIqNoO SNfL8xfVd+ZGCmnK6WaG6NnNSbhnwL7RilLpFClCTQs4SJF0Bhab3/LtexpppP89 tBIAQU/MkfXSuVcQ8rIq8S3FvY12YnPg6uVZL8xtnK3zBq1iI+squrdCuzZr8tf4 pZVfJ/PmJ7isiHP7QpZ2KSY2+4uE5MZUlVD+naTCxaqNlHR0erlSD5DrAxEs6/p+ q5+WY5PIcFt9+lwTeTBnhBmPNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXJAkHn uCEp1ubViMp5BgeK9Vr+MB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKDnkLEUObcK3dav7ru+XaX4pkcVSz6EkRC8W1PG2m3Ls+gSehP3yw XqricRutwWFaO7JzrPlYSvrDprP1mBEIym0+hyiAWVDW7T0zrn9khhmF38vVSl7u zl/10NmTzBoM28jBWwQKd6ZO4wqASrnTegR0wPBSnWhUUyoBNJfj94+8Kpbv1Pkj 2J3POrve7FWDJ2ZDVAHkAUsGYx7MaiKheABYkBD8Ic3PFY6x5HWZCOhictsLhMLo RozTkeWP0xPFXSzF65ynYW2cObl6MqELXF7pn1wHh39UGKfdENyUWs0hXGN0jJpr LoehiDIFPYxQY1WmTjUZs3FN5FYcLBp1 -----END CERTIFICATE-----Generated at Tue Oct 21 13:56:57 2025 by rpki-client