$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: etCILOT10aGRw1+i9ctKYvGI1wwjyzQFxmZwHhf1mf0= Subject key identifier: 32:87:DD:DB:29:58:47:57:E0:5F:82:EC:07:72:73:3F:69:A6:BA:4B Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 1940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 1935 Signing time: Sun 24 Aug 2025 16:24:23 +0000 Manifest this update: Sun 24 Aug 2025 16:24:22 +0000 Manifest next update: Sun 31 Aug 2025 16:24:22 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: HbgtHuHUoYV1uOb2wM4lx8pyesDPNcQmJ/BOCWQpYxg=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: E6UpldRotsggXgn0nl1/UsRHEfM+J1lVtu1dNLHwKlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: Aug 24 16:24:22 2025 GMT Not After : Aug 31 16:24:22 2025 GMT Subject: CN=68ab3cb6-5903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:08:2b:5a:28:3a:27:12:e9:a6:57:da:2e: 4e:e3:80:b5:4a:2a:76:7e:62:6d:27:b0:93:1d:8b: f1:55:5a:fc:3e:ee:92:70:bc:09:18:0e:ee:79:f3: fa:78:fa:a6:4e:34:cc:72:2f:98:e7:67:66:8d:dc: 5b:74:1e:83:4e:bb:35:fd:90:f5:53:49:a5:8c:16: b4:27:e7:e8:14:65:e9:44:8f:7d:8b:62:bb:ba:39: 0a:d0:ce:49:94:f4:ee:7e:28:1a:b8:91:bd:51:fd: 44:bd:e2:dc:7e:28:65:a4:7b:3d:1a:fd:5a:c4:44: 4e:7d:8b:bd:94:2d:16:52:bd:60:ec:14:dc:75:a5: dd:31:36:5a:24:18:f7:43:6f:85:f2:a5:e2:e9:ae: fd:04:6a:26:2c:8c:71:33:41:e4:7d:24:18:90:28: 8f:ac:5b:2a:da:44:46:9d:f8:93:59:20:2b:79:27: 86:6a:4c:da:c9:3d:3d:a4:66:a2:fa:e4:ad:44:a5: 7b:bd:1c:02:38:d8:b1:5b:07:90:f1:93:6c:4f:c6: e0:4c:98:de:c3:15:f3:da:ba:71:7e:a1:2b:4d:ad: 8d:7f:c6:3b:04:71:b9:ac:9f:86:d7:4a:3b:cd:b5: c0:d0:e5:c2:e8:99:fd:04:f0:58:bf:18:da:0f:52: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:87:DD:DB:29:58:47:57:E0:5F:82:EC:07:72:73:3F:69:A6:BA:4B X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:87:b3:a8:ce:69:7c:fc:25:9c:45:99:69:4d:da:2a:ed:e4: 95:f4:39:44:05:38:44:7b:20:8d:7b:f6:6a:27:a4:d2:b1:c1: e8:c0:29:b1:76:be:75:fd:8e:61:62:31:5c:79:f5:4a:70:e8: 0d:b6:98:eb:ba:03:e1:5d:99:25:c4:72:86:03:c4:72:21:55: c9:d0:e4:97:6b:f2:e3:e3:9b:8d:8b:2f:27:38:2a:ae:3c:32: 13:a1:6b:19:5e:6b:c0:01:f2:a0:42:f8:e3:f1:f7:23:81:07: e3:70:6e:2d:17:a9:20:2b:ab:39:b6:51:b9:f9:d0:71:79:0b: f5:61:19:fa:1b:42:58:c8:95:d6:0d:2b:6d:96:02:3f:f9:f9: 44:4d:0b:6c:96:3c:5c:a0:68:7d:2c:9d:d0:33:59:eb:d9:45: a1:a2:c3:3d:da:ce:38:4d:fa:14:0e:20:33:b3:0c:75:f2:ff: 20:52:eb:62:ac:5f:06:a1:88:1d:33:4f:84:a4:97:71:37:e7: 05:90:92:a7:cb:a7:78:51:dd:62:a7:94:ca:62:78:f6:3e:71: ab:82:01:65:95:18:14:9c:24:a1:0b:bb:d3:35:24:06:16:04: f9:94:5f:aa:f1:61:22:4d:e9:22:38:8a:cf:40:98:80:e1:80: 97:91:0c:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjUwODI0MTYyNDIyWhcNMjUwODMxMTYyNDIyWjAYMRYwFAYD VQQDEw02OGFiM2NiNi01OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDAIK1ooOicS6aZX2i5O44C1Sip2fmJtJ7CTHYvxVVr8Pu6ScLwJGA7uefP6 ePqmTjTMci+Y52dmjdxbdB6DTrs1/ZD1U0mljBa0J+foFGXpRI99i2K7ujkK0M5J lPTufigauJG9Uf1EveLcfihlpHs9Gv1axEROfYu9lC0WUr1g7BTcdaXdMTZaJBj3 Q2+F8qXi6a79BGomLIxxM0HkfSQYkCiPrFsq2kRGnfiTWSAreSeGakzayT09pGai +uStRKV7vRwCONixWweQ8ZNsT8bgTJjewxXz2rpxfqErTa2Nf8Y7BHG5rJ+G10o7 zbXA0OXC6Jn9BPBYvxjaD1IOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKH3dsp WEdX4F+C7Adycz9pprpLMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBph7Oozml8/CWcRZlpTdoq7eSV9DlEBThEeyCNe/ZqJ6TSscHowCmx dr51/Y5hYjFcefVKcOgNtpjrugPhXZklxHKGA8RyIVXJ0OSXa/Lj45uNiy8nOCqu PDIToWsZXmvAAfKgQvjj8fcjgQfjcG4tF6kgK6s5tlG5+dBxeQv1YRn6G0JYyJXW DSttlgI/+flETQtsljxcoGh9LJ3QM1nr2UWhosM92s44TfoUDiAzswx18v8gUuti rF8GoYgdM0+EpJdxN+cFkJKny6d4Ud1ip5TKYnj2PnGrggFllRgUnCShC7vTNSQG FgT5lF+q8WEiTekiOIrPQJiA4YCXkQwy -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:49 2025 by rpki-client