$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: aewAQZXhaf1u46z8GuSjCwwpVjqgNdx4f+g3OyQrFZk= Subject key identifier: 16:AB:22:31:B8:0A:FE:84:B3:5D:AD:AF:0F:EF:9F:7D:AD:D1:A0:AB Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 0103 Signing time: Tue 19 Aug 2025 05:28:06 +0000 Manifest this update: Tue 19 Aug 2025 05:28:05 +0000 Manifest next update: Tue 26 Aug 2025 05:28:05 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: nmpaQkrV9Vr0PWHqiIkj0un2VGW15Hp2El35R6b5uuI=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Aug 19 05:28:05 2025 GMT Not After : Aug 26 05:28:05 2025 GMT Subject: CN=68a40b66-bab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:4c:16:8c:cb:ea:08:f1:d7:ad:e4:48:05: 64:1f:84:7b:d0:a6:1f:e4:e3:19:2e:64:fe:a8:af: 99:c7:a6:d6:49:4b:04:cf:bf:15:87:28:a9:af:ae: 8a:c2:cf:ef:50:7c:8d:b5:d5:03:47:0f:86:97:8b: cc:ba:d0:6b:e4:12:3e:d2:ac:17:c6:7e:d4:1a:b7: d9:60:65:e8:0f:7c:05:79:55:4a:0b:90:7d:e7:49: 3b:ee:e9:4c:b4:73:b0:20:11:e2:f7:e5:ab:f6:d0: 70:1d:6e:5d:77:d3:bb:d1:58:ec:2a:9f:1c:1f:6e: c5:92:b0:5e:47:30:72:0a:b5:68:87:44:d6:7b:6d: 3c:9f:2f:7d:24:ca:d3:cd:ff:f1:0b:74:04:0b:f6: e5:71:4a:ce:c8:ad:53:e5:27:6e:ad:2f:56:90:93: ef:c5:c6:ef:91:bc:dc:6b:cc:14:9b:ac:62:75:31: 82:2a:c4:8c:2a:ab:3f:7d:c2:4c:58:13:6b:b7:c1: 1b:4f:ff:04:46:32:24:83:3f:ce:d0:9d:b9:81:4f: d8:a8:a0:01:a7:94:c6:85:40:32:cc:50:37:d6:b3: 2c:cb:67:fe:e3:5c:67:99:69:ea:42:8e:ad:98:b1: a7:30:92:9b:35:31:c3:b9:31:95:84:03:cb:a5:2e: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:22:31:B8:0A:FE:84:B3:5D:AD:AF:0F:EF:9F:7D:AD:D1:A0:AB X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:44:7d:57:08:c2:44:eb:5b:c9:28:87:3c:bc:07:1d:bd:c4: 39:b4:9b:67:6b:de:36:d8:48:b6:78:7f:12:28:ab:10:f3:a5: bd:0c:15:e2:09:c0:61:67:5c:aa:8c:15:4e:d9:69:30:2f:cf: 86:82:41:8a:17:96:bc:97:e8:68:e0:ef:c2:24:b9:aa:42:e0: e5:1f:91:62:09:7d:82:6d:18:f4:52:c9:51:55:e9:3a:a2:3a: 68:d9:c5:7d:7f:c6:77:79:08:e6:74:4b:3c:14:11:0a:44:05: d3:92:d9:7e:a4:c7:bd:2b:b4:ef:86:c7:2f:ac:6e:82:01:c1: c8:e5:0a:ab:63:0e:1a:0e:90:a3:a2:1e:65:cd:29:1d:f9:60: aa:0c:bb:39:4a:22:d0:a7:31:84:4e:5a:40:1f:be:ac:e8:07: ba:d6:e4:8d:6a:0e:04:33:ad:eb:21:fb:ef:7b:ad:d9:3d:c7: ed:47:3b:32:52:6e:32:f8:14:cc:26:95:03:56:5c:f3:5e:3d: bd:24:0d:52:0e:1d:ef:82:7d:cc:05:fb:bf:4e:73:8b:07:c5: 2f:81:87:52:c9:a9:df:bc:b8:1d:b6:f4:bd:81:dd:1c:0e:f7: d5:07:b6:49:66:78:31:ba:9c:b9:f3:d2:7f:1f:3b:db:ea:15: 42:09:b1:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUwODE5MDUyODA1WhcNMjUwODI2MDUyODA1WjAYMRYwFAYD VQQDEw02OGE0MGI2Ni1iYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT5MFozL6gjx163kSAVkH4R70KYf5OMZLmT+qK+Zx6bWSUsEz78Vhyipr66K ws/vUHyNtdUDRw+Gl4vMutBr5BI+0qwXxn7UGrfZYGXoD3wFeVVKC5B950k77ulM tHOwIBHi9+Wr9tBwHW5dd9O70VjsKp8cH27FkrBeRzByCrVoh0TWe208ny99JMrT zf/xC3QEC/blcUrOyK1T5SdurS9WkJPvxcbvkbzca8wUm6xidTGCKsSMKqs/fcJM WBNrt8EbT/8ERjIkgz/O0J25gU/YqKABp5TGhUAyzFA31rMsy2f+41xnmWnqQo6t mLGnMJKbNTHDuTGVhAPLpS7VawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBarIjG4 Cv6Es12trw/vn32t0aCrMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBRH1XCMJE61vJKIc8vAcdvcQ5tJtna9422Ei2eH8SKKsQ86W9DBXi CcBhZ1yqjBVO2WkwL8+GgkGKF5a8l+ho4O/CJLmqQuDlH5FiCX2CbRj0UslRVek6 ojpo2cV9f8Z3eQjmdEs8FBEKRAXTktl+pMe9K7TvhscvrG6CAcHI5QqrYw4aDpCj oh5lzSkd+WCqDLs5SiLQpzGETlpAH76s6Ae61uSNag4EM63rIfvve63ZPcftRzsy Um4y+BTMJpUDVlzzXj29JA1SDh3vgn3MBfu/TnOLB8UvgYdSyanfvLgdtvS9gd0c DvfVB7ZJZngxupy589J/Hzvb6hVCCbHo -----END CERTIFICATE-----Generated at Wed Aug 20 19:40:19 2025 by rpki-client