$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: TXieyTEb/UG4uFtzFewTsXZYUqAdGqZSTTkgskjBtB0= Subject key identifier: EF:D5:48:36:2A:B0:72:CA:CB:B2:CC:AB:FC:59:2A:A0:97:69:22:49 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 01C7 Signing time: Sat 23 Aug 2025 03:03:51 +0000 Manifest this update: Sat 23 Aug 2025 03:03:50 +0000 Manifest next update: Sat 30 Aug 2025 03:03:50 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: dVr5r9+KQCO5ZtMx4XKaBZ3Q+FZPC8JlcON5czLalCU=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Aug 23 03:03:50 2025 GMT Not After : Aug 30 03:03:50 2025 GMT Subject: CN=68a92f96-2f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:e8:53:a5:38:a7:fe:39:99:31:1a:d4:83: 73:bc:11:d7:d0:04:13:2c:79:05:ed:cd:aa:3d:14: ea:b7:39:ad:61:70:ca:7e:3c:42:d5:27:8a:8c:6b: 5d:74:d6:93:e2:71:8f:8e:82:29:ed:25:59:69:8e: 6e:60:cf:2d:a0:cc:f1:7e:a6:12:1b:c4:eb:1f:c0: 85:ce:1b:8d:37:55:dd:34:09:80:50:3a:f0:dd:c4: 00:5c:cf:15:80:f7:9a:88:af:ce:4c:c8:bb:b2:e4: 7b:99:37:41:ae:38:a5:4b:58:d2:61:f5:37:7a:92: 1a:b5:56:3b:85:72:e8:75:66:1f:01:3a:f8:66:8f: d5:13:e2:55:da:03:8b:15:ff:18:6c:40:5e:58:68: 1a:4a:9a:3b:a1:c9:4e:f8:e5:fd:e5:58:5d:e6:85: df:f9:be:64:5f:e4:e6:16:9a:54:ea:91:00:30:a6: 53:20:3e:c8:19:a4:f9:24:09:01:94:49:a2:3c:a4: 91:e6:20:1c:91:d1:d2:c1:aa:67:9e:b0:d8:80:b1: d4:00:4c:39:5e:9a:e8:dd:11:6d:d6:f0:9b:0e:de: aa:05:aa:89:4d:d6:1f:e2:ea:12:d8:9e:86:d0:bc: 9f:3c:2d:23:8b:d6:f8:6e:f6:44:e8:b3:fc:e8:e2: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D5:48:36:2A:B0:72:CA:CB:B2:CC:AB:FC:59:2A:A0:97:69:22:49 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c9:85:5d:10:ec:5d:84:7b:1c:21:09:d9:60:76:23:19:cd: 8a:96:4c:e4:7f:9b:1f:1e:a0:70:2d:9f:5f:fa:78:a4:e8:44: a4:6c:ec:cf:f2:5f:e4:ef:7e:ef:d0:22:e4:7e:25:bd:f7:e3: 45:ac:4a:e4:10:ad:8a:ac:8b:20:14:c1:5f:cf:8c:74:25:b3: 0b:6a:08:a7:f3:ce:d6:42:7e:b7:43:c2:66:f6:9f:c9:09:37: 64:db:e7:c8:81:69:f4:19:d1:94:1b:45:66:f7:07:45:2a:56: 0c:bd:fa:60:ee:fe:06:06:52:1b:58:57:2b:6b:82:c7:fa:3b: 1f:d8:f8:3d:3f:46:3d:bf:f9:e4:ac:29:f0:66:48:15:b6:0d: f6:ba:5f:b3:de:e9:23:3b:5c:52:5e:ef:3b:d9:92:62:06:65: de:31:92:2e:77:df:8e:5d:94:a9:d7:55:b4:93:58:b5:f0:c5: 08:c2:19:ed:6b:de:b1:8c:d7:02:9a:bf:2e:82:32:4e:af:a8: ad:57:ef:2d:7c:1b:66:9b:79:c7:c9:bc:f2:1f:76:ba:d4:85: 9a:38:87:fb:54:ef:30:da:6d:eb:b0:5d:cd:7e:87:96:3d:89: a9:a5:d2:7f:a0:8a:e2:b7:b1:03:96:2b:07:5f:9d:3f:7a:2a: c1:02:d0:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwODIzMDMwMzUwWhcNMjUwODMwMDMwMzUwWjAYMRYwFAYD VQQDEw02OGE5MmY5Ni0yZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cHoU6U4p/45mTEa1INzvBHX0AQTLHkF7c2qPRTqtzmtYXDKfjxC1SeKjGtd dNaT4nGPjoIp7SVZaY5uYM8toMzxfqYSG8TrH8CFzhuNN1XdNAmAUDrw3cQAXM8V gPeaiK/OTMi7suR7mTdBrjilS1jSYfU3epIatVY7hXLodWYfATr4Zo/VE+JV2gOL Ff8YbEBeWGgaSpo7oclO+OX95Vhd5oXf+b5kX+TmFppU6pEAMKZTID7IGaT5JAkB lEmiPKSR5iAckdHSwapnnrDYgLHUAEw5Xpro3RFt1vCbDt6qBaqJTdYf4uoS2J6G 0LyfPC0ji9b4bvZE6LP86OLEeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/VSDYq sHLKy7LMq/xZKqCXaSJJMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSyYVdEOxdhHscIQnZYHYjGc2Klkzkf5sfHqBwLZ9f+nik6ESkbOzP 8l/k737v0CLkfiW99+NFrErkEK2KrIsgFMFfz4x0JbMLagin887WQn63Q8Jm9p/J CTdk2+fIgWn0GdGUG0Vm9wdFKlYMvfpg7v4GBlIbWFcra4LH+jsf2Pg9P0Y9v/nk rCnwZkgVtg32ul+z3ukjO1xSXu872ZJiBmXeMZIud9+OXZSp11W0k1i18MUIwhnt a96xjNcCmr8ugjJOr6itV+8tfBtmm3nHybzyH3a61IWaOIf7VO8w2m3rsF3NfoeW PYmppdJ/oIrit7EDlisHX50/eirBAtCn -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:14 2025 by rpki-client