$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: mszxouGST/K1G8gAQNix5m8+bI7lwTgGqp+8LJy2peY= Subject key identifier: 9F:01:2F:25:95:0F:16:88:EC:C1:11:81:04:EE:EA:FD:46:CD:17:D4 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 123F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 1237 Signing time: Sun 24 Aug 2025 17:05:56 +0000 Manifest this update: Sun 24 Aug 2025 17:05:55 +0000 Manifest next update: Sun 31 Aug 2025 17:05:55 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: pN/Tbh2RkC8GkH2GELe6DvJS+gOTod6tKj5K4+P8ieQ=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4671 (0x123f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Aug 24 17:05:55 2025 GMT Not After : Aug 31 17:05:55 2025 GMT Subject: CN=68ab4674-e734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b1:d9:fc:f2:84:84:df:53:aa:1b:fe:5d:e3: 91:ef:5d:bb:17:d4:2f:2c:30:4b:b0:82:80:a6:51: ca:58:ef:52:ef:2b:a8:23:af:82:06:52:bf:54:e7: 53:5e:01:ae:af:7d:c3:b3:d3:6c:69:0a:71:69:cd: d5:9c:28:36:9f:6d:16:14:5a:fe:a5:f2:3a:f5:38: 00:1e:fe:98:2e:38:58:71:39:36:1d:01:32:17:53: 5e:e3:13:d7:7d:47:0d:a5:d6:c8:57:85:ee:00:b5: d1:11:24:33:a3:4c:94:1b:89:8a:d7:87:d1:c2:8f: cd:16:a8:82:22:ae:e0:c9:54:42:2a:f2:86:e2:96: ec:8b:40:8d:fe:1d:90:16:77:e1:88:06:af:94:49: 49:f1:67:3c:fe:7d:e0:77:84:77:58:e0:32:4c:27: 85:59:b2:3c:6c:ec:88:4f:fe:48:27:f2:ad:76:aa: d5:82:1e:2c:03:e8:e2:de:22:a6:04:84:fa:59:1e: 81:db:e0:8a:25:7c:84:fd:de:ee:17:02:3a:b7:dd: 79:80:a6:5e:0b:67:5e:11:d8:da:c4:6f:b8:b8:56: 5a:6e:a5:fd:3f:8c:8b:53:b9:f8:6d:51:c4:13:69: a6:73:6f:5e:c3:c0:0b:a3:71:44:cf:3a:64:49:69: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:2F:25:95:0F:16:88:EC:C1:11:81:04:EE:EA:FD:46:CD:17:D4 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d2:68:50:14:33:15:70:9d:4b:9c:5d:18:35:c2:8c:d3:72: 03:53:d8:6c:13:f6:7d:a4:85:6c:a5:bd:fa:ad:36:42:37:1a: 72:51:e3:f1:69:b3:c7:0e:cc:d3:b4:f8:4b:81:78:7f:a7:4c: 6f:03:5f:4c:d7:8f:8a:88:c4:8b:cc:bc:cf:70:c6:0e:ac:aa: f0:a5:01:b2:6c:65:0f:10:d9:65:1c:5a:52:d1:60:f9:19:54: d5:a8:0f:31:62:07:69:7d:b6:eb:b6:4e:89:88:d8:b6:b4:13: 59:a0:30:e3:46:e9:28:2a:e9:86:2f:68:41:42:74:14:1c:56: ec:57:4f:23:64:a7:13:c7:d7:2a:4e:f7:89:65:98:b1:06:9f: 68:12:45:a8:5c:33:b0:bf:59:2d:af:dd:85:39:a1:ae:af:39: b3:61:dd:c2:bd:65:b0:e2:48:96:bf:83:f0:20:f9:91:11:9d: 73:1d:03:a7:50:6d:f3:15:02:7a:dc:17:30:24:f9:9e:65:fe: 79:dc:28:71:c4:67:30:8b:a6:3a:2f:7c:ae:f8:6b:00:ed:4a: a3:b7:52:32:de:88:df:81:0c:78:4d:8c:d2:97:1c:dc:38:d3: ce:89:c5:40:36:7f:9b:db:23:be:b2:68:78:24:ab:6f:c4:49: ed:24:a7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUwODI0MTcwNTU1WhcNMjUwODMxMTcwNTU1WjAYMRYwFAYD VQQDEw02OGFiNDY3NC1lNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47HZ/PKEhN9Tqhv+XeOR7127F9QvLDBLsIKAplHKWO9S7yuoI6+CBlK/VOdT XgGur33Ds9NsaQpxac3VnCg2n20WFFr+pfI69TgAHv6YLjhYcTk2HQEyF1Ne4xPX fUcNpdbIV4XuALXRESQzo0yUG4mK14fRwo/NFqiCIq7gyVRCKvKG4pbsi0CN/h2Q FnfhiAavlElJ8Wc8/n3gd4R3WOAyTCeFWbI8bOyIT/5IJ/KtdqrVgh4sA+ji3iKm BIT6WR6B2+CKJXyE/d7uFwI6t915gKZeC2deEdjaxG+4uFZabqX9P4yLU7n4bVHE E2mmc29ew8ALo3FEzzpkSWl0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8BLyWV DxaI7MERgQTu6v1GzRfUMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs0mhQFDMVcJ1LnF0YNcKM03IDU9hsE/Z9pIVspb36rTZCNxpyUePx abPHDszTtPhLgXh/p0xvA19M14+KiMSLzLzPcMYOrKrwpQGybGUPENllHFpS0WD5 GVTVqA8xYgdpfbbrtk6JiNi2tBNZoDDjRukoKumGL2hBQnQUHFbsV08jZKcTx9cq TveJZZixBp9oEkWoXDOwv1ktr92FOaGurzmzYd3CvWWw4kiWv4PwIPmREZ1zHQOn UG3zFQJ63BcwJPmeZf553ChxxGcwi6Y6L3yu+GsA7Uqjt1Iy3ojfgQx4TYzSlxzc ONPOicVANn+b2yO+smh4JKtvxEntJKfo -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:18 2025 by rpki-client