$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json) Hash identifier: cVNr8LSLnkujctujfIVohvaxo4yus4/rm4yQPPaCEJc= Subject key identifier: 3A:C7:0D:0E:D5:BD:9D:83:EC:E3:EF:9A:76:C5:6C:0A:1C:EB:30:C6 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft Manifest number: 0133 Signing time: Wed 03 Sep 2025 05:12:46 +0000 Manifest this update: Wed 03 Sep 2025 05:12:46 +0000 Manifest next update: Wed 10 Sep 2025 05:12:46 +0000 Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: zm9nMWPtEVWbxYaDo3wY1Nrxq+MNdklii6yM2HYRh9I=) 2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: 29v8ayhOME61rr4geagSM3a8sHvyVhtwUdXNMoV9ZDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Validity Not Before: Sep 3 05:12:46 2025 GMT Not After : Sep 10 05:12:46 2025 GMT Subject: CN=68b7ce4e-d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:7d:7b:5d:33:ea:1b:b6:ad:b3:2c:7b:12: 97:95:74:34:3a:2e:05:87:bb:de:5e:0c:69:8a:11: 03:b1:30:9b:b9:9d:43:ef:57:ce:f7:f8:0f:95:04: e8:25:a7:6f:d8:99:3c:73:4d:dc:da:6b:db:13:6e: d8:c1:3c:c1:61:15:b0:d1:7c:3c:61:b1:d6:3b:a1: da:de:c9:b2:24:6d:d5:1a:58:db:65:a5:57:08:68: ca:a0:0d:f6:ca:a7:f6:0a:cb:78:d4:37:8a:01:99: 0f:a7:8c:b0:6e:d5:bd:71:06:f7:a1:7c:bf:75:3b: 44:8a:b3:de:6d:63:04:41:f0:69:a7:fe:eb:c2:22: 10:9c:e7:5a:ce:84:37:37:53:27:d6:51:e2:75:37: 10:e3:fe:b8:fd:67:2c:6f:bd:ea:e0:f9:3f:be:27: 12:ef:3f:ee:40:36:31:95:4c:1e:17:41:8d:34:1e: a2:c8:24:1d:c6:0b:e4:58:2f:ce:ee:d5:3a:d9:36: f9:76:e5:45:3f:ef:91:20:5d:13:81:e8:0b:b0:ed: 66:9b:d7:2d:23:8b:98:22:31:18:8a:cb:7d:bf:90: c3:b2:e0:35:61:d1:24:86:45:39:e9:ee:64:72:35: 87:73:8b:d1:12:ac:63:06:8e:13:33:a6:6e:53:d9: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:0D:0E:D5:BD:9D:83:EC:E3:EF:9A:76:C5:6C:0A:1C:EB:30:C6 X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:00:07:07:c1:e6:85:f8:bd:21:80:df:b0:f7:72:f9:10:1b: 24:60:ef:48:8d:6a:bf:8d:c3:b7:bf:16:66:ba:51:53:78:dd: be:e5:bd:79:cd:9e:1e:b6:b3:bc:96:0f:8a:68:18:a7:4d:35: 7e:61:a9:55:93:9a:9d:a8:cc:65:5c:9a:0a:56:f6:16:d6:35: 86:d0:5c:b3:dd:ef:e4:72:0e:4a:2c:83:40:48:b4:d9:8c:eb: 72:15:02:8e:4d:f2:48:4d:84:bd:f1:00:b3:06:5a:a6:c0:27: c8:4c:2b:9c:4a:c5:44:e8:c3:5d:10:bf:29:bd:bc:c5:87:08: dc:f4:da:4f:5a:85:d5:d8:76:c0:5a:29:68:da:bf:32:cc:01: 0c:47:85:18:76:a8:5c:61:6a:f1:68:33:b0:20:6e:59:57:d0: ad:88:9c:47:f5:f3:4a:e2:97:ed:c5:56:7d:39:a8:9e:02:38: 38:ee:b4:da:02:b3:f5:42:19:e8:f8:db:b1:12:9a:6b:e2:c9: c7:3e:4f:13:90:cb:b9:4f:86:5b:ba:4b:47:88:74:ce:75:21: 79:8d:7d:e1:51:40:00:38:9a:3e:a3:9e:6e:55:95:36:48:e9: 9d:51:a3:27:66:6a:cd:9f:58:3b:1c:df:b0:5e:ec:1a:57:2f: 9f:36:44:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4 QTMxNzFBNDcwHhcNMjUwOTAzMDUxMjQ2WhcNMjUwOTEwMDUxMjQ2WjAYMRYwFAYD VQQDEw02OGI3Y2U0ZS1kOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pt9e10z6hu2rbMsexKXlXQ0Oi4Fh7veXgxpihEDsTCbuZ1D71fO9/gPlQTo Jadv2Jk8c03c2mvbE27YwTzBYRWw0Xw8YbHWO6Ha3smyJG3VGljbZaVXCGjKoA32 yqf2Cst41DeKAZkPp4ywbtW9cQb3oXy/dTtEirPebWMEQfBpp/7rwiIQnOdazoQ3 N1Mn1lHidTcQ4/64/Wcsb73q4Pk/vicS7z/uQDYxlUweF0GNNB6iyCQdxgvkWC/O 7tU62Tb5duVFP++RIF0TgegLsO1mm9ctI4uYIjEYist9v5DDsuA1YdEkhkU56e5k cjWHc4vREqxjBo4TM6ZuU9lfaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrHDQ7V vZ2D7OPvmnbFbAoc6zDGMB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9DOTJCMzIzMkNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0 cWFoNlpQOEFsRUtLTVhHa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0AAcHweaF+L0hgN+w93L5EBskYO9IjWq/jcO3vxZmulFTeN2+5b15 zZ4etrO8lg+KaBinTTV+YalVk5qdqMxlXJoKVvYW1jWG0Fyz3e/kcg5KLINASLTZ jOtyFQKOTfJITYS98QCzBlqmwCfITCucSsVE6MNdEL8pvbzFhwjc9NpPWoXV2HbA Wilo2r8yzAEMR4UYdqhcYWrxaDOwIG5ZV9CtiJxH9fNK4pftxVZ9OaieAjg47rTa ArP1Qhno+NuxEppr4snHPk8TkMu5T4ZbuktHiHTOdSF5jX3hUUAAOJo+o55uVZU2 SOmdUaMnZmrNn1g7HN+wXuwaVy+fNkSV -----END CERTIFICATE-----Generated at Thu Sep 4 13:54:21 2025 by rpki-client