$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json) Hash identifier: BaYNB91uN3EG66cZtGS7MFmejlCq3lZAq4T5Cn2mpJQ= Subject key identifier: 9C:29:6A:61:DB:AE:FF:1F:0A:EC:87:EF:C4:7B:5A:30:18:39:23:22 Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft Manifest number: 03D3 Signing time: Sun 07 Sep 2025 00:58:55 +0000 Manifest this update: Sun 07 Sep 2025 00:58:54 +0000 Manifest next update: Sun 14 Sep 2025 00:58:54 +0000 Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: WRxuulA/eOrGULv2INBVgxKDJI3T1UIU8Wo0g47WH8g=) 2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: CkImo8IsUmsaya0jHXM103+CNWFzYVltZI4TafvBrlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Validity Not Before: Sep 7 00:58:54 2025 GMT Not After : Sep 14 00:58:54 2025 GMT Subject: CN=68bcd8ce-d6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:ba:f4:95:61:f3:25:14:2b:c0:41:74:3e: 1f:27:ee:66:28:d4:17:44:83:08:13:47:e4:e1:4b: 72:92:f3:1e:8b:81:76:d0:0f:65:62:2a:5d:b1:83: ff:78:ca:5e:3b:9a:5f:8c:88:3e:10:12:80:19:ec: 3e:ff:fa:6d:f9:67:c9:97:1e:d0:11:70:49:7a:7c: 9f:77:20:77:92:4b:f5:78:08:f3:a9:70:97:dc:0d: 25:e2:73:aa:52:68:1a:05:dc:85:a4:7d:eb:4b:cd: 7c:2e:84:23:02:49:86:36:8b:a9:82:43:0a:3c:6c: 1e:01:b3:3c:a3:34:c9:f3:d2:1a:30:2f:37:d0:7e: 6d:29:64:99:b7:ce:1f:d9:71:48:d1:c6:e7:71:46: b5:71:f2:15:57:de:2d:48:3d:96:14:a7:25:e1:f9: 0b:36:47:83:33:59:ce:17:81:ab:21:c9:87:b8:98: 6c:b6:9d:16:2e:92:98:5d:f0:f6:b7:be:b3:d6:a3: f7:8d:3c:67:b9:fe:c5:a0:2e:c4:d4:b1:8a:28:d5: 53:c4:6a:64:c2:59:df:d8:b3:a9:39:f8:22:bb:5d: 42:28:e6:06:10:d3:b9:a8:a4:fa:e3:86:0a:ae:78: 31:cf:5b:3a:13:e2:3b:44:ba:0d:3a:0b:7c:cf:82: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:29:6A:61:DB:AE:FF:1F:0A:EC:87:EF:C4:7B:5A:30:18:39:23:22 X509v3 Authority Key Identifier: keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:2e:12:18:28:73:b6:7a:ca:51:81:16:40:74:92:61:84: 43:f4:60:10:31:7a:fb:5a:23:ec:7f:46:c1:58:81:b4:c5:d7: 27:23:49:84:b7:29:5a:98:05:86:f5:39:99:06:8e:c8:7d:98: 80:6a:f6:83:ee:98:52:85:eb:4d:db:db:a0:c6:2e:71:d4:c9: b2:1d:33:bc:03:69:90:2e:93:1d:2b:7e:6c:0c:80:c7:89:b8: 34:3a:68:18:05:a4:65:b7:a2:da:56:c3:8d:39:c0:68:9d:48: 36:18:c4:e2:d9:fe:34:82:8c:8e:b4:fc:8e:77:4e:c2:cc:22: 1b:3d:d0:b0:8f:6b:97:97:86:94:fd:0a:82:67:2a:68:b6:c4: 2d:fd:fe:58:0a:7b:0a:fa:61:b9:0b:1d:6b:76:bd:05:0d:3d: 6d:cb:6a:ca:72:49:31:fb:c8:43:43:2a:11:86:ca:f9:62:82: 9b:f3:ee:c9:08:63:f7:c8:7a:7b:39:fb:dc:a3:af:13:b6:58: 6b:f2:cf:1e:7a:a8:d8:2f:79:4f:9f:86:30:51:a2:67:13:c0: 83:35:88:8d:9c:89:cb:8a:88:c4:c4:62:97:16:c2:0c:f2:d2: 72:38:8b:51:7e:dd:71:ab:d9:9b:ba:17:db:0f:00:67:b1:03: 60:eb:93:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw RDEzQzAyOTkwHhcNMjUwOTA3MDA1ODU0WhcNMjUwOTE0MDA1ODU0WjAYMRYwFAYD VQQDEw02OGJjZDhjZS1kNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Eu69JVh8yUUK8BBdD4fJ+5mKNQXRIMIE0fk4UtykvMei4F20A9lYipdsYP/ eMpeO5pfjIg+EBKAGew+//pt+WfJlx7QEXBJenyfdyB3kkv1eAjzqXCX3A0l4nOq UmgaBdyFpH3rS818LoQjAkmGNoupgkMKPGweAbM8ozTJ89IaMC830H5tKWSZt84f 2XFI0cbncUa1cfIVV94tSD2WFKcl4fkLNkeDM1nOF4GrIcmHuJhstp0WLpKYXfD2 t76z1qP3jTxnuf7FoC7E1LGKKNVTxGpkwlnf2LOpOfgiu11CKOYGENO5qKT644YK rngxz1s6E+I7RLoNOgt8z4KISQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwpamHb rv8fCuyH78R7WjAYOSMiMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4 RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2 bHdmUzRpQkRZN3dORThBcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7LC4SGChztnrKUYEWQHSSYYRD9GAQMXr7WiPsf0bBWIG0xdcnI0mE tylamAWG9TmZBo7IfZiAavaD7phShetN29ugxi5x1MmyHTO8A2mQLpMdK35sDIDH ibg0OmgYBaRlt6LaVsONOcBonUg2GMTi2f40goyOtPyOd07CzCIbPdCwj2uXl4aU /QqCZypotsQt/f5YCnsK+mG5Cx1rdr0FDT1ty2rKckkx+8hDQyoRhsr5YoKb8+7J CGP3yHp7Ofvco68Ttlhr8s8eeqjYL3lPn4YwUaJnE8CDNYiNnInLiojExGKXFsIM 8tJyOItRft1xq9mbuhfbDwBnsQNg65MW -----END CERTIFICATE-----Generated at Mon Sep 8 16:24:03 2025 by rpki-client