$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: CEwDBFeLwJr6FTdKPG9W1Mhj5Is1NV4iVlVro03IpNQ= Subject key identifier: BD:3B:DB:B6:9D:E6:47:C6:DD:8C:F7:CF:86:D8:79:90:C4:0D:6D:9A Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 0193 Signing time: Tue 09 Sep 2025 03:29:22 +0000 Manifest this update: Tue 09 Sep 2025 03:29:21 +0000 Manifest next update: Tue 16 Sep 2025 03:29:21 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: jGu218ANVwDl6SSW6J173AnuKUVEGlxCATivHIurC30=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Sep 9 03:29:21 2025 GMT Not After : Sep 16 03:29:21 2025 GMT Subject: CN=68bf9f12-a931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:66:5d:da:98:ff:aa:86:74:b3:31:f6:24: ce:74:4b:3d:91:7a:1d:91:10:d5:e6:af:5e:3c:79: 74:dd:92:35:a4:36:c7:af:18:45:0c:08:8d:80:f0: 3b:32:76:04:7c:13:bf:99:0b:7d:c4:ea:1b:ce:c1: fb:c0:8b:84:f2:85:06:15:81:74:73:44:14:8a:c7: aa:ee:a6:a8:cf:ec:6f:2c:df:1a:d8:b1:23:d1:7e: 7e:25:a5:c1:44:d3:9d:17:2a:dd:2d:09:8a:73:88: 1f:28:81:66:76:59:3b:6c:c1:81:2a:48:8d:db:da: 4c:55:37:fb:9f:a2:46:03:6b:96:36:85:4c:54:bd: be:48:b6:09:03:2d:47:93:63:d8:0a:50:d6:5b:95: 51:f3:b8:88:8c:10:60:f0:e2:7a:82:61:ab:a2:93: 1a:f4:b1:0b:43:cd:99:00:08:44:e6:a1:d8:77:fb: 68:09:23:75:3f:e8:f4:b9:cd:00:77:77:e0:da:2e: ab:4c:df:2b:78:4b:62:3f:8a:9a:11:f8:1c:8b:3f: 59:6f:94:27:f0:4a:18:ff:e3:34:81:e8:a5:02:70: 86:8f:19:7c:58:d1:a7:14:c3:be:7b:85:63:79:7d: b2:6f:b6:c1:6f:a9:f7:bb:61:6b:b2:d8:47:f0:04: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3B:DB:B6:9D:E6:47:C6:DD:8C:F7:CF:86:D8:79:90:C4:0D:6D:9A X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:8e:9a:d8:39:cc:40:8d:12:d4:e0:08:bc:f5:d5:a2:ac: 05:2e:5e:8a:f0:aa:26:07:e2:5a:7c:e3:08:e2:bf:dc:ef:8a: f4:38:2d:52:fe:8c:fc:c4:04:74:68:6b:ad:88:8b:e7:0b:23: 3d:28:4e:69:40:ed:79:2e:a6:e7:93:06:f6:ba:21:07:c5:de: 67:52:1c:c8:0e:2d:3a:40:a1:58:2d:ff:52:d4:0a:32:9d:54: dc:d7:22:ac:f5:de:43:84:84:5c:fe:2b:d1:4d:04:ce:51:9c: e3:a5:d3:87:1f:d6:d2:d1:15:58:b7:d5:b5:74:6d:45:5f:78: d5:49:23:7e:39:27:0c:b3:ca:50:87:64:40:4e:52:9c:46:9f: 1c:0a:0a:80:f1:03:ea:1a:bc:22:7e:01:ba:9c:a0:9f:1d:1c: 7f:8e:d9:93:bb:60:8e:62:20:ee:65:5b:a0:dd:54:b0:b0:e9: a5:a3:7f:79:fd:b9:7f:c0:2e:33:52:36:f6:51:81:54:1e:e6: 03:bc:71:e6:5a:18:9f:e6:a5:30:a4:3c:f3:d4:7f:e8:00:92: 61:3a:a2:90:91:cc:d1:b6:a6:68:cd:86:e9:38:9f:9d:64:3d: 1f:e0:e1:99:27:95:c0:a8:78:c9:f3:f6:3b:22:e2:d1:cf:5e: ca:63:1e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwOTA5MDMyOTIxWhcNMjUwOTE2MDMyOTIxWjAYMRYwFAYD VQQDEw02OGJmOWYxMi1hOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAtmXdqY/6qGdLMx9iTOdEs9kXodkRDV5q9ePHl03ZI1pDbHrxhFDAiNgPA7 MnYEfBO/mQt9xOobzsH7wIuE8oUGFYF0c0QUiseq7qaoz+xvLN8a2LEj0X5+JaXB RNOdFyrdLQmKc4gfKIFmdlk7bMGBKkiN29pMVTf7n6JGA2uWNoVMVL2+SLYJAy1H k2PYClDWW5VR87iIjBBg8OJ6gmGropMa9LELQ82ZAAhE5qHYd/toCSN1P+j0uc0A d3fg2i6rTN8reEtiP4qaEfgciz9Zb5Qn8EoY/+M0geilAnCGjxl8WNGnFMO+e4Vj eX2yb7bBb6n3u2FrsthH8AQtUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0727ad 5kfG3Yz3z4bYeZDEDW2aMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt446a2DnMQI0S1OAIvPXVoqwFLl6K8KomB+JafOMI4r/c74r0OC1S /oz8xAR0aGutiIvnCyM9KE5pQO15Lqbnkwb2uiEHxd5nUhzIDi06QKFYLf9S1Aoy nVTc1yKs9d5DhIRc/ivRTQTOUZzjpdOHH9bS0RVYt9W1dG1FX3jVSSN+OScMs8pQ h2RATlKcRp8cCgqA8QPqGrwifgG6nKCfHRx/jtmTu2COYiDuZVug3VSwsOmlo395 /bl/wC4zUjb2UYFUHuYDvHHmWhif5qUwpDzz1H/oAJJhOqKQkczRtqZozYbpOJ+d ZD0f4OGZJ5XAqHjJ8/Y7IuLRz17KYx4X -----END CERTIFICATE-----Generated at Thu Sep 11 00:54:09 2025 by rpki-client