$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: vLEWXnIwK2W/IhtTH0C7kyYBX//fiZxCQkXscCNMVJg= Subject key identifier: 89:7C:FB:7E:9B:56:A2:E6:3F:37:85:8B:F9:64:DE:D2:A5:8B:38:C0 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0D2C Signing time: Thu 18 Sep 2025 18:14:38 +0000 Manifest this update: Thu 18 Sep 2025 18:14:38 +0000 Manifest next update: Thu 25 Sep 2025 18:14:38 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: FilsteZlFS7jLY2QUap74L0oCyzFy2W6TJwSR/tMdy8=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Sep 18 18:14:38 2025 GMT Not After : Sep 25 18:14:38 2025 GMT Subject: CN=68cc4c0e-9d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3f:05:5d:51:51:99:6a:09:b1:82:0c:db:70: f9:30:58:8d:40:7a:0c:c8:19:72:73:66:c3:af:c0: 5a:22:e0:9f:c1:fe:5f:e1:ba:0a:54:bd:ae:2d:88: 24:be:3f:62:fe:b7:71:0e:ab:b5:17:db:ba:5b:b2: 81:5f:1c:dd:c0:54:fe:84:3d:6b:12:9b:9e:0a:2e: 38:76:05:dc:2a:19:eb:b1:09:77:bd:5e:29:0c:60: 98:32:d2:eb:77:e0:64:21:fc:e7:69:6f:2d:8c:10: b8:4c:13:db:81:ba:30:2a:49:c1:af:3d:46:bf:69: 00:99:ac:a2:b2:a1:c4:62:e5:a2:cb:a6:a6:2f:03: 74:5a:0f:0b:66:a0:24:42:d1:29:80:7c:81:0a:a6: 10:00:bf:69:b8:53:ca:62:16:9f:9e:6c:b2:51:4b: e5:5a:a3:3b:c3:d8:f3:a6:39:80:9e:8f:04:a1:8b: 86:53:d0:af:ac:3d:c8:5c:23:5a:fc:fd:5d:19:f3: df:0b:7c:0d:cb:5a:33:a7:35:b7:bc:a3:7f:30:d2: b6:24:0d:81:6b:2a:42:b7:c6:3e:a6:f6:04:6f:c5: 70:5b:16:9a:42:58:00:d6:68:9a:b9:06:1b:d1:b7: f7:27:c4:2b:08:8f:54:86:93:04:12:c3:6d:d0:b7: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:FB:7E:9B:56:A2:E6:3F:37:85:8B:F9:64:DE:D2:A5:8B:38:C0 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bb:4e:45:67:4b:a8:16:f8:2d:75:9f:14:45:06:f2:69:46: 30:c6:34:73:b6:8b:04:3a:f3:e2:8e:1a:98:08:00:04:f4:18: 5b:c1:3b:0d:80:4d:4c:ca:bb:41:1d:a4:83:c3:f8:f1:2c:ab: 93:20:28:2c:b4:5c:fd:03:79:5f:98:ee:8f:d1:12:73:81:b1: 71:a2:78:74:a3:a0:e6:84:b7:c6:53:66:1d:ef:93:c7:e8:b6: 20:71:fc:76:59:c2:d2:73:db:09:e9:25:df:0b:94:9b:bb:13: bb:86:74:89:47:c3:11:34:54:e2:47:83:ac:c4:6f:72:94:02: 9e:8a:34:f6:e3:bd:95:f0:82:6f:e9:5b:68:c0:c4:ef:de:bc: 4b:d4:ec:b2:9a:fd:28:91:fa:60:53:18:25:60:90:52:a0:84: 1c:78:f3:b2:c4:ba:d4:4b:84:65:0f:3a:cf:76:60:19:1f:ec: f2:f6:f5:78:77:f1:71:3d:ca:ee:8d:b6:c4:15:5c:1f:02:c0: 33:8a:f7:3b:dd:e5:6a:36:ec:49:f5:25:42:04:b3:64:01:48: 08:e5:e1:98:e7:f3:8a:54:be:1d:da:0f:d4:b6:29:73:8d:d3: cc:7d:98:99:64:7e:8b:d8:10:6f:1b:1f:d8:00:7d:81:fc:5e: 6a:40:76:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwOTE4MTgxNDM4WhcNMjUwOTI1MTgxNDM4WjAYMRYwFAYD VQQDEw02OGNjNGMwZS05ZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9T8FXVFRmWoJsYIM23D5MFiNQHoMyBlyc2bDr8BaIuCfwf5f4boKVL2uLYgk vj9i/rdxDqu1F9u6W7KBXxzdwFT+hD1rEpueCi44dgXcKhnrsQl3vV4pDGCYMtLr d+BkIfznaW8tjBC4TBPbgbowKknBrz1Gv2kAmayisqHEYuWiy6amLwN0Wg8LZqAk QtEpgHyBCqYQAL9puFPKYhafnmyyUUvlWqM7w9jzpjmAno8EoYuGU9CvrD3IXCNa /P1dGfPfC3wNy1ozpzW3vKN/MNK2JA2BaypCt8Y+pvYEb8VwWxaaQlgA1miauQYb 0bf3J8QrCI9UhpMEEsNt0LeCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl8+36b VqLmPzeFi/lk3tKlizjAMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWu05FZ0uoFvgtdZ8URQbyaUYwxjRztosEOvPijhqYCAAE9BhbwTsN gE1MyrtBHaSDw/jxLKuTICgstFz9A3lfmO6P0RJzgbFxonh0o6DmhLfGU2Yd75PH 6LYgcfx2WcLSc9sJ6SXfC5SbuxO7hnSJR8MRNFTiR4OsxG9ylAKeijT2472V8IJv 6VtowMTv3rxL1Oyymv0okfpgUxglYJBSoIQcePOyxLrUS4RlDzrPdmAZH+zy9vV4 d/FxPcrujbbEFVwfAsAzivc73eVqNuxJ9SVCBLNkAUgI5eGY5/OKVL4d2g/Utilz jdPMfZiZZH6L2BBvGx/YAH2B/F5qQHbl -----END CERTIFICATE-----Generated at Fri Sep 19 05:26:16 2025 by rpki-client