$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: H/OgqbyhSW+iuWss9vZN6fFOyDRgB+g8BhJX2nNLQ8c= Subject key identifier: 4F:2F:BA:2D:A2:BF:3E:C4:81:C2:31:E0:A4:FF:1C:BD:15:35:50:AD Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0CF3 Signing time: Fri 30 May 2025 18:18:48 +0000 Manifest this update: Fri 30 May 2025 18:18:47 +0000 Manifest next update: Fri 06 Jun 2025 18:18:47 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: VLA2jg6/abIcufxwQEY/HdwALRNmnAt2dYPqWWNyXPQ=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: +TPxOAHNAMtvnIcGRR6E+FNpj29vW6xe3VQISwdy/bw=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: 0SPtnF49m4JXYvDmELKfCYTUI/b5FZMwuniRPfNINfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: May 30 18:18:47 2025 GMT Not After : Jun 6 18:18:47 2025 GMT Subject: CN=6839f688-7568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:3d:c9:13:a5:82:fc:bd:30:3e:07:f8:48: 91:7e:2d:70:cd:ef:b5:c9:86:97:4f:3f:1d:09:31: d1:09:89:bc:49:52:c4:8e:4d:53:7f:02:8b:2a:ff: 84:5e:24:4c:03:7f:47:73:d4:0a:9c:cd:e5:ab:ba: 42:a7:b2:8a:9d:91:c9:ac:ba:13:35:57:d9:9e:d0: 61:5a:de:6c:1b:6e:ad:5a:e9:c2:1c:e5:02:50:7b: 88:f0:dc:4e:cc:be:f8:e8:81:0e:df:c5:45:be:d1: 4b:a6:76:a2:41:de:50:52:0c:41:71:e7:9b:9c:10: 00:dd:92:3a:66:9b:34:19:7b:1e:7a:03:f6:55:51: 92:f0:1e:87:40:28:81:d2:4e:ef:08:2b:9a:ac:b9: 0e:94:28:7c:69:4f:9b:bd:f0:28:9f:e0:20:42:32: 68:d7:68:77:a9:7d:66:b4:dc:4d:88:91:15:74:70: e1:18:41:94:bd:bb:8c:d5:41:76:77:01:a5:96:75: 46:67:71:6e:f6:90:ff:aa:43:11:b7:53:c1:a1:96: a0:34:5d:85:03:52:e5:5a:18:d1:61:26:87:72:fc: 2d:9e:95:19:33:e0:7f:8c:4e:b9:2c:0d:41:15:38: 0f:12:a0:7f:de:b1:4c:ef:b9:75:2f:66:ff:fc:77: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:BA:2D:A2:BF:3E:C4:81:C2:31:E0:A4:FF:1C:BD:15:35:50:AD X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b2:05:22:c0:3e:4a:2b:8a:c2:bb:bf:2f:3f:4c:07:0f:54: eb:71:9d:35:51:63:6f:26:14:84:2c:8d:d1:22:12:1c:53:b7: 05:b3:05:ff:ed:2e:ad:ac:e2:24:21:0e:44:a7:5f:18:b4:91: a9:6b:cb:65:47:65:44:53:c8:77:e0:6d:a5:43:0a:c9:93:af: 7d:ac:e8:ab:a9:5d:a5:8f:f2:3d:6f:87:01:5f:ea:f6:b2:79: ea:73:dd:3f:55:89:0f:a9:0c:c1:d8:cb:7c:f1:f9:a5:f1:cf: ea:a9:e9:76:16:12:db:34:27:12:76:b8:8b:70:1f:72:42:00: b2:37:21:9d:6d:67:79:6e:f7:a6:93:53:46:32:ad:7b:fb:a0: b0:a2:35:79:cc:82:2a:db:59:3f:c2:53:c7:b7:16:d2:e2:83: 14:20:47:73:0d:26:c6:4e:87:15:40:c1:df:d2:a2:8e:39:47: f3:f8:27:fe:71:00:82:7d:89:35:c4:1d:74:59:81:03:f0:8b: bc:12:92:34:bf:11:1f:32:79:b4:4b:b5:ef:e8:57:d0:ef:1c: 66:8b:0c:60:25:b6:4c:f9:58:3f:5f:e4:2c:74:1b:f1:d5:a0: 9a:7a:12:6c:6e:c8:5f:7c:07:ee:b0:37:40:7f:b3:7f:57:af: 8b:7e:2f:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjUwNTMwMTgxODQ3WhcNMjUwNjA2MTgxODQ3WjAYMRYwFAYD VQQDEw02ODM5ZjY4OC03NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGE9yROlgvy9MD4H+EiRfi1wze+1yYaXTz8dCTHRCYm8SVLEjk1TfwKLKv+E XiRMA39Hc9QKnM3lq7pCp7KKnZHJrLoTNVfZntBhWt5sG26tWunCHOUCUHuI8NxO zL746IEO38VFvtFLpnaiQd5QUgxBceebnBAA3ZI6Zps0GXseegP2VVGS8B6HQCiB 0k7vCCuarLkOlCh8aU+bvfAon+AgQjJo12h3qX1mtNxNiJEVdHDhGEGUvbuM1UF2 dwGllnVGZ3Fu9pD/qkMRt1PBoZagNF2FA1LlWhjRYSaHcvwtnpUZM+B/jE65LA1B FTgPEqB/3rFM77l1L2b//HcvdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8vui2i vz7EgcIx4KT/HL0VNVCtMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQsgUiwD5KK4rCu78vP0wHD1TrcZ01UWNvJhSELI3RIhIcU7cFswX/ 7S6trOIkIQ5Ep18YtJGpa8tlR2VEU8h34G2lQwrJk699rOirqV2lj/I9b4cBX+r2 snnqc90/VYkPqQzB2Mt88fml8c/qqel2FhLbNCcSdriLcB9yQgCyNyGdbWd5bvem k1NGMq17+6CwojV5zIIq21k/wlPHtxbS4oMUIEdzDSbGTocVQMHf0qKOOUfz+Cf+ cQCCfYk1xB10WYED8Iu8EpI0vxEfMnm0S7Xv6FfQ7xxmiwxgJbZM+Vg/X+QsdBvx 1aCaehJsbshffAfusDdAf7N/V6+Lfi90 -----END CERTIFICATE-----Generated at Sat May 31 16:35:00 2025 by rpki-client