$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: 6PHlacKcWtEeLUIokq4FdIi6sQ/XChnNQuqa5w4S7nQ= Subject key identifier: C0:4A:7F:10:B7:0A:31:72:87:F3:0D:53:BA:91:C2:F0:2A:84:F4:3A Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 3522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 34E4 Signing time: Sun 20 Jul 2025 14:42:13 +0000 Manifest this update: Sun 20 Jul 2025 14:42:13 +0000 Manifest next update: Sun 27 Jul 2025 14:42:13 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: qXgxczcVK8iAQvWttU2jJ8IRPDn2+bTYnGqQ5bEudh0=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Jul 20 14:42:13 2025 GMT Not After : Jul 27 14:42:13 2025 GMT Subject: CN=687d0045-d931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:e4:d5:52:79:b2:dd:0e:1c:68:82:df:fa: 7d:d3:e8:ab:fd:f4:ae:8c:71:9e:6f:28:c0:16:ee: 7d:cc:42:c9:53:26:ae:ab:3e:e5:8c:30:56:13:cc: d4:a0:3b:f1:90:e8:7b:33:84:c8:92:c3:04:04:68: bd:f4:ad:67:a2:f2:1c:a3:d9:e4:1a:f5:5c:4e:9f: fc:50:14:fb:87:ce:4d:08:85:5b:0a:7c:3d:a1:d8: b9:3e:f0:06:68:3a:3f:11:7e:58:39:85:48:13:4c: 85:cd:fd:2f:e6:61:d3:f7:18:1e:54:b9:8d:67:bf: 68:2f:c3:b6:0a:41:eb:4e:d9:ec:63:cf:e2:4f:30: 0d:7b:50:35:c8:b7:f1:46:e2:78:2f:60:b8:6b:0a: f5:a2:0a:4f:dd:fd:1d:f8:20:ca:ee:0d:0a:20:f4: d1:a2:87:ab:7c:17:a0:e2:1e:7a:e3:69:74:aa:9f: f9:0c:32:9c:19:cd:d7:ca:78:96:0b:bd:ae:30:fe: 90:d1:3f:71:21:9d:c8:75:57:d3:70:51:34:32:84: 8c:91:b0:bb:a1:af:a3:93:15:c5:e8:7d:25:5e:89: e4:89:31:fc:27:4b:bc:e8:28:f8:44:3e:dc:25:d7: cd:0b:ae:ee:05:af:33:d0:2c:e6:86:8d:57:7a:31: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4A:7F:10:B7:0A:31:72:87:F3:0D:53:BA:91:C2:F0:2A:84:F4:3A X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:4b:4e:4b:87:4a:c1:6f:7b:79:b7:5c:af:3f:c1:c4:aa:ef: a7:97:82:1e:d0:03:09:59:ef:1b:05:cb:ec:43:87:b7:e1:65: 80:73:1f:d8:f4:10:10:c4:b3:b9:33:a7:aa:03:cc:64:18:a4: 2c:90:2e:64:15:86:38:1a:27:93:3e:72:b3:0e:74:64:b9:47: c6:98:56:a8:db:57:95:bf:48:ee:d4:3b:42:9f:08:69:21:cd: 59:f8:22:77:3b:18:bb:ca:e4:49:0e:83:ac:8b:83:49:07:58: 21:5f:88:b3:f6:3b:7d:8b:54:2e:80:87:0c:e4:e1:4e:b2:af: 89:38:87:51:3a:ed:70:d8:df:41:c9:d7:65:fa:8c:40:05:0a: bd:9d:90:5e:a9:4c:af:16:3f:7c:c2:16:bb:9f:70:42:e4:e8: 7f:a5:a4:cd:da:9a:e5:a9:1f:66:4b:46:9c:66:7c:7b:f8:10: 81:1d:d2:ca:24:3e:12:7e:5c:74:27:95:fb:a5:a5:88:02:ec: 64:c5:23:9e:29:84:b7:dd:1c:63:1d:58:18:26:4b:37:e5:47: b9:27:56:74:dc:fb:32:3d:af:3b:44:57:e5:9c:c2:c7:87:3c: 91:06:c7:78:08:84:01:d5:a9:e0:17:da:3e:4e:c5:fe:2d:ef: 8c:b2:d6:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUwNzIwMTQ0MjEzWhcNMjUwNzI3MTQ0MjEzWjAYMRYwFAYD VQQDEw02ODdkMDA0NS1kOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2nk1VJ5st0OHGiC3/p90+ir/fSujHGebyjAFu59zELJUyauqz7ljDBWE8zU oDvxkOh7M4TIksMEBGi99K1novIco9nkGvVcTp/8UBT7h85NCIVbCnw9odi5PvAG aDo/EX5YOYVIE0yFzf0v5mHT9xgeVLmNZ79oL8O2CkHrTtnsY8/iTzANe1A1yLfx RuJ4L2C4awr1ogpP3f0d+CDK7g0KIPTRooerfBeg4h5642l0qp/5DDKcGc3XyniW C72uMP6Q0T9xIZ3IdVfTcFE0MoSMkbC7oa+jkxXF6H0lXonkiTH8J0u86Cj4RD7c JdfNC67uBa8z0Czmho1XejG80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBKfxC3 CjFyh/MNU7qRwvAqhPQ6MB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3S05Lh0rBb3t5t1yvP8HEqu+nl4Ie0AMJWe8bBcvsQ4e34WWAcx/Y 9BAQxLO5M6eqA8xkGKQskC5kFYY4GieTPnKzDnRkuUfGmFao21eVv0ju1DtCnwhp Ic1Z+CJ3Oxi7yuRJDoOsi4NJB1ghX4iz9jt9i1QugIcM5OFOsq+JOIdROu1w2N9B yddl+oxABQq9nZBeqUyvFj98wha7n3BC5Oh/paTN2prlqR9mS0acZnx7+BCBHdLK JD4Sflx0J5X7paWIAuxkxSOeKYS33RxjHVgYJks35Ue5J1Z03PsyPa87RFflnMLH hzyRBsd4CIQB1angF9o+TsX+Le+MstZj -----END CERTIFICATE-----Generated at Mon Jul 21 07:16:04 2025 by rpki-client