$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: EACJoU5nVJ5ISvWkBQZr9UWZtff8MEj5ZgNZRizuuNU= Subject key identifier: 52:5E:D5:BF:E8:EB:9C:36:47:BB:4F:81:73:75:9F:FE:35:EE:6B:05 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04A8 Signing time: Sat 19 Jul 2025 00:19:21 +0000 Manifest this update: Sat 19 Jul 2025 00:19:21 +0000 Manifest next update: Sat 26 Jul 2025 00:19:21 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: lvQzB6W1XzdL0iJFpctNwFRFMHQp/URL6BpPvj2fhfA=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Jul 19 00:19:21 2025 GMT Not After : Jul 26 00:19:21 2025 GMT Subject: CN=687ae489-c2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:8f:17:b6:de:82:39:10:e3:67:62:7d:7c: 2a:52:c0:16:1f:58:90:6a:99:f8:ea:d7:78:59:d5: 63:e4:ce:0c:13:38:36:b9:88:dd:dd:a7:75:66:02: 2d:04:6c:4c:e5:34:8f:ed:9d:a4:54:48:fa:11:24: d6:df:78:96:dc:8c:79:7d:e6:69:60:93:dc:23:b0: a0:18:e5:d8:5a:a0:f9:a1:36:94:80:29:ff:f4:81: 5d:f1:f6:59:72:da:9c:b2:a1:ee:c6:fb:3f:e8:97: 7e:cd:2c:9c:78:66:c2:88:26:f2:4f:41:a4:7f:a2: d6:b0:42:da:ae:14:c6:c5:02:3e:85:40:15:91:ad: e8:c3:7e:a0:ec:6b:a5:ba:6b:25:0e:d7:bf:f2:7c: 8a:a9:ce:96:ed:e3:bd:69:a2:8f:a2:ce:34:21:78: 65:94:aa:6b:3e:73:72:e3:80:26:6c:19:21:f5:b5: 54:bb:d9:98:0d:28:85:7c:ab:6b:4e:53:a5:fa:cb: 09:56:a7:a5:3e:7d:82:de:4a:de:b0:46:b5:3d:5e: b2:fd:21:45:59:b5:b3:ed:f5:cf:14:a8:5f:a5:b4: fc:3d:6a:bd:fd:cd:31:fe:21:a9:87:2c:c9:b5:66: 70:dc:66:3c:14:af:7b:37:0a:8a:c8:6b:95:b5:a7: ec:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:D5:BF:E8:EB:9C:36:47:BB:4F:81:73:75:9F:FE:35:EE:6B:05 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d3:3e:53:1f:8b:c2:cc:57:7d:44:68:cf:d1:4a:51:b2:55: 48:04:31:3d:cf:05:3d:37:04:82:ca:12:79:47:13:68:09:26: e3:29:50:e9:06:e6:2f:fd:e7:51:bb:b7:15:f4:06:3d:e0:da: dd:4d:49:28:2a:2e:d3:fa:0e:e6:9f:cd:0d:42:7a:90:8f:3a: e2:e5:60:25:58:ba:8b:75:71:ce:03:62:46:8d:0a:4e:f3:05: 37:3c:a4:02:59:41:76:a3:f2:54:bb:89:97:0f:f3:6d:f4:35: e2:08:76:7e:5d:2d:55:38:24:f2:74:25:1d:c5:32:ce:dc:30: 61:f3:25:b1:4e:f8:15:3f:2b:5a:3c:77:0f:ec:76:69:f9:01: 1d:be:b2:37:71:88:7c:83:6c:f9:4e:be:17:07:ee:33:ee:2a: 07:51:4f:ab:52:28:cc:51:05:38:69:8e:4c:06:3f:1f:05:2b: ed:e5:c0:a8:79:7f:c6:b2:66:8f:b9:30:18:4e:9d:3e:48:78: 9e:70:78:ae:96:61:bf:38:95:d8:e1:68:ee:05:b6:ab:b4:01: 81:7d:8e:6c:b7:00:11:e2:43:07:31:00:05:55:e8:2c:d2:62: d1:e6:42:14:e8:48:de:7d:9c:d5:4a:2d:de:cd:13:a5:26:b6: 3d:63:ee:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNzE5MDAxOTIxWhcNMjUwNzI2MDAxOTIxWjAYMRYwFAYD VQQDEw02ODdhZTQ4OS1jMmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotaPF7begjkQ42difXwqUsAWH1iQapn46td4WdVj5M4MEzg2uYjd3ad1ZgIt BGxM5TSP7Z2kVEj6ESTW33iW3Ix5feZpYJPcI7CgGOXYWqD5oTaUgCn/9IFd8fZZ ctqcsqHuxvs/6Jd+zSyceGbCiCbyT0Gkf6LWsELarhTGxQI+hUAVka3ow36g7Gul umslDte/8nyKqc6W7eO9aaKPos40IXhllKprPnNy44AmbBkh9bVUu9mYDSiFfKtr TlOl+ssJVqelPn2C3kresEa1PV6y/SFFWbWz7fXPFKhfpbT8PWq9/c0x/iGphyzJ tWZw3GY8FK97NwqKyGuVtafsoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJe1b/o 65w2R7tPgXN1n/417msFMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA0z5TH4vCzFd9RGjP0UpRslVIBDE9zwU9NwSCyhJ5RxNoCSbjKVDp BuYv/edRu7cV9AY94NrdTUkoKi7T+g7mn80NQnqQjzri5WAlWLqLdXHOA2JGjQpO 8wU3PKQCWUF2o/JUu4mXD/Nt9DXiCHZ+XS1VOCTydCUdxTLO3DBh8yWxTvgVPyta PHcP7HZp+QEdvrI3cYh8g2z5Tr4XB+4z7ioHUU+rUijMUQU4aY5MBj8fBSvt5cCo eX/GsmaPuTAYTp0+SHiecHiulmG/OJXY4WjuBbartAGBfY5stwAR4kMHMQAFVegs 0mLR5kIU6EjefZzVSi3ezROlJrY9Y+6j -----END CERTIFICATE-----Generated at Sun Jul 20 10:22:07 2025 by rpki-client