$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: mYUtkenChBK3kGIt9aCUWS8apZx5rfTIAbcH1Y0msJk= Subject key identifier: 27:E7:D6:B8:2F:81:54:4A:39:64:AF:74:59:03:5C:53:58:E1:69:0C Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 0484 Signing time: Mon 21 Jul 2025 00:16:29 +0000 Manifest this update: Mon 21 Jul 2025 00:16:28 +0000 Manifest next update: Mon 28 Jul 2025 00:16:28 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: Y6TF04zq09yh7ZcLDtcBrvEpHMpn8bbk9HhgsAdIqys=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: VtnOs46KlpQVSJ9THDVnSS8EzLS3A9xUSm3n/4RNrWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: Jul 21 00:16:28 2025 GMT Not After : Jul 28 00:16:28 2025 GMT Subject: CN=687d86dd-55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:17:68:bc:af:8a:62:f9:61:ad:8d:a0:70: 64:7b:3f:52:16:42:05:75:8d:77:8e:2a:30:4f:fd: 4f:02:b7:99:af:aa:24:98:e1:25:9f:b0:22:c4:64: bb:62:71:94:72:08:52:1a:f6:79:70:4b:a8:ef:4a: 0b:ee:86:5c:5c:53:51:c3:b0:e2:b9:c1:b9:54:39: df:d0:2e:f5:d8:c6:15:c2:63:20:7a:d9:5d:78:a5: 8e:c3:6c:18:46:22:f0:f3:18:ab:94:1d:a9:94:70: 91:03:bf:31:dc:89:5b:a9:f5:63:0d:b4:ec:6b:d2: 66:3d:bc:71:9d:37:20:2d:51:a2:3b:07:b8:1a:e8: 8b:d1:87:95:49:45:82:eb:0c:2a:02:3a:ee:ea:8b: 8b:6c:6d:15:13:94:f9:06:27:a3:98:05:7a:53:7c: 67:20:e0:bd:fb:a7:d8:6b:c8:d0:8c:68:a8:32:ef: 3c:33:d1:5c:04:ea:a7:1a:df:4a:01:54:f0:e6:2d: f3:f5:08:58:b5:cd:9b:e2:23:37:74:60:04:6a:74: a4:b7:71:fe:3a:32:73:55:25:62:42:64:fa:e3:f6: 78:c6:81:df:53:81:89:4b:24:e3:e4:46:a8:60:89: b9:9e:0b:ec:55:d3:6e:18:8d:21:8c:6c:81:3d:93: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E7:D6:B8:2F:81:54:4A:39:64:AF:74:59:03:5C:53:58:E1:69:0C X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:79:db:90:98:3e:67:50:d0:a5:77:96:fd:fe:df:9c:ba: 6f:b1:2b:09:d7:4f:ff:fc:2a:d3:1d:6e:1d:35:4b:25:b0:a6: 8e:3b:4c:66:20:2d:00:94:90:89:da:71:bd:74:8a:9a:20:1a: 84:f9:82:ec:33:54:87:15:d4:a0:90:57:5b:3a:ba:1a:fc:fc: 95:b0:ca:ab:af:ce:ce:e9:ef:ca:8c:ab:a5:8a:b3:a9:eb:7a: f9:b7:64:ad:2e:f3:35:aa:b4:3d:46:37:92:fd:8f:f1:fa:f6: 0e:6d:d0:96:3f:b4:7a:21:ce:36:d7:ba:54:4a:2d:9b:82:aa: 00:a2:13:8e:78:7b:19:81:53:4b:a7:bd:12:6b:25:50:8f:5b: 36:2e:68:d9:cd:7e:a4:06:e4:7f:36:6a:19:00:41:d0:c5:66: 57:e9:08:ae:c1:af:bb:8b:7d:a8:b9:d5:e3:38:ed:a1:cd:d0: db:2e:f5:39:84:c2:f8:3c:2c:02:89:0f:95:79:6a:1c:de:ee: 0c:63:38:7a:05:e7:f5:ba:71:d3:8f:89:83:99:2e:3f:ed:90: 20:b6:c1:0b:a2:74:80:ae:33:68:8f:5e:9e:a7:11:83:97:40: c5:5f:84:ac:e6:8b:63:20:67:75:72:bb:0a:3e:01:83:a8:56: 77:a6:ca:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjUwNzIxMDAxNjI4WhcNMjUwNzI4MDAxNjI4WjAYMRYwFAYD VQQDEw02ODdkODZkZC01NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApecXaLyvimL5Ya2NoHBkez9SFkIFdY13jiowT/1PAreZr6okmOEln7AixGS7 YnGUcghSGvZ5cEuo70oL7oZcXFNRw7DiucG5VDnf0C712MYVwmMgetldeKWOw2wY RiLw8xirlB2plHCRA78x3IlbqfVjDbTsa9JmPbxxnTcgLVGiOwe4GuiL0YeVSUWC 6wwqAjru6ouLbG0VE5T5BiejmAV6U3xnIOC9+6fYa8jQjGioMu88M9FcBOqnGt9K AVTw5i3z9QhYtc2b4iM3dGAEanSkt3H+OjJzVSViQmT64/Z4xoHfU4GJSyTj5Eao YIm5ngvsVdNuGI0hjGyBPZOBgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfn1rgv gVRKOWSvdFkDXFNY4WkMMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVOnnbkJg+Z1DQpXeW/f7fnLpvsSsJ10///CrTHW4dNUslsKaOO0xm IC0AlJCJ2nG9dIqaIBqE+YLsM1SHFdSgkFdbOroa/PyVsMqrr87O6e/KjKulirOp 63r5t2StLvM1qrQ9RjeS/Y/x+vYObdCWP7R6Ic4217pUSi2bgqoAohOOeHsZgVNL p70SayVQj1s2LmjZzX6kBuR/NmoZAEHQxWZX6Qiuwa+7i32oudXjOO2hzdDbLvU5 hML4PCwCiQ+VeWoc3u4MYzh6Bef1unHTj4mDmS4/7ZAgtsELonSArjNoj16epxGD l0DFX4Ss5otjIGd1crsKPgGDqFZ3psoq -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:02 2025 by rpki-client