$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: sIVY+aK1Orv9BhdSrnQcaU2wthBSF5h0M14ZctPaa48= Subject key identifier: D0:E9:F1:CD:E0:1B:C7:67:A6:E1:2F:E9:4D:41:48:62:9F:06:77:8E Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 06A7 Signing time: Sun 20 Jul 2025 22:24:01 +0000 Manifest this update: Sun 20 Jul 2025 22:24:01 +0000 Manifest next update: Sun 27 Jul 2025 22:24:01 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: hIu0krud8/SHc8y1Q78zE+CoEGW3X2hEBxWNDU59lso=) 2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=) 3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=) 4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: 8KuusaWdM7XE0SsLxUanmFi6arr5FObPV+arfCP9uGg=) 5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Jul 20 22:24:01 2025 GMT Not After : Jul 27 22:24:01 2025 GMT Subject: CN=687d6c81-5eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:52:4b:27:e3:93:29:04:30:be:c5:38:70: 32:e6:2a:c2:2e:b5:0f:10:d3:8e:13:7e:bb:16:e8: 9f:2b:60:f1:b1:91:29:dc:89:9d:d9:40:84:be:3b: 49:b2:e4:fb:dc:93:1c:1d:99:61:6e:93:e3:a2:e2: b6:86:a2:6d:b8:69:3a:6f:17:21:fa:08:38:14:5e: 66:96:26:7d:0d:21:1e:06:f3:09:72:f4:04:eb:bb: 5e:24:24:e9:f4:3e:94:c5:14:0d:13:07:0b:42:35: c3:50:be:6a:47:03:5f:e1:14:d7:7c:e2:fc:85:1b: 3a:3b:6e:3f:02:69:29:31:1e:df:03:04:34:4c:5f: 42:11:96:61:93:0f:4c:95:ba:74:14:9f:85:c7:f8: 34:2d:0f:31:58:e2:b3:bb:2f:69:7d:05:5e:d9:8a: f6:2d:5a:2b:78:db:ed:aa:51:1c:71:b2:90:63:fd: 0c:eb:6a:d3:8f:da:d3:81:56:09:bd:d6:f7:9d:9d: 39:c9:7f:a2:9d:f1:6d:ea:dc:ee:cf:be:78:a8:6b: 14:33:c9:5d:92:89:21:88:9c:fc:60:03:82:dd:dd: 89:c4:06:af:6b:f8:af:1c:fc:09:85:5d:05:e7:5e: 58:70:5f:69:21:ea:8a:a8:29:6a:8a:05:f8:05:62: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E9:F1:CD:E0:1B:C7:67:A6:E1:2F:E9:4D:41:48:62:9F:06:77:8E X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:af:8d:06:01:4f:86:0a:32:aa:d3:86:f3:25:10:a0:73: 35:06:06:24:95:99:54:85:8a:9d:65:12:67:ef:73:8c:f7:65: b0:47:5a:86:6d:f4:b7:b5:ea:87:c5:b3:73:09:de:90:ae:dd: 0f:13:ed:c1:f7:f7:08:5b:f4:68:01:d8:d6:96:25:f0:e5:55: 70:5a:4e:aa:25:2e:18:2b:ab:08:57:ed:f2:01:e9:83:6f:75: 6d:e1:48:64:5d:22:34:d9:93:e0:5d:9c:fa:43:68:fa:bf:6b: 81:00:d7:ba:01:8e:a5:d0:18:ae:43:0e:54:26:c0:59:9a:64: 65:70:85:70:d7:08:80:12:94:ec:aa:19:26:b6:ae:93:f3:ac: b7:c6:32:82:b0:d8:ca:1e:13:7d:0b:94:5b:af:5c:7b:d4:53: 13:ae:67:ec:c5:7c:44:eb:81:c1:22:fe:a8:6e:c5:fb:e2:36: b5:0e:c8:74:27:b6:f9:2f:0b:95:f1:50:f5:c1:30:a6:ed:e5: a6:ba:7a:93:d0:74:78:92:d5:bf:9a:ed:e6:55:25:e3:2d:b1: 2c:2a:31:f5:c6:38:62:5f:6c:70:51:e5:6d:da:1b:60:2b:66: 08:8a:56:7b:4c:40:e5:4e:0c:68:2b:30:cd:e7:a4:d4:dd:9c: 9b:f8:1d:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUwNzIwMjIyNDAxWhcNMjUwNzI3MjIyNDAxWjAYMRYwFAYD VQQDEw02ODdkNmM4MS01ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XNSSyfjkykEML7FOHAy5irCLrUPENOOE367FuifK2DxsZEp3Imd2UCEvjtJ suT73JMcHZlhbpPjouK2hqJtuGk6bxch+gg4FF5mliZ9DSEeBvMJcvQE67teJCTp 9D6UxRQNEwcLQjXDUL5qRwNf4RTXfOL8hRs6O24/AmkpMR7fAwQ0TF9CEZZhkw9M lbp0FJ+Fx/g0LQ8xWOKzuy9pfQVe2Yr2LVoreNvtqlEccbKQY/0M62rTj9rTgVYJ vdb3nZ05yX+infFt6tzuz754qGsUM8ldkokhiJz8YAOC3d2JxAava/ivHPwJhV0F 515YcF9pIeqKqClqigX4BWII3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDp8c3g G8dnpuEv6U1BSGKfBneOMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWqq+NBgFPhgoyqtOG8yUQoHM1BgYklZlUhYqdZRJn73OM92WwR1qG bfS3teqHxbNzCd6Qrt0PE+3B9/cIW/RoAdjWliXw5VVwWk6qJS4YK6sIV+3yAemD b3Vt4UhkXSI02ZPgXZz6Q2j6v2uBANe6AY6l0BiuQw5UJsBZmmRlcIVw1wiAEpTs qhkmtq6T86y3xjKCsNjKHhN9C5Rbr1x71FMTrmfsxXxE64HBIv6obsX74ja1Dsh0 J7b5LwuV8VD1wTCm7eWmunqT0HR4ktW/mu3mVSXjLbEsKjH1xjhiX2xwUeVt2htg K2YIilZ7TEDlTgxoKzDN56TU3Zyb+B2A -----END CERTIFICATE-----Generated at Mon Jul 21 03:07:53 2025 by rpki-client