$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json) Hash identifier: tT4ASuFzHQf1t87HCEJQCLKFxrEtJQ6xBIUEESbOjVE= Subject key identifier: CC:D2:C7:5F:54:7A:FD:24:9B:14:F4:41:CC:1E:17:45:5F:F8:77:51 Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft Manifest number: 0539 Signing time: Tue 22 Jul 2025 23:52:30 +0000 Manifest this update: Tue 22 Jul 2025 23:52:29 +0000 Manifest next update: Tue 29 Jul 2025 23:52:29 +0000 Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: 2avURbmpA6rwosKwXorU4k0B3/53Bl12xrFoCPI6yc4=) 2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Validity Not Before: Jul 22 23:52:29 2025 GMT Not After : Jul 29 23:52:29 2025 GMT Subject: CN=6880243e-13d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:56:91:f5:9c:d7:08:25:c6:8f:26:45:d7:6a: 2c:54:7a:c9:9b:49:a7:73:17:93:a4:1e:fb:7e:17: 90:ce:ab:10:f2:2e:97:a2:95:c7:05:81:7d:ea:01: aa:0b:89:40:c3:20:d0:10:23:d3:96:9a:1b:8b:6e: 31:61:cd:90:c5:74:38:04:4e:a4:ca:b7:f1:18:2e: 62:07:4d:43:50:36:a7:3e:04:a5:5a:83:2a:96:49: 52:01:d7:d9:16:23:0b:a3:51:2a:df:1b:07:8c:22: 1b:3b:f6:49:2f:89:09:7f:e2:ad:e1:ab:8c:6d:16: 83:46:91:ab:be:56:17:05:44:ff:16:06:a6:f3:fa: 49:1c:ba:2f:7c:71:7c:bc:6c:d0:18:7b:76:f0:40: db:ac:3a:31:cc:e3:bf:be:84:ca:54:e9:76:28:63: 9c:1e:87:f0:37:f3:15:65:34:f3:68:c3:aa:7b:81: ef:72:ae:cb:c6:9c:bc:61:f0:a5:9b:13:ab:f0:55: 15:0c:db:d0:28:27:ec:ef:07:7c:96:8f:81:ce:25: b9:92:92:9f:b4:8d:72:1b:3b:9f:4b:3a:cc:c4:85: d1:d5:85:53:3a:91:82:44:ff:54:2a:75:6d:40:f5: 10:7b:77:41:f2:00:0c:82:d3:f7:f1:c1:d8:72:68: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D2:C7:5F:54:7A:FD:24:9B:14:F4:41:CC:1E:17:45:5F:F8:77:51 X509v3 Authority Key Identifier: keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:62:38:31:e6:bf:35:3c:47:4a:a6:ec:b0:d6:ca:67:d8:d3: 15:cc:b1:b8:84:e7:5f:77:4c:5f:c4:d5:6f:fa:18:27:36:8a: 9c:cb:b8:ce:c7:b8:c1:5e:98:75:a8:e2:ae:c1:10:21:d6:f2: 27:d5:14:94:27:a0:0b:fa:1c:f1:4a:3e:8a:a2:99:7e:13:3a: de:c4:97:10:e5:7f:9b:68:13:5a:42:5e:44:d8:e7:48:f1:fb: 72:95:ff:cb:8d:72:75:2d:26:d2:33:89:59:a5:f3:39:76:47: b9:2f:24:1d:89:53:6e:60:48:11:29:07:4f:96:78:06:98:ce: a4:9a:6b:dc:3f:50:b7:1a:8f:84:18:51:56:00:d8:0e:de:75: 3e:31:f7:99:60:c8:1f:4c:08:d4:3d:ae:c1:cd:9c:c4:73:16: 94:8a:d0:1c:b7:3c:a8:b5:68:a5:6b:8d:a1:fb:c6:28:45:7c: ef:3d:63:48:9d:48:6f:c0:1b:2c:5f:96:a5:42:f2:f2:76:a7: dd:60:cc:e2:1f:16:b4:c9:7c:fc:e5:06:5f:23:76:c9:80:aa: 6c:d9:33:d9:03:6a:fe:8d:43:7b:a4:9e:50:11:d9:27:32:d5: ac:e4:cc:bc:e7:24:d7:66:28:57:37:00:d6:0b:59:0c:7a:74: b1:07:a9:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD NzZFMDEyMDkwHhcNMjUwNzIyMjM1MjI5WhcNMjUwNzI5MjM1MjI5WjAYMRYwFAYD VQQDEw02ODgwMjQzZS0xM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FaR9ZzXCCXGjyZF12osVHrJm0mncxeTpB77fheQzqsQ8i6XopXHBYF96gGq C4lAwyDQECPTlpobi24xYc2QxXQ4BE6kyrfxGC5iB01DUDanPgSlWoMqlklSAdfZ FiMLo1Eq3xsHjCIbO/ZJL4kJf+Kt4auMbRaDRpGrvlYXBUT/Fgam8/pJHLovfHF8 vGzQGHt28EDbrDoxzOO/voTKVOl2KGOcHofwN/MVZTTzaMOqe4Hvcq7Lxpy8YfCl mxOr8FUVDNvQKCfs7wd8lo+BziW5kpKftI1yGzufSzrMxIXR1YVTOpGCRP9UKnVt QPUQe3dB8gAMgtP38cHYcmgmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzSx19U ev0kmxT0QcweF0Vf+HdRMB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQyQS8yRDJGODI2NjAxQjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9Z QXBxTjFDZ1ZYWmZIYmdFZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsYjgx5r81PEdKpuyw1spn2NMVzLG4hOdfd0xfxNVv+hgnNoqcy7jO x7jBXph1qOKuwRAh1vIn1RSUJ6AL+hzxSj6Kopl+EzrexJcQ5X+baBNaQl5E2OdI 8ftylf/LjXJ1LSbSM4lZpfM5dke5LyQdiVNuYEgRKQdPlngGmM6kmmvcP1C3Go+E GFFWANgO3nU+MfeZYMgfTAjUPa7BzZzEcxaUitActzyotWila42h+8YoRXzvPWNI nUhvwBssX5alQvLydqfdYMziHxa0yXz85QZfI3bJgKps2TPZA2r+jUN7pJ5QEdkn MtWs5My85yTXZihXNwDWC1kMenSxB6kS -----END CERTIFICATE-----Generated at Wed Jul 23 23:29:26 2025 by rpki-client