$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: xusMvr820Ikb2NeF2C9S0bIk7pXf+IUNqHa6akPAcFw= Subject key identifier: F5:CC:1D:66:46:CA:EF:5B:3A:25:F7:29:D2:21:14:82:32:9F:31:10 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 2389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 235E Signing time: Fri 18 Jul 2025 15:56:05 +0000 Manifest this update: Fri 18 Jul 2025 15:56:04 +0000 Manifest next update: Fri 25 Jul 2025 15:56:04 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: oBRkAxID4MV6G6Sc+4N2qnaLfBVuiNs/zhyQfEwKOYM=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: mpzCA23Ss/c1ac0bYDvVsjbQgPjS/ZvKyhpNDl7GtoA=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: l+TYh6v3YY1hm+93/643Dl+hMCHqLK38fQC5FpyC0mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9097 (0x2389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Jul 18 15:56:04 2025 GMT Not After : Jul 25 15:56:04 2025 GMT Subject: CN=687a6e95-1ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:43:85:e9:2d:a8:52:a6:50:24:03:db:0c: be:22:9c:d6:95:05:17:eb:1f:e6:f6:91:42:8a:65: 7c:ac:19:e0:80:ec:17:d0:7c:87:54:4e:9f:f2:e2: ee:56:2c:a7:06:64:d9:1c:94:28:42:8a:41:55:28: b2:5e:87:f5:c0:00:dd:f2:a0:64:86:64:79:99:ae: 83:2b:84:17:d7:25:e7:c2:89:24:aa:e2:1a:15:39: bc:9b:be:2a:12:4d:4a:6d:db:3c:8d:c6:dd:5a:4a: f9:6b:f7:58:d7:6d:fd:81:f3:dc:8b:fc:74:c5:9b: 34:58:ee:fa:d8:e8:ed:c2:c1:42:0d:b2:93:b4:88: ff:a2:60:5b:25:2e:1c:20:2f:fa:22:bd:ad:74:ee: 99:4b:f5:8c:12:ec:73:e8:40:33:45:fe:b9:7e:40: 03:4b:57:a6:24:47:31:cd:f5:c1:71:dd:05:1e:51: 6e:cb:af:ac:eb:14:91:52:7f:6c:46:4b:e0:36:3d: 1b:50:2f:de:83:b3:8f:63:28:c3:77:09:d6:d6:c1: 57:6d:4d:95:5d:1c:98:18:6c:54:f5:5e:2a:9f:3c: 5b:42:53:8f:ed:86:45:28:67:ba:a5:26:f2:75:34: 91:36:90:a9:53:13:ef:16:2a:b1:f6:b0:ae:f9:f7: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CC:1D:66:46:CA:EF:5B:3A:25:F7:29:D2:21:14:82:32:9F:31:10 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:70:f9:10:7f:c2:d4:ed:81:fe:3d:6c:7f:b0:90:6d:77: d6:8c:b6:15:c5:83:5a:02:b7:0e:85:2d:47:b0:bc:34:ce:6b: e6:75:5a:a3:94:56:b4:af:81:6d:1d:cf:3b:d5:a7:31:de:07: 07:28:c1:6c:7a:56:1a:75:78:96:c0:04:5c:ef:ca:b4:ae:cf: 4d:b2:cf:cc:2a:04:6a:92:86:1b:fe:06:df:cb:a9:f3:bb:0f: 37:4b:39:92:a1:41:96:1b:13:4f:55:0c:11:b8:74:e2:11:20: 9f:ae:0f:cb:2a:2d:5b:18:0e:7a:db:d1:41:d9:69:29:46:c7: d3:f7:d4:a7:7a:9f:ee:d8:b6:59:2e:31:84:d1:79:89:ef:67: 9b:c3:33:67:6b:1c:57:7e:ea:53:6b:33:39:f9:29:ac:28:81: 00:26:8a:7f:ab:9b:5f:4f:cb:fa:33:d6:00:02:bb:f7:d6:cf: b9:b8:6a:33:fa:cd:22:0c:7e:12:53:28:27:90:b8:dc:3e:81: f7:07:b3:05:2d:33:69:7b:de:e4:b2:ca:b2:ff:fa:d5:c1:e9: 2e:83:6b:64:8c:77:a6:8f:af:c4:68:3f:2c:9d:a6:f6:7e:aa: 90:d7:8e:0d:c6:eb:5b:38:db:ad:7b:fa:12:c4:e6:dd:d8:cc: 86:21:1b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwNzE4MTU1NjA0WhcNMjUwNzI1MTU1NjA0WjAYMRYwFAYD VQQDEw02ODdhNmU5NS0xYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBpDhektqFKmUCQD2wy+IpzWlQUX6x/m9pFCimV8rBnggOwX0HyHVE6f8uLu ViynBmTZHJQoQopBVSiyXof1wADd8qBkhmR5ma6DK4QX1yXnwokkquIaFTm8m74q Ek1Kbds8jcbdWkr5a/dY1239gfPci/x0xZs0WO762OjtwsFCDbKTtIj/omBbJS4c IC/6Ir2tdO6ZS/WMEuxz6EAzRf65fkADS1emJEcxzfXBcd0FHlFuy6+s6xSRUn9s RkvgNj0bUC/eg7OPYyjDdwnW1sFXbU2VXRyYGGxU9V4qnzxbQlOP7YZFKGe6pSby dTSRNpCpUxPvFiqx9rCu+fcWJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXMHWZG yu9bOiX3KdIhFIIynzEQMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuHD5EH/C1O2B/j1sf7CQbXfWjLYVxYNaArcOhS1HsLw0zmvmdVqj lFa0r4FtHc871acx3gcHKMFselYadXiWwARc78q0rs9Nss/MKgRqkoYb/gbfy6nz uw83SzmSoUGWGxNPVQwRuHTiESCfrg/LKi1bGA5629FB2WkpRsfT99Snep/u2LZZ LjGE0XmJ72ebwzNnaxxXfupTazM5+SmsKIEAJop/q5tfT8v6M9YAArv31s+5uGoz +s0iDH4SUygnkLjcPoH3B7MFLTNpe97kssqy//rVwekug2tkjHemj6/EaD8snab2 fqqQ144NxutbONute/oSxObd2MyGIRuD -----END CERTIFICATE-----Generated at Sun Jul 20 06:45:37 2025 by rpki-client