$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: WZ+vMqX/kwCsgIaOjmTPX7OMwnBO70N1bay26wa7jfg= Subject key identifier: B8:57:A2:E4:DB:58:41:C2:9D:85:A4:C4:A8:16:79:80:0F:51:0B:C9 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 049C Signing time: Wed 23 Jul 2025 00:21:07 +0000 Manifest this update: Wed 23 Jul 2025 00:21:07 +0000 Manifest next update: Wed 30 Jul 2025 00:21:07 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: bBPWZetXf81wEQ4IsTyAuGYxtzMG1nTEbDjQFExJ978=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Jul 23 00:21:07 2025 GMT Not After : Jul 30 00:21:07 2025 GMT Subject: CN=68802af3-baf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:be:95:ea:65:54:68:4a:6e:50:e0:5b:cc: d9:56:f5:c3:84:7d:4b:47:6d:aa:e9:50:06:df:7f: 79:d9:e2:59:77:f8:0a:72:c9:5d:b1:99:94:ac:fd: e6:0e:48:2f:c2:85:9f:4a:ee:be:d9:a0:d9:27:77: 45:d7:d1:11:69:ca:a9:6c:fe:2b:f0:b6:92:90:bb: 8e:ba:2b:0e:3b:ae:1e:b1:88:74:ff:fb:08:98:a9: 66:e0:b0:fb:96:9c:62:79:d2:9e:90:39:28:07:c1: 19:fa:37:57:2f:67:66:10:21:5e:6e:52:bf:d6:0c: ac:a2:04:a4:a8:cf:c9:4d:6e:ca:b6:5f:18:96:3e: 15:13:d8:80:74:e2:77:4d:b7:9d:d5:45:67:b9:03: 9e:6a:91:66:e9:e6:48:7c:21:d3:a8:06:e4:35:e5: 24:65:27:27:8a:61:43:7e:d3:6e:9c:32:ee:c0:86: 60:c2:69:f3:8e:ec:e1:50:8e:9a:40:11:b2:60:d5: c7:db:98:e2:78:f9:d5:b2:59:7c:cc:90:c3:67:63: da:9f:70:11:15:0d:ee:3b:2c:75:90:96:cc:62:ed: 38:2b:aa:09:84:57:2f:20:05:4e:42:d6:98:e5:4e: f8:a0:72:c1:60:65:57:26:1b:b4:c5:37:65:94:0a: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:57:A2:E4:DB:58:41:C2:9D:85:A4:C4:A8:16:79:80:0F:51:0B:C9 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c9:e6:73:7c:1a:c6:37:92:1e:72:c0:6b:d9:c9:79:47:81: 67:6f:1b:21:ba:68:98:8a:8c:39:1c:96:4b:cb:3b:5e:19:62: 1d:6d:1e:87:98:b6:de:64:1a:ae:98:ca:49:b7:45:e1:01:69: 31:94:d8:e9:49:e9:bb:d6:e9:c2:58:49:18:c0:c5:fc:23:cb: 4c:9c:5b:3b:d9:6e:a0:17:56:2b:fd:58:13:30:9f:1e:56:81: 1d:ed:cc:07:e6:d9:a8:b0:9f:31:e6:84:e0:f0:68:e4:10:70: 1a:23:36:6b:b5:b9:55:c8:90:68:0c:10:06:b5:11:ed:5c:da: 9b:1e:eb:a9:1c:af:9d:80:25:bf:74:ed:9f:f2:1f:bc:ed:ac: b8:91:d1:d0:c5:30:72:c8:7d:f1:91:0d:be:d3:09:1c:be:bf: 55:36:40:f0:c1:9b:39:8f:2b:4b:20:51:64:31:61:bf:a1:14: bd:d0:27:25:b4:ea:e8:7a:2c:68:fb:ec:bd:eb:2a:a8:d2:49: ab:b9:4e:b9:00:72:6f:d5:39:21:a6:ec:85:72:f1:bd:6f:79: 75:92:eb:34:f0:ac:8a:e8:38:3a:ec:d7:8a:d0:29:6d:4b:19: 73:32:39:04:f5:69:ae:de:3c:c8:8d:92:1d:2c:d7:2a:10:af: 44:29:6a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwNzIzMDAyMTA3WhcNMjUwNzMwMDAyMTA3WjAYMRYwFAYD VQQDEw02ODgwMmFmMy1iYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxu+leplVGhKblDgW8zZVvXDhH1LR22q6VAG33952eJZd/gKcsldsZmUrP3m DkgvwoWfSu6+2aDZJ3dF19ERacqpbP4r8LaSkLuOuisOO64esYh0//sImKlm4LD7 lpxiedKekDkoB8EZ+jdXL2dmECFeblK/1gysogSkqM/JTW7Ktl8Ylj4VE9iAdOJ3 Tbed1UVnuQOeapFm6eZIfCHTqAbkNeUkZScnimFDftNunDLuwIZgwmnzjuzhUI6a QBGyYNXH25jiePnVsll8zJDDZ2Pan3ARFQ3uOyx1kJbMYu04K6oJhFcvIAVOQtaY 5U74oHLBYGVXJhu0xTdllAredwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhXouTb WEHCnYWkxKgWeYAPUQvJMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADyeZzfBrGN5IecsBr2cl5R4FnbxshumiYiow5HJZLyzteGWIdbR6H mLbeZBqumMpJt0XhAWkxlNjpSem71unCWEkYwMX8I8tMnFs72W6gF1Yr/VgTMJ8e VoEd7cwH5tmosJ8x5oTg8GjkEHAaIzZrtblVyJBoDBAGtRHtXNqbHuupHK+dgCW/ dO2f8h+87ay4kdHQxTByyH3xkQ2+0wkcvr9VNkDwwZs5jytLIFFkMWG/oRS90Ccl tOroeixo++y96yqo0kmruU65AHJv1TkhpuyFcvG9b3l1kus08KyK6Dg67NeK0Clt SxlzMjkE9Wmu3jzIjZIdLNcqEK9EKWqc -----END CERTIFICATE-----Generated at Wed Jul 23 05:33:58 2025 by rpki-client