$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: EZ+sIiHw3KfJZ8tlcbSGHpUD8Mn3pKNPqu5Y0Kc7h8k= Subject key identifier: C4:87:F8:13:F3:E0:95:CB:60:93:64:8D:76:91:B4:89:AB:62:9E:31 Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 01C0 Signing time: Fri 13 Jun 2025 02:09:00 +0000 Manifest this update: Fri 13 Jun 2025 02:08:59 +0000 Manifest next update: Fri 20 Jun 2025 02:08:59 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: BaH30NS9y1UvLJ0bhCp1gLYhR9leLq0KrToALuBCiAE=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Jun 13 02:08:59 2025 GMT Not After : Jun 20 02:08:59 2025 GMT Subject: CN=684b883c-fa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:53:ee:c8:43:2a:24:0e:58:8b:29:8a:44:22: 03:b1:7b:5d:d2:99:26:53:32:cd:b6:d0:2e:f1:ed: bc:78:ec:2c:3a:41:fd:a9:66:9b:63:f3:79:0f:61: e7:67:14:87:24:eb:87:92:13:42:ff:e2:0d:84:8f: 52:de:84:70:d2:a1:94:3a:ee:58:f2:61:13:da:b4: 47:12:a3:1f:41:ad:0c:03:70:b1:51:ca:fe:8f:64: 44:71:a2:e3:65:a8:a5:9a:1f:e4:c1:0a:cb:76:b4: 2c:22:df:d1:c5:26:8d:f4:f4:7d:47:8e:70:88:e2: 3d:dd:53:fc:86:20:6d:09:53:d1:7e:b8:7b:39:fa: cb:00:b3:11:ee:c6:5f:6e:2e:dc:87:4c:9e:af:ab: a7:7f:94:4c:a9:ec:92:e0:c4:f9:b8:b4:23:4f:d6: af:e3:63:25:66:1d:45:8c:3a:d4:d6:bf:88:a0:a7: d9:d9:ca:d0:09:9a:8e:98:45:c4:3e:d0:82:3d:e6: 86:2c:50:a4:d6:cb:95:64:dd:e5:ae:40:92:0a:56: c0:82:eb:30:65:17:3b:7e:5c:72:75:77:80:07:c5: b3:2f:c7:c5:c9:16:b3:3f:a9:ca:a8:cd:21:d6:39: 40:14:bf:38:5e:47:63:dc:d4:88:c5:c6:c8:a1:9d: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:87:F8:13:F3:E0:95:CB:60:93:64:8D:76:91:B4:89:AB:62:9E:31 X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ef:60:ea:98:c4:3c:5b:a0:42:80:b4:21:20:0a:d9:b4:cb: b9:f3:59:90:30:7e:ea:a6:62:37:37:e3:90:85:61:c6:3c:e4: e4:71:6d:5e:92:27:ed:66:ab:7a:7d:73:af:d3:fd:71:84:a4: 65:3f:e8:f2:97:56:18:be:f9:2f:d2:5b:26:5a:eb:e2:76:34: 16:58:d1:c6:fc:47:6a:a6:7b:50:01:78:49:1c:69:ec:3d:1e: 3d:d4:22:7e:7b:68:af:c7:56:a7:0b:7f:ae:41:c2:9d:36:16: 37:24:9a:26:2d:a1:84:58:33:87:52:55:a9:4b:cf:76:6f:45: 6f:77:c6:f3:cb:87:7c:92:78:0e:91:f0:e1:7a:9f:56:e3:9a: 93:3b:fe:81:9a:65:8f:58:a0:fa:c0:97:79:c0:40:08:1e:e3: 4b:17:22:ee:fd:cc:c1:d7:61:37:3f:aa:ee:68:37:c6:e9:08: 33:e2:28:29:9c:69:e4:c2:ca:a9:bf:30:dd:8f:32:47:e1:fa: 4e:2c:39:16:46:44:9b:2b:c0:b2:3e:bf:62:66:12:68:91:62: 84:2b:b2:63:a9:83:de:e6:ff:38:29:f7:dd:ec:b4:a2:a6:17: 7a:94:f2:fc:f1:fb:35:31:4c:d1:c1:f9:66:00:61:fe:44:2b: b0:50:52:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUwNjEzMDIwODU5WhcNMjUwNjIwMDIwODU5WjAYMRYwFAYD VQQDEw02ODRiODgzYy1mYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FPuyEMqJA5YiymKRCIDsXtd0pkmUzLNttAu8e28eOwsOkH9qWabY/N5D2Hn ZxSHJOuHkhNC/+INhI9S3oRw0qGUOu5Y8mET2rRHEqMfQa0MA3CxUcr+j2REcaLj Zailmh/kwQrLdrQsIt/RxSaN9PR9R45wiOI93VP8hiBtCVPRfrh7OfrLALMR7sZf bi7ch0yer6unf5RMqeyS4MT5uLQjT9av42MlZh1FjDrU1r+IoKfZ2crQCZqOmEXE PtCCPeaGLFCk1suVZN3lrkCSClbAguswZRc7flxydXeAB8WzL8fFyRazP6nKqM0h 1jlAFL84Xkdj3NSIxcbIoZ2/2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSH+BPz 4JXLYJNkjXaRtImrYp4xMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE72DqmMQ8W6BCgLQhIArZtMu581mQMH7qpmI3N+OQhWHGPOTkcW1e kiftZqt6fXOv0/1xhKRlP+jyl1YYvvkv0lsmWuvidjQWWNHG/EdqpntQAXhJHGns PR491CJ+e2ivx1anC3+uQcKdNhY3JJomLaGEWDOHUlWpS892b0Vvd8bzy4d8kngO kfDhep9W45qTO/6BmmWPWKD6wJd5wEAIHuNLFyLu/czB12E3P6ruaDfG6Qgz4igp nGnkwsqpvzDdjzJH4fpOLDkWRkSbK8CyPr9iZhJokWKEK7JjqYPe5v84Kffd7LSi phd6lPL88fs1MUzRwflmAGH+RCuwUFI/ -----END CERTIFICATE-----Generated at Fri Jun 13 06:49:57 2025 by rpki-client