$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: MUsTg/lvBRmUi2aWSbgN8H0RUxViq7OqIDRVUAicvEw= Subject key identifier: 96:4C:D4:B0:AB:2D:15:55:80:3B:24:8D:D2:99:04:4B:13:25:0B:93 Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 01BE Signing time: Mon 09 Jun 2025 02:14:46 +0000 Manifest this update: Mon 09 Jun 2025 02:14:45 +0000 Manifest next update: Mon 16 Jun 2025 02:14:45 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: Xnnc655MGRSLvLRE9km9XbqzPR3omWjzNrv/MyFj8Pg=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Jun 9 02:14:45 2025 GMT Not After : Jun 16 02:14:45 2025 GMT Subject: CN=68464396-a9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:f2:43:dc:16:db:8a:7b:e6:90:a5:9a:1a: d1:ca:51:39:28:59:7e:51:cd:f7:2f:aa:1d:0b:76: d1:51:16:58:0f:64:cd:4c:14:6e:f0:de:44:92:b9: 2f:f8:e9:9f:e8:89:23:30:c5:04:45:61:70:c3:c0: f1:b6:92:ad:95:8a:47:97:e3:5b:a6:89:08:76:7f: b6:2c:07:f9:c4:50:a2:41:79:33:b2:e9:3e:51:a3: 52:71:dc:77:52:11:77:3d:b8:bc:66:dc:f5:61:06: 9f:8b:35:29:2d:3b:e3:d2:83:ad:19:ff:18:07:00: 6c:4c:55:37:8e:3c:65:b3:f4:e2:74:f8:fd:7e:6c: 81:96:5b:73:25:a1:06:30:22:8a:93:2d:eb:a0:39: 84:43:8e:55:3c:62:64:ec:d3:68:6d:c3:81:af:48: f2:08:77:33:4b:2a:b3:5f:ea:fe:0c:ca:4e:d2:bb: 9d:14:b0:10:23:99:bb:12:c7:f0:0d:13:b8:d7:32: 4a:8d:e4:01:3e:e4:cc:43:fb:64:50:d2:48:83:08: 4b:6a:0b:db:35:db:51:ac:7d:38:0a:72:e1:25:46: e0:32:bb:28:11:97:a1:8c:04:d5:37:4e:ff:b6:aa: a5:09:d0:be:e4:71:d9:0e:f3:ba:84:3e:bc:18:bc: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4C:D4:B0:AB:2D:15:55:80:3B:24:8D:D2:99:04:4B:13:25:0B:93 X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:44:51:ee:06:7e:fb:7c:fc:51:14:c4:ed:8e:51:80:f0:ab: 04:ad:4b:70:01:78:ea:bb:fc:12:08:06:af:eb:15:2b:48:e1: 8a:77:b5:16:83:b0:a9:c4:dd:b7:50:90:88:81:f7:61:25:cf: cb:0d:38:83:86:c6:83:5e:b8:1b:b9:4c:28:e9:43:f8:28:33: 13:48:8d:8a:a4:46:76:60:a0:d7:4f:d8:c4:ae:6a:20:66:e6: 28:f8:b6:41:51:87:38:ac:44:78:12:4f:fc:d2:0b:48:a3:d0: 08:08:61:4a:97:1a:24:2b:f5:4f:17:b7:8c:6c:c7:ed:ba:6e: b8:b0:a8:c0:07:5a:a1:71:0d:3a:29:f3:79:5e:44:1d:62:3f: 23:4c:04:59:a2:e1:f3:1c:cf:ea:fe:1d:1e:6c:e5:39:8b:76: 6c:9c:7f:d8:f3:cb:3e:cd:c2:6f:5f:bf:ae:9c:e8:c7:c6:64: 29:1d:35:3e:44:a1:33:59:10:04:4a:f7:46:86:d6:76:84:21: 61:6d:a9:0b:29:2c:85:ff:a0:9d:9e:0c:ff:59:d6:d2:f5:32: b4:7b:2e:0a:26:e0:9a:ee:20:44:aa:e3:93:1e:dd:30:41:89: 81:3d:03:9b:4e:87:c5:13:58:2d:9d:52:db:83:51:26:dd:e3: 1c:1c:41:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUwNjA5MDIxNDQ1WhcNMjUwNjE2MDIxNDQ1WjAYMRYwFAYD VQQDEw02ODQ2NDM5Ni1hOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CjyQ9wW24p75pClmhrRylE5KFl+Uc33L6odC3bRURZYD2TNTBRu8N5Ekrkv +Omf6IkjMMUERWFww8DxtpKtlYpHl+NbpokIdn+2LAf5xFCiQXkzsuk+UaNScdx3 UhF3Pbi8Ztz1YQafizUpLTvj0oOtGf8YBwBsTFU3jjxls/TidPj9fmyBlltzJaEG MCKKky3roDmEQ45VPGJk7NNobcOBr0jyCHczSyqzX+r+DMpO0rudFLAQI5m7Esfw DRO41zJKjeQBPuTMQ/tkUNJIgwhLagvbNdtRrH04CnLhJUbgMrsoEZehjATVN07/ tqqlCdC+5HHZDvO6hD68GLzJAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZM1LCr LRVVgDskjdKZBEsTJQuTMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATRFHuBn77fPxRFMTtjlGA8KsErUtwAXjqu/wSCAav6xUrSOGKd7UW g7CpxN23UJCIgfdhJc/LDTiDhsaDXrgbuUwo6UP4KDMTSI2KpEZ2YKDXT9jErmog ZuYo+LZBUYc4rER4Ek/80gtIo9AICGFKlxokK/VPF7eMbMftum64sKjAB1qhcQ06 KfN5XkQdYj8jTARZouHzHM/q/h0ebOU5i3ZsnH/Y88s+zcJvX7+unOjHxmQpHTU+ RKEzWRAESvdGhtZ2hCFhbakLKSyF/6Cdngz/WdbS9TK0ey4KJuCa7iBEquOTHt0w QYmBPQObTofFE1gtnVLbg1Em3eMcHEEv -----END CERTIFICATE-----Generated at Mon Jun 9 22:56:59 2025 by rpki-client