$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: zoAe1WYub3xMG/ISE3JXerKkgpSvpdLdOd0sADGWWb8= Subject key identifier: 35:28:BB:B3:56:C9:56:E7:4A:59:E6:28:2F:35:AD:B7:88:92:76:D6 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09C3 Signing time: Fri 30 May 2025 20:09:15 +0000 Manifest this update: Fri 30 May 2025 20:09:14 +0000 Manifest next update: Fri 06 Jun 2025 20:09:14 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: k4G1tcwXIEE5Q3H7LHgohVRIwfnlM3Eb429Kr8lGXQI=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: May 30 20:09:14 2025 GMT Not After : Jun 6 20:09:14 2025 GMT Subject: CN=683a106b-4688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:66:1c:10:70:6c:f1:ea:50:6c:59:e3:3d:84: aa:b4:a7:70:fc:27:16:3f:fc:4c:64:6c:62:eb:05: 89:47:dd:c2:9d:9c:1a:b0:a9:4d:da:be:b5:06:cf: 1d:b3:43:d2:c5:68:d3:ac:3b:0a:5a:b1:a3:41:8f: 7b:f2:02:9b:98:f5:2c:e1:21:4c:7a:4b:77:ba:6a: 7c:f9:d9:ba:dc:74:0d:8e:13:b5:29:4c:c6:e7:15: 0d:3f:e7:04:63:e9:3b:d5:ad:c7:41:64:07:c8:bb: bd:00:be:c7:d0:ff:f2:43:e3:14:78:31:d3:9e:37: af:1f:90:61:21:31:85:09:3c:dc:10:6e:66:66:2f: 64:88:96:8d:74:a8:f3:7b:aa:9a:aa:6b:a5:c0:85: 22:3c:a2:57:fd:cb:52:c0:1a:8c:e4:5c:e9:6a:81: 81:b2:f5:8a:c9:88:46:46:79:75:8f:6c:c8:8b:bc: ac:f9:a6:ab:31:0b:bc:ca:bb:5a:84:10:6c:a1:a9: e6:13:01:d0:5f:50:77:15:36:48:bf:79:91:29:ee: 4e:06:1a:8a:5d:b0:c2:d7:98:da:98:26:d2:4e:eb: 1b:65:2a:55:c7:3c:76:5d:22:d3:1f:3d:3b:51:28: cf:45:77:6c:89:39:6a:8d:25:6b:d3:e5:89:5e:1d: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:BB:B3:56:C9:56:E7:4A:59:E6:28:2F:35:AD:B7:88:92:76:D6 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0a:9a:fc:1d:c9:7e:c6:ee:b0:35:7f:67:46:bc:81:c4:b8: 8b:53:d9:94:d0:9a:df:a0:56:ae:e5:73:58:ea:50:d4:30:d8: 51:5e:eb:6c:68:fe:50:3b:2b:c9:72:8b:ef:be:bb:54:32:58: 16:b3:2e:86:41:f8:37:c3:27:27:c0:4c:3a:2c:cb:7e:30:5f: 97:f1:0b:cb:32:b8:4b:80:f3:45:84:bb:d9:d9:43:74:c6:20: 6f:4d:00:8d:48:c4:d6:fd:d4:6e:d9:e3:52:2c:52:64:26:6b: e9:f6:c6:56:f0:fc:de:9a:90:8c:ed:41:c8:e6:df:ce:6b:70: 52:c9:b7:75:67:84:dc:75:af:85:46:6f:5b:4b:39:6f:cb:de: 67:68:ba:d4:fa:c0:20:e9:5d:6c:df:35:ba:28:6b:9e:20:4f: e7:b9:75:ac:6b:ed:63:39:43:11:a3:33:40:12:d7:a2:9b:ac: 4e:5f:bd:38:33:97:ec:86:3b:34:04:b8:a8:9f:1d:5d:68:72: 3f:53:cd:18:cf:61:21:b7:e0:36:73:e3:31:a1:60:82:1d:1f: 64:84:40:a7:6f:58:50:b6:fa:97:13:fe:ba:c1:8b:e2:18:ce: 59:9c:1c:97:2f:aa:f4:a8:01:da:27:74:9a:4f:a1:ac:6a:28: 05:30:07:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwNTMwMjAwOTE0WhcNMjUwNjA2MjAwOTE0WjAYMRYwFAYD VQQDEw02ODNhMTA2Yi00Njg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+mYcEHBs8epQbFnjPYSqtKdw/CcWP/xMZGxi6wWJR93CnZwasKlN2r61Bs8d s0PSxWjTrDsKWrGjQY978gKbmPUs4SFMekt3ump8+dm63HQNjhO1KUzG5xUNP+cE Y+k71a3HQWQHyLu9AL7H0P/yQ+MUeDHTnjevH5BhITGFCTzcEG5mZi9kiJaNdKjz e6qaqmulwIUiPKJX/ctSwBqM5FzpaoGBsvWKyYhGRnl1j2zIi7ys+aarMQu8yrta hBBsoanmEwHQX1B3FTZIv3mRKe5OBhqKXbDC15jamCbSTusbZSpVxzx2XSLTHz07 USjPRXdsiTlqjSVr0+WJXh0awwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUou7NW yVbnSlnmKC81rbeIknbWMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJCpr8Hcl+xu6wNX9nRryBxLiLU9mU0JrfoFau5XNY6lDUMNhRXuts aP5QOyvJcovvvrtUMlgWsy6GQfg3wycnwEw6LMt+MF+X8QvLMrhLgPNFhLvZ2UN0 xiBvTQCNSMTW/dRu2eNSLFJkJmvp9sZW8PzempCM7UHI5t/Oa3BSybd1Z4Tcda+F Rm9bSzlvy95naLrU+sAg6V1s3zW6KGueIE/nuXWsa+1jOUMRozNAEteim6xOX704 M5fshjs0BLionx1daHI/U80Yz2Eht+A2c+MxoWCCHR9khECnb1hQtvqXE/66wYvi GM5ZnByXL6r0qAHaJ3SaT6GsaigFMAfT -----END CERTIFICATE-----Generated at Sat May 31 17:44:12 2025 by rpki-client