$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: gkLfLMgMC96a+h746ecYvTHNchSaudle4DNDquNhjTE= Subject key identifier: 22:52:3D:72:47:69:31:4F:7F:76:45:8E:40:A0:1E:89:A6:AA:7F:F6 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 44 Signing time: Sat 31 May 2025 07:00:30 +0000 Manifest this update: Sat 31 May 2025 07:00:29 +0000 Manifest next update: Sat 07 Jun 2025 07:00:29 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: /s5QiZpYRs8+Y0jexGZIt1PypDCh7VFLLYK8YBTCzZM=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: May 31 07:00:29 2025 GMT Not After : Jun 7 07:00:29 2025 GMT Subject: CN=683aa90e-a086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:2c:a3:27:03:21:b8:94:7f:74:9f:8b:6d: 68:0e:2b:d1:ac:c4:e0:a3:ca:1f:b8:7f:74:84:5d: fa:88:3e:a9:bc:ad:41:e0:0b:66:ca:3d:c1:d1:7c: 5e:97:86:9c:7f:24:9c:7c:59:bf:da:89:2c:46:20: da:72:e6:ac:f8:45:c4:c9:1f:70:65:55:39:fb:9f: 9c:b4:80:e5:bb:41:85:14:cd:1a:5e:d4:72:8d:11: f8:c9:37:42:45:51:c3:b4:0d:e5:71:61:3a:db:ca: e2:ff:dd:34:c9:38:06:f3:18:76:f6:cc:4c:1d:30: 97:c5:70:2f:f4:d5:2b:d6:11:e4:8f:a4:e8:23:0f: 5d:b7:7a:81:d6:5f:8d:87:42:6a:06:6f:7f:00:75: 67:a5:2c:10:14:7d:99:ec:49:52:04:78:4c:cf:88: 9d:8e:8f:af:81:b0:ca:d7:b6:ba:2e:46:a7:32:a6: 12:71:c9:a1:94:e6:e3:e0:dd:88:02:41:21:0e:2a: 2a:31:f4:c2:cb:21:7d:bd:91:c6:02:d3:33:20:e0: 2a:70:d5:5c:9c:a7:40:e3:0f:71:f5:bd:3d:0f:9e: 49:dd:27:45:18:ca:34:89:ec:8f:15:0d:ae:0e:05: c0:6a:6d:b7:05:03:b3:71:9b:00:a0:eb:96:bd:16: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:52:3D:72:47:69:31:4F:7F:76:45:8E:40:A0:1E:89:A6:AA:7F:F6 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d1:fb:f4:f4:bd:ca:05:73:3f:91:8a:8c:2b:d3:3a:79:27: 73:0a:33:60:08:84:5b:ad:11:6f:73:21:a4:ed:e6:8f:cb:cf: 43:aa:a0:36:41:b2:cb:33:70:19:60:81:2b:aa:a1:ef:2c:c6: 26:fa:ed:e9:52:b1:09:57:bc:aa:2b:f1:61:da:93:55:c8:e3: a6:4e:88:4e:b5:05:77:40:cc:25:a1:6d:b2:00:5c:0d:51:2e: c5:42:eb:13:ee:1e:81:e3:f1:a9:f9:05:e4:0b:73:26:e1:51: e7:95:4c:14:a2:83:73:9d:0a:14:4f:22:0b:f8:02:3a:70:a0: da:01:3f:d1:6c:b0:bb:c3:c4:af:47:d1:ac:25:99:ac:63:eb: 7b:57:ea:62:33:86:31:9a:5a:72:e6:00:11:7d:63:7c:99:7b: af:73:02:ab:1f:f5:d6:09:72:57:75:c4:e4:6a:2c:9e:31:ce: 5d:9e:9d:59:06:76:49:20:33:1e:fb:c6:9f:9b:5f:cf:99:8e: 80:6a:ba:05:ed:f1:8f:8e:74:79:3e:54:60:af:1c:f7:b6:3f: 46:7f:a3:77:f7:8b:cd:8b:f9:0b:a5:f1:c5:58:80:20:93:31: 67:9d:d6:83:c2:05:d1:30:d0:1f:aa:f1:83:52:73:18:ef:04: 05:f4:1b:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NCRTExMC8GA1UEBRMoOUExNjI0RjQ2MDgyRjU0QUM1Nzc4ODU5RTIyNkJEM0JB NjkwMjNGNDAeFw0yNTA1MzEwNzAwMjlaFw0yNTA2MDcwNzAwMjlaMBgxFjAUBgNV BAMTDTY4M2FhOTBlLWEwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/mCyjJwMhuJR/dJ+LbWgOK9GsxOCjyh+4f3SEXfqIPqm8rUHgC2bKPcHRfF6X hpx/JJx8Wb/aiSxGINpy5qz4RcTJH3BlVTn7n5y0gOW7QYUUzRpe1HKNEfjJN0JF UcO0DeVxYTrbyuL/3TTJOAbzGHb2zEwdMJfFcC/01SvWEeSPpOgjD123eoHWX42H QmoGb38AdWelLBAUfZnsSVIEeEzPiJ2Oj6+BsMrXtrouRqcyphJxyaGU5uPg3YgC QSEOKiox9MLLIX29kcYC0zMg4Cpw1Vycp0DjD3H1vT0PnkndJ0UYyjSJ7I8VDa4O BcBqbbcFA7NxmwCg65a9Fn3zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIlI9ckdp MU9/dkWOQKAeiaaqf/YwHwYDVR0jBBgwFoAUmhYk9GCC9UrFd4hZ4ia9O6aQI/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0JFLzgzQkE4N0FFRDdD MjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWhZazlHQ0M5VXJGZDRoWjRpYTlPNmFRSV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0JFLzgzQkE4N0FFRDdDMjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVy RmQ0aFo0aWE5TzZhUUlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHR+/T0vcoFcz+Riowr0zp5J3MKM2AIhFutEW9zIaTt5o/Lz0OqoDZB ssszcBlggSuqoe8sxib67elSsQlXvKor8WHak1XI46ZOiE61BXdAzCWhbbIAXA1R LsVC6xPuHoHj8an5BeQLcybhUeeVTBSig3OdChRPIgv4AjpwoNoBP9FssLvDxK9H 0awlmaxj63tX6mIzhjGaWnLmABF9Y3yZe69zAqsf9dYJcld1xORqLJ4xzl2enVkG dkkgMx77xp+bX8+ZjoBqugXt8Y+OdHk+VGCvHPe2P0Z/o3f3i82L+Qul8cVYgCCT MWed1oPCBdEw0B+q8YNScxjvBAX0G6s= -----END CERTIFICATE-----Generated at Sat May 31 17:22:12 2025 by rpki-client