$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: v4lzegc8IHd+jdEOzwo/txVwNV2sqbuvUZLOb8n6tUs= Subject key identifier: A0:94:C5:9F:1F:D1:9D:99:16:E6:0C:33:6D:4C:4C:19:70:48:89:D3 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 048F Signing time: Sat 31 May 2025 00:13:42 +0000 Manifest this update: Sat 31 May 2025 00:13:41 +0000 Manifest next update: Sat 07 Jun 2025 00:13:41 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: pHe6dZKEs0brvfcDZ4cNCPBDdvOp9cKpgeTa5DALwME=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: May 31 00:13:41 2025 GMT Not After : Jun 7 00:13:41 2025 GMT Subject: CN=683a49b5-c8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:6f:d2:ae:5a:b5:fa:6c:fd:1c:61:4b:e1:10: 58:67:1e:98:a3:c5:f1:c2:b8:87:cd:a0:c1:12:b5: ad:6e:42:84:88:75:7a:1a:60:d0:33:b1:0a:61:2b: b0:d5:dc:ee:28:e5:f2:24:02:2b:7f:a2:2f:35:68: f2:66:df:77:4a:c6:6d:87:cb:0a:11:b1:b5:32:b1: bf:80:4c:18:a4:c3:08:5a:9a:6a:c4:e3:f2:1d:96: df:10:e0:03:75:3b:13:08:84:5f:27:7b:de:7a:e3: 35:1a:42:f9:7c:ea:53:df:6a:58:a3:4d:d5:dd:81: 2c:aa:a2:b2:10:59:e0:8f:f0:9e:3d:17:d7:07:e4: 3f:f9:96:6a:87:e3:e5:66:c4:e7:f1:45:ee:81:d0: 56:4c:a5:6e:1a:68:23:d5:20:24:29:f1:60:f4:3c: 12:78:45:18:a0:00:fd:1c:18:51:4f:7f:c7:e5:51: e3:45:b4:c4:c0:23:73:bf:24:ee:f7:41:97:cb:7e: c7:85:02:8b:d5:5c:d8:55:79:01:cc:09:cd:1e:78: 0a:e9:26:4e:b6:a1:4b:c7:dd:bf:07:84:f3:16:df: 97:5c:ca:cf:59:4f:f5:26:e1:bf:be:d8:d8:4f:2f: 3f:ac:0e:d5:9d:f1:fb:2d:72:e8:05:a0:dc:e1:a9: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:C5:9F:1F:D1:9D:99:16:E6:0C:33:6D:4C:4C:19:70:48:89:D3 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:f8:79:3e:10:40:9a:85:d4:2a:fd:fd:ae:b7:e0:71:14: d0:e3:5e:13:4b:e7:48:52:92:5a:45:a3:ab:52:34:1b:17:65: 0e:d9:f4:15:e4:eb:5b:c9:09:39:64:36:c3:30:7b:83:5f:8f: 1c:6d:23:fd:44:32:ef:db:f6:0e:59:a5:b5:27:a0:2d:6b:eb: 48:ec:88:f1:04:4e:1e:ad:b0:27:4c:6e:a4:21:c9:2e:fb:75: f5:b8:da:6e:82:43:89:3e:31:b8:a1:4b:b0:74:4c:00:48:4f: c3:55:1c:95:1d:8f:e9:d3:de:34:6b:22:86:0e:f8:54:6e:a8: f5:d7:41:c5:6b:02:d5:0e:80:de:04:b8:3c:eb:4a:2f:7a:db: aa:39:44:6e:1a:f9:d1:a8:56:3b:9e:58:c4:f1:ac:15:41:fe: 0a:9c:6e:f2:f8:73:b5:bc:3e:75:6c:b9:13:1a:da:52:4e:bb: 70:db:7e:81:4c:27:7f:39:70:ba:40:e4:17:1c:65:5c:02:be: 8f:fb:b6:b9:e6:03:6b:87:51:31:ac:7c:7d:07:b4:99:b0:46: ba:b8:ba:fb:b9:77:06:5b:98:95:b5:70:d3:5a:5c:27:05:c1: 36:56:45:04:9a:32:f1:be:f4:b2:dd:72:2c:30:c4:a5:ca:7f: 69:1f:da:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNTMxMDAxMzQxWhcNMjUwNjA3MDAxMzQxWjAYMRYwFAYD VQQDEw02ODNhNDliNS1jOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+2/Srlq1+mz9HGFL4RBYZx6Yo8XxwriHzaDBErWtbkKEiHV6GmDQM7EKYSuw 1dzuKOXyJAIrf6IvNWjyZt93SsZth8sKEbG1MrG/gEwYpMMIWppqxOPyHZbfEOAD dTsTCIRfJ3veeuM1GkL5fOpT32pYo03V3YEsqqKyEFngj/CePRfXB+Q/+ZZqh+Pl ZsTn8UXugdBWTKVuGmgj1SAkKfFg9DwSeEUYoAD9HBhRT3/H5VHjRbTEwCNzvyTu 90GXy37HhQKL1VzYVXkBzAnNHngK6SZOtqFLx92/B4TzFt+XXMrPWU/1JuG/vtjY Ty8/rA7VnfH7LXLoBaDc4alsxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCUxZ8f 0Z2ZFuYMM21MTBlwSInTMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2B/h5PhBAmoXUKv39rrfgcRTQ414TS+dIUpJaRaOrUjQbF2UO2fQV 5OtbyQk5ZDbDMHuDX48cbSP9RDLv2/YOWaW1J6Ata+tI7IjxBE4erbAnTG6kIcku +3X1uNpugkOJPjG4oUuwdEwASE/DVRyVHY/p0940ayKGDvhUbqj110HFawLVDoDe BLg860ovetuqOURuGvnRqFY7nljE8awVQf4KnG7y+HO1vD51bLkTGtpSTrtw236B TCd/OXC6QOQXHGVcAr6P+7a55gNrh1ExrHx9B7SZsEa6uLr7uXcGW5iVtXDTWlwn BcE2VkUEmjLxvvSy3XIsMMSlyn9pH9rS -----END CERTIFICATE-----Generated at Sat May 31 17:31:56 2025 by rpki-client