$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: SMVdk11SWXBA/ail7dFPkoZXQC8TQKuGctPcJi54Oxo= Subject key identifier: 64:AB:3D:78:6C:13:61:CA:AC:38:4A:DC:C9:01:B1:0E:D1:F4:B2:B2 Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: 22 Signing time: Thu 05 Jun 2025 07:17:07 +0000 Manifest this update: Thu 05 Jun 2025 07:17:07 +0000 Manifest next update: Thu 12 Jun 2025 07:17:07 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: Qp7X6QfwaYiLQthoSIMGVBVkBUDibswh1AyCLQ/rjdg=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: wOxc2mRdKwnrkxXakYEXBYgQ1Llp1nvGe0GOb+4AM30=) 3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: AY2s5T5nFgYlJrJemH+atWCYX2gv1ohpQJNZYKJbmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: Jun 5 07:17:07 2025 GMT Not After : Jun 12 07:17:07 2025 GMT Subject: CN=68414473-5880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:92:41:34:d0:28:68:61:af:80:7f:b6:d8:84: ea:b9:8d:50:1e:49:93:d2:54:ea:f1:84:94:ea:57: 14:d8:62:50:bc:13:dd:f6:81:22:98:3d:87:c3:b4: 7f:b7:72:6c:64:f3:03:ca:23:58:29:cf:8d:30:66: aa:e7:a4:24:e4:26:2e:66:b0:e7:af:1e:31:c3:ee: 5f:7a:9a:c8:ca:02:c2:47:b6:af:44:21:da:f5:45: 30:5b:76:b4:f7:15:3e:9f:b3:6b:cf:6d:7e:4f:7a: fa:a8:80:17:91:6c:ad:1d:b8:f8:ac:66:4b:ca:bd: dc:55:cf:e4:5c:f2:d6:c0:a1:cd:3b:44:3e:0c:3d: 19:a8:8d:51:4a:ff:fe:00:d7:ad:ea:da:58:24:c0: 4c:c9:c8:fe:98:9c:d1:5b:2e:e7:56:40:72:ee:79: a2:52:50:26:3b:39:32:cf:e8:92:29:55:98:92:b4: 9f:9c:e7:4c:77:f2:0b:e7:d4:59:ed:b1:03:c7:06: 85:ca:a6:2e:c7:80:f1:26:bc:0f:35:16:6e:0c:33: 26:1b:77:64:3f:f7:33:e7:51:f3:f0:16:fc:65:60: 97:91:dd:ce:62:c0:47:48:73:dd:2d:d7:83:a2:46: 7b:10:bf:e4:6e:b0:75:f8:0e:a2:91:89:19:8c:14: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AB:3D:78:6C:13:61:CA:AC:38:4A:DC:C9:01:B1:0E:D1:F4:B2:B2 X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ce:53:4a:64:de:d1:ae:9c:8c:64:de:3b:4f:9e:c5:b6:7b: 39:01:96:9d:fb:f8:94:85:23:30:95:b4:3a:3f:9f:9f:8f:79: a0:1c:4e:97:4b:df:d9:c4:7d:65:e8:22:bd:2c:4e:05:33:ae: 71:07:d7:66:25:75:2c:7a:14:7f:24:e9:c5:b2:93:fd:d2:3d: c7:5d:b9:ca:eb:72:a0:f0:01:8f:f3:03:f7:f9:92:97:9b:69: 08:7b:50:6d:25:a5:13:ac:b2:ca:d1:98:55:5f:8b:e3:c7:7c: f1:2b:d8:0a:4d:c5:11:5a:ba:cc:b5:2d:56:b9:90:dd:20:32: 5a:dc:24:32:b6:b7:39:46:76:1c:8d:92:ee:15:55:30:6a:9b: 0f:05:a0:00:2c:33:f2:64:5e:a6:44:41:62:63:d6:a2:90:fc: 46:ba:c4:b3:18:2f:38:03:90:75:f5:64:c3:98:23:55:2e:13: 04:b1:f9:99:62:51:c9:4e:8e:21:c8:1d:a8:1b:8c:62:38:c4: e8:61:eb:57:d3:ba:8e:62:d6:07:31:5d:32:67:d7:e9:3d:ff: 54:8b:33:5c:11:23:89:28:a5:05:b8:af:0b:8a:28:85:57:66: ea:f1:9d:6c:90:3b:66:d3:0a:63:24:81:f7:58:d4:c4:63:53: d8:1f:e1:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0MwODExMC8GA1UEBRMoMzIxRUVGQjgwODUxRkY4MkZFQjdDQjZDMDhBOTRGNURE MkQ5MjcwRDAeFw0yNTA2MDUwNzE3MDdaFw0yNTA2MTIwNzE3MDdaMBgxFjAUBgNV BAMTDTY4NDE0NDczLTU4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1kkE00ChoYa+Af7bYhOq5jVAeSZPSVOrxhJTqVxTYYlC8E932gSKYPYfDtH+3 cmxk8wPKI1gpz40wZqrnpCTkJi5msOevHjHD7l96msjKAsJHtq9EIdr1RTBbdrT3 FT6fs2vPbX5PevqogBeRbK0duPisZkvKvdxVz+Rc8tbAoc07RD4MPRmojVFK//4A 163q2lgkwEzJyP6YnNFbLudWQHLueaJSUCY7OTLP6JIpVZiStJ+c50x38gvn1Fnt sQPHBoXKpi7HgPEmvA81Fm4MMyYbd2Q/9zPnUfPwFvxlYJeR3c5iwEdIc90t14Oi RnsQv+RusHX4DqKRiRmMFLg7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZKs9eGwT YcqsOErcyQGxDtH0srIwHwYDVR0jBBgwFoAUMh7vuAhR/4L+t8tsCKlPXdLZJw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQzA4L0FGRkMwREU0MTE3 QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWg3dnVBaFJfNEwtdDh0c0NLbFBYZExaSncwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz QzA4L0FGRkMwREU0MTE3QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRM LXQ4dHNDS2xQWGRMWkp3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADrOU0pk3tGunIxk3jtPnsW2ezkBlp37+JSFIzCVtDo/n5+PeaAcTpdL 39nEfWXoIr0sTgUzrnEH12YldSx6FH8k6cWyk/3SPcdducrrcqDwAY/zA/f5kpeb aQh7UG0lpROsssrRmFVfi+PHfPEr2ApNxRFausy1LVa5kN0gMlrcJDK2tzlGdhyN ku4VVTBqmw8FoAAsM/JkXqZEQWJj1qKQ/Ea6xLMYLzgDkHX1ZMOYI1UuEwSx+Zli UclOjiHIHagbjGI4xOhh61fTuo5i1gcxXTJn1+k9/1SLM1wRI4kopQW4rwuKKIVX ZurxnWyQO2bTCmMkgfdY1MRjU9gf4UU= -----END CERTIFICATE-----Generated at Thu Jun 5 19:21:19 2025 by rpki-client