$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: StmVAsfIWaFWrb85q/1d9H8+vqmvY8gYbYP9gtjX9BM= Subject key identifier: 20:AC:F4:1C:21:19:ED:EC:19:D9:86:A2:1A:94:D9:C4:57:1A:22:A9 Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 068B Signing time: Fri 30 May 2025 22:33:25 +0000 Manifest this update: Fri 30 May 2025 22:33:25 +0000 Manifest next update: Fri 06 Jun 2025 22:33:25 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: SAqv11F0EUC/Q7nNdvTPiY0cPwh7enfsK1Xx+FZ4H+0=) 2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Kmy121XzUGh8ewwF3KZSeQZhERtI3ipUIuwTYhIH4NM=) 3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: h+i7d4l1n6vcg20ldi1OzleaWsx0vPPuUjmVScWRXXI=) 4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: PifTuQf9ETmHsQRTOYGkROLV+pof9sWcOvRDOEXvkJE=) 5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9n7ji7mRbxqw5LbmJKOtKEWm7L5OaLEva61LWM3vFFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: May 30 22:33:25 2025 GMT Not After : Jun 6 22:33:25 2025 GMT Subject: CN=683a3235-0edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:f4:8e:a4:1c:b2:97:3e:f8:82:1b:22:00: 71:75:05:a2:51:4f:bb:fe:dc:80:c4:c1:04:bf:90: e6:aa:81:a5:50:2f:5c:c0:4f:7e:22:8f:59:24:a1: 7b:ee:ee:54:a5:3a:e0:5a:7c:9d:ec:84:92:0d:26: d6:9c:46:b3:56:9b:be:cf:e5:59:4e:a1:10:25:b1: e2:96:a9:da:14:52:42:05:c4:22:d9:71:55:20:4d: d6:ed:cb:91:bd:01:5b:58:c1:ae:78:a7:f0:74:54: 8d:01:f2:86:3e:c1:dc:2a:af:36:7c:c8:f8:6f:d9: 21:d4:5f:5d:a9:b7:d3:a8:29:0d:90:27:02:95:75: 23:b3:86:9c:27:ed:98:41:a5:27:8c:bd:96:41:8a: ca:aa:ff:b3:a0:93:9b:d3:0f:29:87:e9:7e:16:a4: 05:e3:9b:16:52:05:5a:63:b2:e7:28:48:f8:62:59: 21:72:48:4f:10:0c:6f:28:9a:e9:34:ea:43:5f:09: 9f:a3:2d:77:9d:c0:aa:15:77:29:d9:c0:70:48:16: 62:c0:e1:ae:d1:e4:33:4c:78:13:bc:f6:d2:95:7a: 58:e8:c0:5d:ce:3a:d9:7e:50:7a:78:9b:ba:31:e3: 0b:25:26:8a:67:99:07:ea:d5:e3:d9:c6:69:da:a1: 52:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:F4:1C:21:19:ED:EC:19:D9:86:A2:1A:94:D9:C4:57:1A:22:A9 X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:15:7f:be:16:83:37:dc:d0:be:ab:c4:e1:8e:eb:e2:75:15: 7a:bf:d1:d7:9f:0a:86:7e:d8:ce:72:ef:3f:5b:75:0d:ab:fe: 50:ca:54:94:53:5a:d3:2f:a5:46:3d:8d:43:1d:bd:88:3d:6c: 0c:31:4a:d0:65:80:32:b6:a2:7a:0f:52:89:a9:ba:9c:3e:2d: d5:a0:4b:f4:d4:0f:b6:b1:25:d7:18:1a:3f:e8:46:23:f9:36: 6b:4a:2e:63:96:50:13:c7:45:0e:7d:25:56:10:ff:97:f4:d0: e6:94:10:bf:51:d0:cd:b6:e7:e6:41:d5:f0:00:80:21:64:60: ee:36:93:1e:bd:d0:b4:0b:1e:ad:8b:a8:e8:31:3b:d6:b7:e2: 53:5c:92:02:13:39:17:fe:ad:6d:ad:a2:7a:ba:da:8c:bc:b0: e4:a5:97:41:f4:86:38:2d:e9:a1:f0:fa:4c:b3:c2:f7:c1:cd: f5:1a:4c:42:d9:43:75:20:1a:ef:8f:87:c4:ca:0c:4d:f9:c7: 42:1a:39:c7:81:11:bc:60:41:c0:d7:84:e4:76:a2:19:ba:ac: e7:93:40:95:21:34:ec:77:71:64:84:5d:a3:43:e4:f9:09:6b: 7c:ee:15:8d:50:71:cd:5c:5c:8d:8d:05:1f:3c:b3:c6:54:49: a0:ab:7c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUwNTMwMjIzMzI1WhcNMjUwNjA2MjIzMzI1WjAYMRYwFAYD VQQDEw02ODNhMzIzNS0wZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WP0jqQcspc++IIbIgBxdQWiUU+7/tyAxMEEv5DmqoGlUC9cwE9+Io9ZJKF7 7u5UpTrgWnyd7ISSDSbWnEazVpu+z+VZTqEQJbHilqnaFFJCBcQi2XFVIE3W7cuR vQFbWMGueKfwdFSNAfKGPsHcKq82fMj4b9kh1F9dqbfTqCkNkCcClXUjs4acJ+2Y QaUnjL2WQYrKqv+zoJOb0w8ph+l+FqQF45sWUgVaY7LnKEj4YlkhckhPEAxvKJrp NOpDXwmfoy13ncCqFXcp2cBwSBZiwOGu0eQzTHgTvPbSlXpY6MBdzjrZflB6eJu6 MeMLJSaKZ5kH6tXj2cZp2qFSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCs9Bwh Ge3sGdmGohqU2cRXGiKpMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWFX++FoM33NC+q8ThjuvidRV6v9HXnwqGftjOcu8/W3UNq/5QylSU U1rTL6VGPY1DHb2IPWwMMUrQZYAytqJ6D1KJqbqcPi3VoEv01A+2sSXXGBo/6EYj +TZrSi5jllATx0UOfSVWEP+X9NDmlBC/UdDNtufmQdXwAIAhZGDuNpMevdC0Cx6t i6joMTvWt+JTXJICEzkX/q1traJ6utqMvLDkpZdB9IY4Lemh8PpMs8L3wc31GkxC 2UN1IBrvj4fEygxN+cdCGjnHgRG8YEHA14TkdqIZuqznk0CVITTsd3FkhF2jQ+T5 CWt87hWNUHHNXFyNjQUfPLPGVEmgq3zV -----END CERTIFICATE-----Generated at Sat May 31 17:39:18 2025 by rpki-client