$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json) Hash identifier: t//k90DispikOUbrsPmepRoQ5+aWOsDJk+HpNdM5DbM= Subject key identifier: EA:6C:B2:7D:4B:31:7D:DF:27:8D:C9:1B:1B:6C:1F:8A:86:3C:BF:6F Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft Manifest number: 0597 Signing time: Fri 30 May 2025 23:25:21 +0000 Manifest this update: Fri 30 May 2025 23:25:21 +0000 Manifest next update: Fri 06 Jun 2025 23:25:21 +0000 Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: vB4IvVc3dXPw7WWE8nzDCavv5sA/5UQBLi+R8O4pJcU=) 2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: C2RsYbuvVkPn9nhOkeMiqyxQvhJHdbdxyne9j3bxktw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Validity Not Before: May 30 23:25:21 2025 GMT Not After : Jun 6 23:25:21 2025 GMT Subject: CN=683a3e61-59bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:e5:ee:55:a7:6a:f0:cd:43:40:73:77:40: c6:d4:fa:f8:0e:af:62:ea:27:b9:8c:7f:d9:26:49: a4:26:da:53:42:0c:e3:38:26:22:0e:22:a8:2b:ca: ff:fd:b3:98:71:f0:06:a4:60:64:f6:dc:f9:87:e2: b1:3a:1a:e0:d1:65:58:c5:26:fc:94:e9:39:16:b3: 39:9e:d3:c5:8e:11:45:06:1d:d3:63:7e:5d:67:e9: 03:74:8f:f4:b8:49:a8:8d:c7:c7:ec:f4:ad:bd:b5: 3c:e5:bd:93:55:9d:41:13:f5:a1:ce:9d:78:cd:53: 80:74:bc:bc:49:44:43:21:32:32:93:df:2d:c3:a7: 18:ac:ce:a6:60:ef:70:39:f8:e0:b6:24:a9:2b:83: 62:5b:18:02:aa:38:9e:6c:99:78:84:4b:ec:dc:80: 52:3b:f0:16:17:0c:62:68:16:f0:f2:b3:2d:72:25: 67:21:29:8a:3d:e9:8c:db:f2:95:ce:00:bd:32:69: 92:bd:e1:ef:b7:50:6d:0f:a2:9a:45:79:6f:c7:8b: b3:3c:76:a4:8a:71:86:e5:3c:b6:91:2c:17:de:7a: 41:5f:d6:17:30:ad:b9:08:45:81:b5:ec:a6:e2:4d: cc:cb:76:d3:c8:04:4e:5c:7c:50:30:1e:d7:3a:58: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6C:B2:7D:4B:31:7D:DF:27:8D:C9:1B:1B:6C:1F:8A:86:3C:BF:6F X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:6a:af:41:dc:d8:14:f0:38:ac:33:9c:00:09:21:d6:7e:a7: ce:fb:a6:ac:ea:5c:69:5e:5c:88:63:45:72:c8:db:19:89:c6: fb:f1:f1:f7:30:9a:d4:4a:e7:b8:f0:a4:95:d4:db:16:1b:57: 1e:60:8c:5e:ce:55:46:45:31:02:c6:75:01:56:4c:bf:b8:fd: 72:c8:35:33:ff:81:78:e1:7d:17:05:3d:29:ac:56:fa:2a:2e: 08:5d:75:0a:a1:15:75:66:93:8b:f3:76:46:b2:46:4b:0a:5e: 37:d0:47:2d:80:c0:09:f7:dd:4d:7b:b8:9c:55:9b:ca:03:95: d4:c5:39:a7:27:7a:a3:fe:33:79:13:d5:b3:ad:e7:77:54:88: c0:91:85:06:2f:94:1e:66:e8:da:16:dd:79:9b:2b:e4:bc:b3: 4d:43:09:1a:db:b6:cd:cb:6c:b5:ac:4c:5a:d3:50:ab:88:4a: 4a:1d:5e:50:d9:c2:ce:96:df:1a:20:3d:59:8a:02:2d:72:25: 2f:22:e0:39:b7:36:b2:4d:b5:b7:2f:59:2c:7a:64:1e:3c:50: a4:e8:ae:c6:32:0a:db:3e:f2:70:d2:d1:59:2a:82:98:29:06: d9:20:7a:b9:c2:00:eb:4d:1c:83:bc:ed:de:36:26:b6:0c:28: 81:75:08:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjUwNTMwMjMyNTIxWhcNMjUwNjA2MjMyNTIxWjAYMRYwFAYD VQQDEw02ODNhM2U2MS01OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWrl7lWnavDNQ0Bzd0DG1Pr4Dq9i6ie5jH/ZJkmkJtpTQgzjOCYiDiKoK8r/ /bOYcfAGpGBk9tz5h+KxOhrg0WVYxSb8lOk5FrM5ntPFjhFFBh3TY35dZ+kDdI/0 uEmojcfH7PStvbU85b2TVZ1BE/Whzp14zVOAdLy8SURDITIyk98tw6cYrM6mYO9w OfjgtiSpK4NiWxgCqjiebJl4hEvs3IBSO/AWFwxiaBbw8rMtciVnISmKPemM2/KV zgC9MmmSveHvt1BtD6KaRXlvx4uzPHakinGG5Ty2kSwX3npBX9YXMK25CEWBteym 4k3My3bTyAROXHxQMB7XOlh+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpssn1L MX3fJ43JGxtsH4qGPL9vMB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZaq9B3NgU8DisM5wACSHWfqfO+6as6lxpXlyIY0VyyNsZicb78fH3 MJrUSue48KSV1NsWG1ceYIxezlVGRTECxnUBVky/uP1yyDUz/4F44X0XBT0prFb6 Ki4IXXUKoRV1ZpOL83ZGskZLCl430EctgMAJ991Ne7icVZvKA5XUxTmnJ3qj/jN5 E9Wzred3VIjAkYUGL5QeZujaFt15myvkvLNNQwka27bNy2y1rExa01CriEpKHV5Q 2cLOlt8aID1ZigItciUvIuA5tzayTbW3L1ksemQePFCk6K7GMgrbPvJw0tFZKoKY KQbZIHq5wgDrTRyDvO3eNia2DCiBdQgb -----END CERTIFICATE-----Generated at Sat May 31 16:42:56 2025 by rpki-client