$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: eq07GhlOwVmmtf5QJ81ZCAEETxuYWOuZIzLoXrILUxk= Subject key identifier: C5:67:89:30:12:68:D2:05:9A:D1:0B:A4:F7:E1:F2:01:40:6F:5B:81 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 2370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 2345 Signing time: Fri 30 May 2025 16:00:58 +0000 Manifest this update: Fri 30 May 2025 16:00:57 +0000 Manifest next update: Fri 06 Jun 2025 16:00:57 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: Y/9eV2c3J/F4b3L6bOy0zfLfZ2tWWQko4Geh0hbcjoE=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: mpzCA23Ss/c1ac0bYDvVsjbQgPjS/ZvKyhpNDl7GtoA=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: l+TYh6v3YY1hm+93/643Dl+hMCHqLK38fQC5FpyC0mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9072 (0x2370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: May 30 16:00:57 2025 GMT Not After : Jun 6 16:00:57 2025 GMT Subject: CN=6839d639-c863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:8e:1a:fe:12:31:b5:21:1b:60:4d:43:59: a4:af:fd:03:63:55:86:b0:65:8f:07:d1:a1:b1:d2: 9a:a1:12:22:f9:2d:3c:33:0b:1f:d5:5b:02:f4:fc: bb:ca:8b:5c:2c:58:7a:7c:94:2a:37:31:3e:73:2e: e2:15:f5:03:ef:84:75:be:81:c0:c6:8d:7a:32:17: 81:f3:38:6e:ea:ee:6d:8d:91:28:b0:fd:aa:92:3a: af:ac:61:e2:02:9e:a0:74:67:81:d8:9d:09:11:17: 4c:52:83:e2:81:92:09:83:fd:97:ae:ee:85:a0:a9: 58:01:db:d4:bc:22:e7:84:75:22:d9:13:34:32:56: 22:c4:7a:95:08:6d:d2:1a:56:d2:4d:12:d9:29:a2: ee:46:72:99:9b:ed:31:f6:be:f2:fe:78:d5:e7:d1: 67:a6:72:6b:b8:3d:37:00:68:78:52:a3:b8:b8:c1: 1f:6f:9e:b9:88:d3:13:c8:21:45:9e:2f:85:0d:b1: 7b:a7:f3:a4:99:ae:35:ca:ec:ee:ff:e8:84:c2:6c: df:c2:1a:3c:4b:73:7f:c8:f0:e0:4f:19:41:ee:24: e3:aa:6d:d8:53:4d:ef:cf:4c:fb:c9:73:d0:08:0b: 91:ab:29:c0:85:43:78:db:09:34:46:b8:f1:ee:54: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:67:89:30:12:68:D2:05:9A:D1:0B:A4:F7:E1:F2:01:40:6F:5B:81 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:91:b8:d9:6f:ed:37:57:59:23:10:3c:92:43:d0:d6:b6:ed: 6e:67:b7:69:2e:a7:ed:55:57:a4:61:a3:1e:e3:5b:0c:84:f9: df:76:b5:e8:f9:d1:63:ae:f3:b1:69:5f:4a:2a:b4:b6:08:1a: 71:25:9b:65:6c:4c:b7:24:58:ad:5e:bf:c5:c6:fb:21:0c:31: 8f:30:0d:42:32:a4:6a:81:e8:21:df:d1:01:f0:9f:c6:c4:30: 9b:a3:f3:80:34:c3:b2:6b:91:77:65:2a:ba:39:78:6a:53:16: e0:21:ed:e8:9e:8d:7c:80:2f:8f:8d:4d:4a:05:2e:73:63:c3: c4:06:fa:16:18:aa:32:ed:2f:22:e7:7f:fb:43:ed:fd:85:39: df:2c:96:4c:c8:dc:a9:ec:59:9f:0a:5d:2c:aa:0c:6d:94:0a: 39:06:0a:27:2f:69:7a:33:27:54:83:4d:69:14:b7:ca:48:f8: 06:91:75:0a:85:19:40:f5:3a:a5:fb:89:b8:3b:36:fb:cb:14: a0:36:44:14:91:9f:a0:6b:83:9c:ee:81:38:0e:8c:cf:00:64: fb:0c:3e:16:ba:45:40:03:9e:b4:81:32:70:a1:57:16:d6:66: 8c:34:b8:2c:c3:29:a8:a7:8a:a2:4a:70:81:bd:3b:0a:41:1a: de:55:e6:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwNTMwMTYwMDU3WhcNMjUwNjA2MTYwMDU3WjAYMRYwFAYD VQQDEw02ODM5ZDYzOS1jODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXaOGv4SMbUhG2BNQ1mkr/0DY1WGsGWPB9GhsdKaoRIi+S08Mwsf1VsC9Py7 yotcLFh6fJQqNzE+cy7iFfUD74R1voHAxo16MheB8zhu6u5tjZEosP2qkjqvrGHi Ap6gdGeB2J0JERdMUoPigZIJg/2Xru6FoKlYAdvUvCLnhHUi2RM0MlYixHqVCG3S GlbSTRLZKaLuRnKZm+0x9r7y/njV59FnpnJruD03AGh4UqO4uMEfb565iNMTyCFF ni+FDbF7p/Okma41yuzu/+iEwmzfwho8S3N/yPDgTxlB7iTjqm3YU03vz0z7yXPQ CAuRqynAhUN42wk0Rrjx7lR0fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVniTAS aNIFmtELpPfh8gFAb1uBMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3kbjZb+03V1kjEDySQ9DWtu1uZ7dpLqftVVekYaMe41sMhPnfdrXo +dFjrvOxaV9KKrS2CBpxJZtlbEy3JFitXr/FxvshDDGPMA1CMqRqgegh39EB8J/G xDCbo/OANMOya5F3ZSq6OXhqUxbgIe3ono18gC+PjU1KBS5zY8PEBvoWGKoy7S8i 53/7Q+39hTnfLJZMyNyp7FmfCl0sqgxtlAo5BgonL2l6MydUg01pFLfKSPgGkXUK hRlA9Tql+4m4Ozb7yxSgNkQUkZ+ga4Oc7oE4DozPAGT7DD4WukVAA560gTJwoVcW 1maMNLgswymop4qiSnCBvTsKQRreVebw -----END CERTIFICATE-----Generated at Sat May 31 16:25:47 2025 by rpki-client