$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: KuAQutN/0ahmAAft+z+J4xF10SSGM4gZTDPy+NEEQkY= Subject key identifier: 0D:25:D6:E9:69:92:71:C7:0A:CD:28:F4:4C:47:5D:83:C0:9C:E7:B9 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 18FD Signing time: Thu 12 Jun 2025 17:12:32 +0000 Manifest this update: Thu 12 Jun 2025 17:12:31 +0000 Manifest next update: Thu 19 Jun 2025 17:12:31 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: Y6cAEXpbwk5Y5lF0W99q3l5OXZa5yZTfRtJ7fsm6y/E=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: Fb8k8+AedY7WXxvThRoDU2Yv91zXaAiC2+Ql7v0J/eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Jun 12 17:12:31 2025 GMT Not After : Jun 19 17:12:31 2025 GMT Subject: CN=684b0a7f-8a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:d5:b6:d6:c9:e9:34:5f:30:69:ea:d8:04: 00:bc:36:87:43:17:2c:5e:83:3f:32:1f:e6:e2:34: 92:e1:4b:fc:5a:ce:e8:6b:37:ea:71:3d:97:3a:68: df:42:0e:64:5c:90:c9:e7:67:f1:c5:a8:84:8d:5a: 50:5b:98:91:fe:cf:58:3d:96:57:db:c9:b5:01:1a: 1d:37:93:ab:9b:ef:49:1a:b5:62:54:80:52:6c:d7: 4d:eb:8b:f0:fa:d1:50:cd:ae:7e:00:fe:fe:f1:19: ea:bc:bd:61:fc:7c:92:cc:b0:36:d7:37:34:ab:b9: 5d:2c:43:4a:aa:56:08:3f:4e:9e:4c:6d:56:5a:09: 5e:5e:c4:b6:6f:a7:59:75:d2:8c:4c:1f:45:51:00: 5e:19:b9:ed:2e:f6:2e:da:33:2c:d7:c2:57:39:a0: cf:bf:f5:9b:5c:ac:22:df:d4:0e:90:8d:ba:01:d3: 53:30:62:04:c9:7d:da:8e:8a:5b:37:14:94:da:c6: 81:a2:09:4c:a9:d3:f9:20:f5:05:0a:ff:47:5c:00: ad:98:77:a1:38:0e:7e:3b:f6:bd:bb:58:a7:ca:48: 49:0c:1c:87:97:c5:56:02:28:1d:70:a3:84:ef:16: 48:fa:2c:9b:68:fe:28:db:75:d3:43:d8:a1:1c:f4: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:D6:E9:69:92:71:C7:0A:CD:28:F4:4C:47:5D:83:C0:9C:E7:B9 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e2:66:a7:47:fc:2d:e4:fd:0b:ee:4e:e8:ff:4e:c7:0d:c8: 36:96:0c:c1:28:ab:33:39:b9:94:5b:7d:a5:89:ee:93:26:3b: 85:fc:b5:ad:e0:61:bb:9f:3d:28:6b:d6:9a:de:29:88:8f:57: 8e:a6:32:99:62:14:a2:dc:cd:f5:d3:e8:f5:52:48:0a:ad:c8: 25:a1:3d:da:6e:01:95:9e:8a:a7:15:25:34:3e:ef:f6:56:16: cc:84:15:d7:92:88:17:ea:01:8c:f5:6f:cb:61:4f:78:79:42: 83:df:95:5e:76:44:fe:cf:8b:86:0d:63:08:42:39:57:4c:99: ad:e5:b6:04:71:aa:7c:c7:4b:2f:ca:3a:a6:1d:f9:5b:da:e0: ee:58:59:df:e2:2a:21:63:6c:84:ff:14:42:15:1c:8c:1e:46: 8a:04:9d:50:15:3b:7c:4c:bd:a6:0d:c6:22:18:88:79:67:70: b3:39:83:73:17:a7:d5:94:66:77:59:0b:23:ac:ce:41:b5:26: 52:7d:db:0d:98:07:cf:18:35:c5:c1:ca:ec:63:70:b0:65:7d: 85:7e:4d:78:49:d6:ff:12:91:da:71:00:9f:44:a2:e8:cf:cf: 6f:1c:65:24:0b:39:20:bc:f8:fd:e1:5b:de:0c:f8:af:91:d4: df:68:95:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwNjEyMTcxMjMxWhcNMjUwNjE5MTcxMjMxWjAYMRYwFAYD VQQDEw02ODRiMGE3Zi04YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1bVttbJ6TRfMGnq2AQAvDaHQxcsXoM/Mh/m4jSS4Uv8Ws7oazfqcT2XOmjf Qg5kXJDJ52fxxaiEjVpQW5iR/s9YPZZX28m1ARodN5Orm+9JGrViVIBSbNdN64vw +tFQza5+AP7+8RnqvL1h/HySzLA21zc0q7ldLENKqlYIP06eTG1WWgleXsS2b6dZ ddKMTB9FUQBeGbntLvYu2jMs18JXOaDPv/WbXKwi39QOkI26AdNTMGIEyX3ajopb NxSU2saBoglMqdP5IPUFCv9HXACtmHehOA5+O/a9u1inykhJDByHl8VWAigdcKOE 7xZI+iybaP4o23XTQ9ihHPTqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0l1ulp knHHCs0o9ExHXYPAnOe5MB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX4manR/wt5P0L7k7o/07HDcg2lgzBKKszObmUW32lie6TJjuF/LWt 4GG7nz0oa9aa3imIj1eOpjKZYhSi3M310+j1UkgKrcgloT3abgGVnoqnFSU0Pu/2 VhbMhBXXkogX6gGM9W/LYU94eUKD35VedkT+z4uGDWMIQjlXTJmt5bYEcap8x0sv yjqmHflb2uDuWFnf4iohY2yE/xRCFRyMHkaKBJ1QFTt8TL2mDcYiGIh5Z3CzOYNz F6fVlGZ3WQsjrM5BtSZSfdsNmAfPGDXFwcrsY3CwZX2Ffk14Sdb/EpHacQCfRKLo z89vHGUkCzkgvPj94VveDPivkdTfaJVu -----END CERTIFICATE-----Generated at Sat Jun 14 18:08:54 2025 by rpki-client