$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json) Hash identifier: GZ8HzejUnjWCeQbGc0gIV910w4HAKNoV9NG4E93XaSo= Subject key identifier: 35:0C:D6:9A:A2:E3:ED:04:56:37:2E:22:47:2C:5F:0D:BA:A7:00:5F Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft Manifest number: 03D0 Signing time: Tue 17 Jun 2025 00:12:26 +0000 Manifest this update: Tue 17 Jun 2025 00:12:25 +0000 Manifest next update: Tue 24 Jun 2025 00:12:25 +0000 Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: jNLGr+3fxat0wiQxBCw7ACRlRIzwiNLEZR2uNk2PxrE=) 2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=) 3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Validity Not Before: Jun 17 00:12:25 2025 GMT Not After : Jun 24 00:12:25 2025 GMT Subject: CN=6850b2e9-0c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:0c:3a:55:3c:81:55:59:82:51:ac:98:55: e9:e5:7b:01:b7:e0:26:6c:00:78:f4:2d:26:44:be: b3:a6:8e:1c:39:a5:b5:26:1e:18:5c:61:b5:56:3e: 62:95:a6:d7:43:6c:6c:e1:5e:26:1a:ab:59:b7:2e: 4d:2a:d0:e4:f3:31:38:d6:e6:d2:36:75:a2:c7:d3: b5:ae:7a:66:0f:60:0e:ad:91:4e:e4:c0:70:36:92: ef:b7:fa:01:cd:87:f5:d1:66:ae:28:db:3f:ef:ae: 2b:c9:c1:32:25:ec:f4:9d:5e:ed:d4:b3:1c:14:47: a8:3f:91:a3:75:74:84:a5:8c:7b:5d:e5:21:ce:8e: 13:93:41:1f:6b:f3:4e:2d:8c:c5:af:8f:dc:ae:68: 60:e1:9f:41:91:9b:bc:89:a1:49:60:8d:ef:c8:b2: e8:09:00:ce:8f:c1:0b:fe:2e:c1:d6:e3:2e:90:11: 1d:f9:71:93:37:1f:0a:f1:78:7f:a9:d7:a2:20:08: e6:b9:ea:d3:d7:4c:c8:17:b0:56:a6:a4:f0:ad:30: 09:e8:ad:dd:98:ba:ff:1b:a6:ef:0f:4a:cc:6a:05: ab:7b:12:b5:fe:e0:c5:e1:8e:47:07:c5:40:29:a3: 9f:1f:c5:0d:69:b8:79:a9:f9:10:18:aa:14:16:ca: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:D6:9A:A2:E3:ED:04:56:37:2E:22:47:2C:5F:0D:BA:A7:00:5F X509v3 Authority Key Identifier: keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:7d:bb:f3:4f:ac:d4:95:ed:07:45:4c:e1:8a:10:1c:40:b0: a6:3e:0b:33:ff:6d:9c:4e:a2:4a:17:0b:43:e8:54:f7:d2:da: 89:d0:4b:af:d0:f2:41:da:13:cb:eb:0a:a5:29:c9:ff:f5:32: 30:6f:ae:1a:ed:22:00:61:f9:ff:84:61:cb:a2:5d:17:0e:fa: b5:74:0e:d1:bc:ee:8d:f4:e5:46:12:c0:c3:e1:c2:f1:0c:65: 27:5c:32:d3:aa:2f:0a:28:fa:11:d8:ed:e4:ac:b6:48:cb:3f: 2a:ca:85:5d:53:e6:03:7b:38:24:04:d3:d9:ed:53:32:60:ec: c3:65:7a:1d:45:5b:4f:f6:59:46:ec:6d:e8:b0:2d:d1:1a:a9: 53:5e:ae:3c:b0:21:f9:13:0b:ea:3f:02:89:b4:28:eb:0b:c8: cf:5a:c6:db:fc:68:26:f6:5f:89:57:2c:b8:95:07:29:d8:09: a7:a6:0b:d5:79:48:48:c1:12:e7:a1:72:fb:16:f0:8d:d0:47: cb:d4:a6:a8:45:40:04:5d:91:60:1e:84:79:e0:0c:81:eb:ee: f3:45:5e:86:a8:bf:2e:c4:f1:52:da:89:6b:96:3b:c0:3d:e1: ee:ec:e9:84:f0:73:7b:0e:b5:4e:41:9a:67:a3:cf:7f:c0:5b: 46:4b:b6:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0 MDkxQjdDMjQwHhcNMjUwNjE3MDAxMjI1WhcNMjUwNjI0MDAxMjI1WjAYMRYwFAYD VQQDEw02ODUwYjJlOS0wYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFgMOlU8gVVZglGsmFXp5XsBt+AmbAB49C0mRL6zpo4cOaW1Jh4YXGG1Vj5i labXQ2xs4V4mGqtZty5NKtDk8zE41ubSNnWix9O1rnpmD2AOrZFO5MBwNpLvt/oB zYf10WauKNs/764rycEyJez0nV7t1LMcFEeoP5GjdXSEpYx7XeUhzo4Tk0Efa/NO LYzFr4/crmhg4Z9BkZu8iaFJYI3vyLLoCQDOj8EL/i7B1uMukBEd+XGTNx8K8Xh/ qdeiIAjmuerT10zIF7BWpqTwrTAJ6K3dmLr/G6bvD0rMagWrexK1/uDF4Y5HB8VA KaOfH8UNabh5qfkQGKoUFsrDAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUM1pqi 4+0EVjcuIkcsXw26pwBfMB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr SUkwVFlrM1duWTVBa2JmQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWfbvzT6zUle0HRUzhihAcQLCmPgsz/22cTqJKFwtD6FT30tqJ0Euv 0PJB2hPL6wqlKcn/9TIwb64a7SIAYfn/hGHLol0XDvq1dA7RvO6N9OVGEsDD4cLx DGUnXDLTqi8KKPoR2O3krLZIyz8qyoVdU+YDezgkBNPZ7VMyYOzDZXodRVtP9llG 7G3osC3RGqlTXq48sCH5EwvqPwKJtCjrC8jPWsbb/Ggm9l+JVyy4lQcp2AmnpgvV eUhIwRLnoXL7FvCN0EfL1KaoRUAEXZFgHoR54AyB6+7zRV6GqL8uxPFS2olrljvA PeHu7OmE8HN7DrVOQZpno89/wFtGS7bi -----END CERTIFICATE-----Generated at Tue Jun 17 23:31:23 2025 by rpki-client