$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: 1aT31N6plPLL+7c2nba8dqacvklD5G6Ky093eWLFYBI= Subject key identifier: 59:8E:E6:89:4B:BC:07:B7:C4:10:CB:02:BA:4B:2E:ED:92:BB:97:EF Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 3491 Signing time: Sat 14 Jun 2025 14:54:13 +0000 Manifest this update: Sat 14 Jun 2025 14:54:12 +0000 Manifest next update: Sat 21 Jun 2025 14:54:12 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: ZRgwVgebifrrjT9y3JP3xTHJeeHLu6+J2gR4+Kz4s+8=) 2: AA15744E2B0111F09CD4A96AC4F9AE02.roa (hash: 45hnvJuRb+v92htfdvjwOgRNSDtIXR5oDwj0w/Xa5e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Jun 14 14:54:12 2025 GMT Not After : Jun 21 14:54:12 2025 GMT Subject: CN=684d8d14-61b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:29:28:01:e5:95:b5:e2:ba:7f:71:eb:5a: ec:bf:5f:58:0a:be:34:01:74:64:33:25:f3:f3:4e: bf:2b:c6:2c:d4:f4:d9:45:2f:7f:5c:d3:ee:84:eb: 69:8f:4a:71:b5:4f:ab:37:38:33:1f:bf:81:15:d3: e8:c7:a4:6a:5d:e4:3a:b0:2a:42:0a:ba:29:23:0f: 30:21:9f:ff:5d:5c:dc:cd:15:db:15:16:6a:3d:82: f4:0f:ee:b3:e1:15:04:d1:99:c8:fe:95:1e:66:21: 5a:06:63:05:a7:92:1f:7c:3a:1b:0b:64:e9:2e:15: ef:59:c0:bf:64:a1:99:cc:30:76:a5:3c:5c:23:6a: b4:7c:63:9b:1d:56:af:64:35:37:92:8e:95:8b:27: ac:8c:da:b6:e8:1a:b5:86:e6:78:1c:f8:5a:d5:80: e3:d7:4f:d6:ff:d6:88:b3:de:01:2f:c1:e0:1b:12: 08:fc:9c:95:75:28:2a:07:a8:26:ee:b3:00:b6:5c: 3b:52:b7:e5:d3:1c:69:0d:17:a9:6b:85:b9:b4:2f: 6a:b5:3d:68:e9:b7:4a:0a:2d:43:c0:e2:94:a0:b7: 8a:58:40:6f:99:53:ce:90:55:78:9b:29:53:3a:39: 3e:27:93:ea:1f:9e:03:f6:a0:f1:e2:b2:fe:e4:b5: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:E6:89:4B:BC:07:B7:C4:10:CB:02:BA:4B:2E:ED:92:BB:97:EF X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:98:29:a4:f8:98:82:5d:97:80:be:5f:5a:d6:16:5b:03:ea: 39:c9:af:b0:99:38:c8:66:3f:65:1c:5f:94:89:f4:9e:dc:a7: 66:77:24:8b:d9:ff:4d:07:49:25:7c:70:76:0e:26:ca:16:9e: 45:e0:22:39:e3:2c:04:5b:60:78:a0:b5:fa:b0:19:16:57:f4: 27:c5:a6:dc:fb:d2:cb:db:5f:35:72:ef:d0:79:41:9a:ca:a1: 72:7a:8d:ba:df:0b:6e:26:66:9e:09:9e:31:c8:27:91:76:6f: 45:c4:8b:11:b0:70:83:44:7a:f1:ca:95:9a:0a:ff:44:8e:ad: 1f:99:d1:d9:5c:22:4b:01:e1:3c:95:af:58:b2:65:53:1a:73: c7:ab:7f:d0:c5:96:47:42:24:cf:41:a2:c9:63:a6:44:48:c3: bf:93:5b:94:56:ea:9c:35:3f:e7:b8:45:1d:c8:26:3a:65:e3: fd:da:11:4b:21:34:cd:1f:bd:b7:74:ad:4f:e4:e1:d7:46:9d: ee:4b:bd:9e:0c:07:74:25:7c:7c:50:64:c5:85:1f:0a:78:28: 9b:31:22:40:2c:a0:e3:ac:b3:8d:63:4d:74:f5:fc:9f:35:0f: 83:7a:08:73:b7:60:39:19:28:fd:6d:af:bf:b7:17:53:58:d0: 41:b1:46:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUwNjE0MTQ1NDEyWhcNMjUwNjIxMTQ1NDEyWjAYMRYwFAYD VQQDEw02ODRkOGQxNC02MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzcpKAHllbXiun9x61rsv19YCr40AXRkMyXz806/K8Ys1PTZRS9/XNPuhOtp j0pxtU+rNzgzH7+BFdPox6RqXeQ6sCpCCropIw8wIZ//XVzczRXbFRZqPYL0D+6z 4RUE0ZnI/pUeZiFaBmMFp5IffDobC2TpLhXvWcC/ZKGZzDB2pTxcI2q0fGObHVav ZDU3ko6ViyesjNq26Bq1huZ4HPha1YDj10/W/9aIs94BL8HgGxII/JyVdSgqB6gm 7rMAtlw7Urfl0xxpDRepa4W5tC9qtT1o6bdKCi1DwOKUoLeKWEBvmVPOkFV4mylT Ojk+J5PqH54D9qDx4rL+5LUJvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmO5olL vAe3xBDLArpLLu2Su5fvMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCmCmk+JiCXZeAvl9a1hZbA+o5ya+wmTjIZj9lHF+UifSe3KdmdySL 2f9NB0klfHB2DibKFp5F4CI54ywEW2B4oLX6sBkWV/Qnxabc+9LL2181cu/QeUGa yqFyeo263wtuJmaeCZ4xyCeRdm9FxIsRsHCDRHrxypWaCv9Ejq0fmdHZXCJLAeE8 la9YsmVTGnPHq3/QxZZHQiTPQaLJY6ZESMO/k1uUVuqcNT/nuEUdyCY6ZeP92hFL ITTNH723dK1P5OHXRp3uS72eDAd0JXx8UGTFhR8KeCibMSJALKDjrLONY0109fyf NQ+Deghzt2A5GSj9ba+/txdTWNBBsUYk -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:10 2025 by rpki-client