$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: 10vQdPNSQj/FXXtIia8MbyqQ6fPhJTmjdbkQZHs1HRQ= Subject key identifier: 8C:95:EF:24:9A:98:E4:A2:EF:9A:C8:02:40:B5:63:AE:F0:4C:BD:C0 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09CA Signing time: Thu 12 Jun 2025 19:43:51 +0000 Manifest this update: Thu 12 Jun 2025 19:43:51 +0000 Manifest next update: Thu 19 Jun 2025 19:43:51 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: V9WShFtDZPUZw5UsZieggiZK+5p6ikFIrrKM7h1Fdn4=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Jun 12 19:43:51 2025 GMT Not After : Jun 19 19:43:51 2025 GMT Subject: CN=684b2df7-3c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:0f:8d:9e:e3:6a:1d:7e:f7:f0:75:76:b6: 4c:44:9a:75:d1:9c:0c:2d:99:3f:cf:3a:d3:d4:12: 2f:e3:47:83:f6:02:cd:2d:f6:de:10:22:dc:02:6a: 14:79:63:97:ba:57:c3:b9:91:f3:25:6b:24:64:4b: e7:c3:bc:75:61:98:3d:62:75:be:c0:d7:77:3a:f8: 4e:96:c0:31:5b:59:03:e5:5f:cf:60:cd:8d:33:c5: ee:0b:7e:b3:30:40:a9:04:d1:1c:e5:19:83:f4:ed: 49:0a:02:e1:0c:ae:1a:49:82:34:60:e2:66:1c:cd: f4:61:b4:d5:a2:f6:7b:d0:97:73:72:14:38:bc:1a: 04:11:c3:2a:17:b7:31:81:78:ac:8d:55:9e:98:f3: 66:ae:1c:6a:39:6f:04:aa:54:f1:ab:da:3f:27:76: 76:be:69:94:f9:40:1a:e9:26:2b:bd:37:78:0a:dd: e1:01:7a:8e:2f:ee:e1:c8:c4:4e:67:c1:cf:16:2b: ed:0b:ed:55:56:7c:f5:8e:7c:54:a2:51:7f:08:1b: 4d:eb:6a:66:dd:d8:0b:39:c7:1e:70:b9:e4:0c:9e: 17:3a:c2:04:8a:52:ed:41:c2:93:35:c3:3d:ef:7c: 18:f9:16:44:39:d1:bb:f0:6c:80:99:eb:21:ae:1b: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:95:EF:24:9A:98:E4:A2:EF:9A:C8:02:40:B5:63:AE:F0:4C:BD:C0 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7a:bc:4d:eb:d4:b5:0b:ed:f5:0f:e8:21:8a:3c:4b:3d:30: 84:ec:3e:10:5f:ed:c1:d9:d7:61:74:05:b3:7d:18:3d:0b:81: e4:a3:86:12:fc:d5:c5:08:70:4a:af:cd:0d:b6:81:62:09:88: 69:e8:01:18:36:68:69:69:7d:43:34:ca:be:e4:d2:ca:a9:04: 4c:c4:15:4f:9b:a8:13:c9:60:52:43:35:b0:1c:ad:fb:ef:79: 61:3a:a5:7c:aa:87:4d:2e:a7:17:e0:81:1c:a0:53:26:c3:ae: 24:a3:1b:b8:65:4b:58:4b:5d:cc:1d:14:8c:37:2c:17:7f:0d: aa:f4:df:11:b8:82:9c:44:58:94:05:e5:53:05:60:77:0d:b8: 40:b2:7f:1e:b3:dc:b5:be:01:86:31:13:28:c8:ee:91:09:60: 71:98:ee:4c:78:73:08:ca:95:21:a3:4b:63:96:1a:0c:5d:d2: a9:70:c1:5c:75:66:ff:06:2c:d9:fd:b0:0e:12:20:11:1e:a6: a7:7e:0c:da:a1:9c:12:a0:32:7a:57:6a:4f:a0:50:33:6c:56: 2d:c4:4c:5f:a1:65:ed:13:5d:6a:4a:e4:ca:e7:5b:a3:a0:07: 8b:f5:05:90:ce:ad:bb:83:4f:f8:bf:b8:0e:65:95:77:3c:c3: 16:88:e4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwNjEyMTk0MzUxWhcNMjUwNjE5MTk0MzUxWjAYMRYwFAYD VQQDEw02ODRiMmRmNy0zYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRcPjZ7jah1+9/B1drZMRJp10ZwMLZk/zzrT1BIv40eD9gLNLfbeECLcAmoU eWOXulfDuZHzJWskZEvnw7x1YZg9YnW+wNd3OvhOlsAxW1kD5V/PYM2NM8XuC36z MECpBNEc5RmD9O1JCgLhDK4aSYI0YOJmHM30YbTVovZ70JdzchQ4vBoEEcMqF7cx gXisjVWemPNmrhxqOW8EqlTxq9o/J3Z2vmmU+UAa6SYrvTd4Ct3hAXqOL+7hyMRO Z8HPFivtC+1VVnz1jnxUolF/CBtN62pm3dgLOccecLnkDJ4XOsIEilLtQcKTNcM9 73wY+RZEOdG78GyAmeshrhtySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyV7ySa mOSi75rIAkC1Y67wTL3AMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIerxN69S1C+31D+ghijxLPTCE7D4QX+3B2ddhdAWzfRg9C4Hko4YS /NXFCHBKr80NtoFiCYhp6AEYNmhpaX1DNMq+5NLKqQRMxBVPm6gTyWBSQzWwHK37 73lhOqV8qodNLqcX4IEcoFMmw64koxu4ZUtYS13MHRSMNywXfw2q9N8RuIKcRFiU BeVTBWB3DbhAsn8es9y1vgGGMRMoyO6RCWBxmO5MeHMIypUho0tjlhoMXdKpcMFc dWb/BizZ/bAOEiARHqanfgzaoZwSoDJ6V2pPoFAzbFYtxExfoWXtE11qSuTK51uj oAeL9QWQzq27g0/4v7gOZZV3PMMWiOQo -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:39 2025 by rpki-client