$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: IEvW1gAiUNn/EZlzlo1l3OsbppjqSkWWYr2rLlBSfoI= Subject key identifier: 0C:05:AB:2C:87:45:3F:51:84:BA:A7:A5:D9:60:1C:0A:C7:20:90:8C Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09E7 Signing time: Fri 08 Aug 2025 20:12:25 +0000 Manifest this update: Fri 08 Aug 2025 20:12:25 +0000 Manifest next update: Fri 15 Aug 2025 20:12:25 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: xEQSlAZLmcMZuwJ9UhVnbXPy9VldhVABHcW1aiYSQ1c=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Aug 8 20:12:25 2025 GMT Not After : Aug 15 20:12:25 2025 GMT Subject: CN=68965a29-ce21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:07:36:56:8e:30:ba:73:2a:83:7d:d7:d1: 80:cc:4a:52:9e:bf:57:2b:fd:d9:ea:47:8b:3d:2f: b6:a9:7b:0a:7e:90:3f:d8:a3:8f:53:b5:cd:2b:8a: e9:4f:f7:0f:d2:6d:f8:89:c0:82:f2:b7:06:3b:cb: 3d:cb:bb:83:f2:18:24:bd:cb:41:bf:74:67:5a:6c: e0:d1:6c:3f:3f:e1:72:1f:13:fb:5e:ff:77:77:db: 49:a4:63:b2:57:d8:41:48:38:20:9f:2e:5f:57:92: c7:2b:0e:06:23:a5:3c:ba:d8:59:f0:26:f6:00:a9: d3:7e:29:5d:5a:63:24:4f:20:f4:3a:87:89:17:8b: fa:84:95:4e:8e:15:f0:d3:00:da:81:36:58:36:cc: 5c:69:df:55:87:cf:44:b2:33:25:c7:d3:41:07:71: 33:3b:7d:16:ec:8c:63:85:b2:8a:47:d2:59:70:82: 41:51:7f:60:c6:b7:de:10:f7:7e:8c:98:c2:08:3f: 37:6b:ca:e5:3d:82:b1:09:98:50:d8:27:52:ef:41: 13:05:00:7d:a9:84:7d:fb:2c:16:67:90:ac:11:e9: c5:e7:56:50:e8:7f:d5:8d:60:f4:27:e7:9c:f1:ac: 98:5f:0a:3d:98:20:22:d5:71:31:a6:f7:ba:9b:c9: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:05:AB:2C:87:45:3F:51:84:BA:A7:A5:D9:60:1C:0A:C7:20:90:8C X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:20:d3:f0:9d:81:05:70:8e:0e:00:62:b8:31:da:7f:d6:39: 81:e1:04:bd:d0:36:40:38:43:21:3c:5c:c2:41:e2:6c:87:1b: 04:ad:8a:7b:46:dc:22:3a:2d:80:db:e2:de:98:0a:a6:2a:83: b4:d7:4b:3e:4b:91:37:c7:89:9b:04:b9:e9:ce:47:ba:b5:2c: 88:26:6c:61:24:d4:75:f2:68:74:77:2b:ed:69:ba:61:b5:6f: be:cb:2f:1d:f3:9f:e4:ca:51:6e:32:0a:57:cf:b0:2c:4a:2d: bf:a8:6b:75:60:7c:91:db:d7:8f:09:62:a2:6b:97:00:38:5a: 0b:23:dd:19:78:b1:6e:91:c7:c4:fd:dc:8f:44:8b:68:7d:06: d9:75:cf:f1:03:c9:9a:2b:c5:72:20:f1:06:ed:66:91:80:ba: 20:51:65:e8:54:ab:8b:7e:fa:bd:90:ee:9a:2a:3e:29:be:ec: 4f:b9:47:fc:b4:24:3d:bc:33:09:26:a2:c1:f9:76:b0:f7:f7: 55:6c:f6:a9:f3:a9:d4:95:74:f9:a7:de:11:b7:10:e4:e8:9a: cb:ab:c9:1c:56:7c:fb:e9:af:ef:40:75:71:f5:f9:a7:1d:73: 0e:81:3d:0f:c2:bf:45:9b:ff:77:0f:8c:64:b6:b2:9c:1d:06: 23:9d:0c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwODA4MjAxMjI1WhcNMjUwODE1MjAxMjI1WjAYMRYwFAYD VQQDEw02ODk2NWEyOS1jZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySEHNlaOMLpzKoN919GAzEpSnr9XK/3Z6keLPS+2qXsKfpA/2KOPU7XNK4rp T/cP0m34icCC8rcGO8s9y7uD8hgkvctBv3RnWmzg0Ww/P+FyHxP7Xv93d9tJpGOy V9hBSDggny5fV5LHKw4GI6U8uthZ8Cb2AKnTfildWmMkTyD0OoeJF4v6hJVOjhXw 0wDagTZYNsxcad9Vh89EsjMlx9NBB3EzO30W7IxjhbKKR9JZcIJBUX9gxrfeEPd+ jJjCCD83a8rlPYKxCZhQ2CdS70ETBQB9qYR9+ywWZ5CsEenF51ZQ6H/VjWD0J+ec 8ayYXwo9mCAi1XExpve6m8lZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwFqyyH RT9RhLqnpdlgHArHIJCMMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBINPwnYEFcI4OAGK4Mdp/1jmB4QS90DZAOEMhPFzCQeJshxsErYp7 RtwiOi2A2+LemAqmKoO010s+S5E3x4mbBLnpzke6tSyIJmxhJNR18mh0dyvtabph tW++yy8d85/kylFuMgpXz7AsSi2/qGt1YHyR29ePCWKia5cAOFoLI90ZeLFukcfE /dyPRItofQbZdc/xA8maK8VyIPEG7WaRgLogUWXoVKuLfvq9kO6aKj4pvuxPuUf8 tCQ9vDMJJqLB+Xaw9/dVbPap86nUlXT5p94RtxDk6JrLq8kcVnz76a/vQHVx9fmn HXMOgT0Pwr9Fm/93D4xktrKcHQYjnQx6 -----END CERTIFICATE-----Generated at Sun Aug 10 21:14:42 2025 by rpki-client