$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: bR3KujSLklP2Noo+YhkEapHaa15xKgLY0jQBezLPOdE= Subject key identifier: F2:BA:A0:7C:B7:43:DE:4D:A8:F6:F1:C1:21:86:B8:09:E6:6C:66:96 Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 0651 Signing time: Thu 12 Jun 2025 23:09:54 +0000 Manifest this update: Thu 12 Jun 2025 23:09:53 +0000 Manifest next update: Thu 19 Jun 2025 23:09:53 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: 7FbxIRWwKvkoiNacBTMbcwz8G2Upf6fTSK2QlfK4HNU=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: fvo1aPGM+n05nvJm6qW9Z2hmGhNw4J6QEIdDkjbjrFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Jun 12 23:09:53 2025 GMT Not After : Jun 19 23:09:53 2025 GMT Subject: CN=684b5e42-782d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:12:a9:54:0e:81:80:db:05:21:50:ca:70: bd:43:90:bf:4c:c2:73:7b:a5:eb:3d:ac:f2:46:1b: 79:53:4d:72:42:78:a2:90:62:57:ea:92:9e:16:d5: 4e:2c:e6:5f:63:52:04:fa:1a:86:56:dd:47:51:19: 45:10:c5:16:27:32:51:d4:d7:65:cf:06:ad:fc:04: 45:5f:8e:8d:7a:fa:77:62:a6:40:1b:6c:6c:0a:12: 44:51:4d:87:09:30:d4:78:7e:76:24:29:ef:4b:e8: 14:ce:05:c5:fb:15:10:81:27:f8:d5:c4:63:b8:0e: 23:6b:16:b6:a9:2f:7a:cc:79:a3:bb:13:00:f0:81: 3f:3d:75:c8:41:5f:0a:39:d2:44:e7:3a:77:9b:29: f9:de:e6:60:3a:83:3d:9a:36:15:59:3e:f0:e0:63: 4c:a5:12:cc:72:a8:ed:f4:76:92:6d:bd:5c:4d:9b: 49:52:55:da:42:3c:a0:bd:5e:50:a6:6a:35:cd:7b: eb:5e:40:23:3a:89:f9:3d:e9:b1:2b:b4:94:43:b6: 89:46:03:4c:c3:2b:00:8f:ad:ad:9c:01:bc:81:aa: 62:6a:37:d9:89:9d:85:e3:b5:be:f9:35:b5:d5:26: 58:15:59:6e:82:64:f2:a3:f2:eb:bf:7d:cf:eb:3f: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:A0:7C:B7:43:DE:4D:A8:F6:F1:C1:21:86:B8:09:E6:6C:66:96 X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:03:19:16:dd:f6:88:7c:03:98:99:9c:7b:3c:62:f1:89:34: 3e:d3:00:07:c0:ca:56:04:7f:72:59:f2:5d:3c:55:4d:04:79: 54:81:86:56:82:a8:5f:82:d5:ff:12:54:92:5b:54:e8:a4:8a: 46:9c:eb:45:1f:82:08:67:8c:6a:84:f9:dd:d4:d0:98:c6:f1: 72:85:72:f7:66:0e:ab:a8:a1:07:00:45:06:ad:e9:89:65:b5: 92:b3:bd:0e:5f:6a:03:17:80:23:f1:7a:d0:36:4f:06:b1:03: 84:71:52:7f:4e:ff:57:14:5f:d1:94:31:1c:b6:b4:36:92:31: c7:be:bb:d3:1f:ce:4d:79:c5:6e:23:e9:99:fa:cc:87:c2:a5: 28:0c:fa:26:62:fb:f0:75:79:4c:86:ab:e2:9c:73:00:22:f6: 40:b3:71:ec:5e:d8:c0:42:99:03:83:4f:a1:0c:63:ed:5a:4b: 15:a3:ae:00:83:c6:af:bf:ae:27:6c:fd:1b:26:60:bc:0e:ef: 6b:fb:fa:cc:0f:f9:a8:44:67:28:ba:fa:ac:72:39:f0:8f:7e: 98:b7:fd:e2:c2:61:92:ed:91:0a:ec:49:57:d8:0e:d3:26:e7: 1e:3f:79:68:b3:fb:9b:82:76:93:05:95:18:8f:2b:e7:0b:1b: a9:fb:34:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUwNjEyMjMwOTUzWhcNMjUwNjE5MjMwOTUzWjAYMRYwFAYD VQQDEw02ODRiNWU0Mi03ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA158SqVQOgYDbBSFQynC9Q5C/TMJze6XrPazyRht5U01yQniikGJX6pKeFtVO LOZfY1IE+hqGVt1HURlFEMUWJzJR1Ndlzwat/ARFX46Nevp3YqZAG2xsChJEUU2H CTDUeH52JCnvS+gUzgXF+xUQgSf41cRjuA4jaxa2qS96zHmjuxMA8IE/PXXIQV8K OdJE5zp3myn53uZgOoM9mjYVWT7w4GNMpRLMcqjt9HaSbb1cTZtJUlXaQjygvV5Q pmo1zXvrXkAjOon5PemxK7SUQ7aJRgNMwysAj62tnAG8gapiajfZiZ2F47W++TW1 1SZYFVlugmTyo/Lrv33P6z9yVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK6oHy3 Q95NqPbxwSGGuAnmbGaWMB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsAxkW3faIfAOYmZx7PGLxiTQ+0wAHwMpWBH9yWfJdPFVNBHlUgYZW gqhfgtX/ElSSW1TopIpGnOtFH4IIZ4xqhPnd1NCYxvFyhXL3Zg6rqKEHAEUGremJ ZbWSs70OX2oDF4Aj8XrQNk8GsQOEcVJ/Tv9XFF/RlDEctrQ2kjHHvrvTH85NecVu I+mZ+syHwqUoDPomYvvwdXlMhqvinHMAIvZAs3HsXtjAQpkDg0+hDGPtWksVo64A g8avv64nbP0bJmC8Du9r+/rMD/moRGcouvqscjnwj36Yt/3iwmGS7ZEK7ElX2A7T JuceP3los/ubgnaTBZUYjyvnCxup+zRB -----END CERTIFICATE-----Generated at Sat Jun 14 17:51:02 2025 by rpki-client