$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: anZpJ3BPrzKS371gDH8c18a30Q0hC4ztbVopRJg5bHk= Subject key identifier: 02:E2:09:AD:0B:9E:78:AD:D4:E9:3C:AD:66:64:35:94:AD:CC:B6:2E Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0450 Signing time: Sat 14 Jun 2025 23:56:41 +0000 Manifest this update: Sat 14 Jun 2025 23:56:41 +0000 Manifest next update: Sat 21 Jun 2025 23:56:41 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: kt+RnqL7koSHLONfQOp+DntLkgLemZG5yZVo4QIf/KU=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Jun 14 23:56:41 2025 GMT Not After : Jun 21 23:56:41 2025 GMT Subject: CN=684e0c39-932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:26:82:b2:4f:35:0d:00:b7:53:db:dd:91: f8:20:1a:3e:9d:4c:0a:af:d0:f2:27:9e:45:de:41: 36:9a:e4:09:1a:e0:25:f3:20:06:b6:a6:3a:e0:5f: c8:f0:1c:52:85:4a:e3:87:dc:34:b9:52:2d:89:8b: 81:6b:54:fe:60:d4:44:95:2f:00:a6:ae:bc:03:fe: 51:08:72:d3:9f:d9:a0:b7:cc:d0:44:a0:ee:1c:f4: 7c:b0:b2:c0:02:9f:48:59:6a:5d:4f:da:92:7e:03: cb:25:d1:f5:bd:b3:32:77:12:ae:f5:df:66:46:2b: 3e:72:e9:73:c8:0a:ae:34:3f:9a:21:d4:d7:95:b6: 4e:75:00:dd:67:ce:02:f9:16:6d:87:54:0f:3c:e1: fb:d9:ce:41:0f:53:0b:68:1f:4c:68:81:50:bd:23: bc:a3:9f:3e:d5:76:cd:8b:0c:45:c0:25:b2:44:30: 01:48:e7:16:62:dd:da:71:0a:d1:47:4d:88:13:6d: 9e:94:b7:ff:92:d9:2b:dc:34:82:8e:fa:cf:02:6e: 97:dc:56:f2:01:17:ba:bc:3f:ea:a9:c3:04:7f:be: 1a:1d:ae:31:76:e9:eb:88:cd:c3:81:26:91:30:bd: 57:0a:5c:6a:df:18:ef:c8:42:bd:20:23:3e:8d:05: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E2:09:AD:0B:9E:78:AD:D4:E9:3C:AD:66:64:35:94:AD:CC:B6:2E X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:86:e3:8f:e1:fa:76:85:a2:42:ce:a5:53:bf:d3:6a:17:95: 93:31:92:9c:92:c6:8b:af:3e:28:88:84:cd:a4:ba:a0:74:90: 81:bf:26:f4:16:13:f3:a2:45:97:3d:29:42:69:c0:52:6f:a8: 6c:04:77:10:3e:86:08:87:3c:4f:e9:cf:3e:64:a3:fa:57:cd: 24:70:dd:0f:5b:7b:af:bf:87:97:c7:7f:77:53:bc:a2:81:c2: 35:d5:f2:41:51:4f:c0:df:a6:fa:e0:16:7f:11:cc:8b:05:60: 75:cb:7a:d7:5f:59:8b:4b:51:92:d2:cd:cb:54:3c:bc:0c:47: c0:7b:f7:87:98:f0:df:af:f6:7c:60:cc:1d:cc:74:2a:5e:00: fb:fb:f6:df:d1:67:08:b5:9d:b4:af:97:31:f1:c8:82:8d:14: d9:e1:b9:34:bb:02:11:f1:9a:4c:f5:90:ec:36:55:66:65:b4: 4a:ce:18:28:da:73:85:27:f4:3d:f5:e3:1b:07:fc:48:66:d6: 16:e3:87:6c:89:bf:e5:fb:07:55:5c:6d:06:ac:4a:ba:f7:b1: d7:09:0c:35:8b:e6:4b:f8:3e:ea:c2:62:7a:97:44:28:56:64: f8:b1:74:f0:18:58:41:e5:20:63:04:e0:5c:c7:13:eb:90:88: da:ff:70:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUwNjE0MjM1NjQxWhcNMjUwNjIxMjM1NjQxWjAYMRYwFAYD VQQDEw02ODRlMGMzOS05MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwImgrJPNQ0At1Pb3ZH4IBo+nUwKr9DyJ55F3kE2muQJGuAl8yAGtqY64F/I 8BxShUrjh9w0uVItiYuBa1T+YNRElS8Apq68A/5RCHLTn9mgt8zQRKDuHPR8sLLA Ap9IWWpdT9qSfgPLJdH1vbMydxKu9d9mRis+culzyAquND+aIdTXlbZOdQDdZ84C +RZth1QPPOH72c5BD1MLaB9MaIFQvSO8o58+1XbNiwxFwCWyRDABSOcWYt3acQrR R02IE22elLf/ktkr3DSCjvrPAm6X3FbyARe6vD/qqcMEf74aHa4xdunriM3DgSaR ML1XClxq3xjvyEK9ICM+jQWBYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALiCa0L nnit1Ok8rWZkNZStzLYuMB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+huOP4fp2haJCzqVTv9NqF5WTMZKcksaLrz4oiITNpLqgdJCBvyb0 FhPzokWXPSlCacBSb6hsBHcQPoYIhzxP6c8+ZKP6V80kcN0PW3uvv4eXx393U7yi gcI11fJBUU/A36b64BZ/EcyLBWB1y3rXX1mLS1GS0s3LVDy8DEfAe/eHmPDfr/Z8 YMwdzHQqXgD7+/bf0WcItZ20r5cx8ciCjRTZ4bk0uwIR8ZpM9ZDsNlVmZbRKzhgo 2nOFJ/Q99eMbB/xIZtYW44dsib/l+wdVXG0GrEq697HXCQw1i+ZL+D7qwmJ6l0Qo VmT4sXTwGFhB5SBjBOBcxxPrkIja/3Df -----END CERTIFICATE-----Generated at Sun Jun 15 08:27:54 2025 by rpki-client