$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: LIpatpOFMXXW0GaIrRq2kBNIiBlvz5sFBt4XWgs+PhU= Subject key identifier: 0D:F5:93:9C:4E:9D:41:55:39:D6:E9:41:0F:59:78:E3:8C:D2:E5:D4 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 0496 Signing time: Thu 12 Jun 2025 23:35:24 +0000 Manifest this update: Thu 12 Jun 2025 23:35:23 +0000 Manifest next update: Thu 19 Jun 2025 23:35:23 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 9Xk/vpgijIOQ7CBZ9Tl1fR8bsis8fXsn7JYB1kAyy7g=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Jun 12 23:35:23 2025 GMT Not After : Jun 19 23:35:23 2025 GMT Subject: CN=684b643b-56cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:be:e6:f2:3b:bd:1b:44:58:57:b9:4d:02: 3d:ed:9f:ad:b8:f7:61:45:5d:d9:c2:81:a1:e4:a7: 3e:93:ed:90:47:7e:81:fd:46:3d:5a:4c:77:00:7a: 6f:11:8b:9a:92:35:55:60:8e:9a:12:2f:0e:7d:72: 95:8a:1f:73:e9:43:7f:7e:31:7f:09:c1:d5:70:9b: 7f:fc:08:95:eb:0f:4b:f6:78:79:a4:b3:4d:d1:8f: 36:33:ea:3d:40:15:14:53:7b:c5:cd:f7:06:b2:0c: ab:cc:5a:20:75:21:32:ed:9e:83:dd:3e:d7:a3:5f: eb:6f:2a:db:cb:32:e8:1a:82:64:b7:cb:3a:52:13: 9e:c8:9a:c8:b2:0e:4d:53:e6:4e:0c:9d:2e:45:e4: c8:85:f2:9f:6d:21:2d:35:51:4b:17:a2:f1:26:81: dc:57:38:3b:b1:4a:d9:98:45:16:69:15:a1:2e:36: 8b:e5:c1:66:82:3e:0d:85:a0:23:ec:58:f3:a3:ae: be:33:5e:94:e7:fd:6e:39:dd:ad:13:f2:ac:dc:9e: c6:ca:c3:8a:aa:a5:ae:89:97:cf:83:66:dc:46:52: 42:29:89:1f:67:4a:a2:0b:2f:9e:10:45:68:a7:82: c6:97:64:96:89:84:44:84:7f:5a:38:bf:cd:53:61: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F5:93:9C:4E:9D:41:55:39:D6:E9:41:0F:59:78:E3:8C:D2:E5:D4 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:84:4b:a3:86:03:57:27:f7:39:ae:df:39:78:a5:44:05:8e: fb:b6:e1:06:88:cf:7f:a5:bb:a7:64:43:29:50:f8:65:4a:2d: b5:84:0a:3c:46:f0:e0:5d:ae:41:13:c6:84:89:86:66:63:6c: 80:cc:2c:73:06:8b:d2:e5:c1:50:bc:f7:3d:45:0f:fa:47:a9: bc:40:58:53:82:20:df:d4:1c:05:60:f5:9c:73:b7:f0:b0:ed: fe:38:cd:86:a2:63:db:78:8a:09:9c:e8:7b:53:4d:95:f1:38: 39:2d:54:5e:30:06:dc:72:9c:7a:11:34:39:52:90:11:d5:c2: a0:77:9c:45:c7:83:e6:10:fd:50:03:3a:2a:56:71:1b:10:50: aa:ab:8d:21:56:8a:8d:9f:ed:97:42:34:3a:d4:7b:ac:80:91: 9f:52:fd:f0:52:14:a8:97:ef:84:19:73:3c:58:52:01:8d:c0: a4:55:a0:a3:60:10:3d:7b:95:15:e2:7a:2f:8b:2f:be:d0:c1: 38:61:9a:cd:c9:b7:d4:df:38:76:1b:f1:33:0a:e3:8e:5c:0f: 1e:a6:93:88:a3:23:96:ec:fb:d8:67:fd:0a:ac:13:7e:6f:b9: ea:c5:0a:13:d2:63:7f:93:9f:97:77:e4:c1:55:fc:28:59:85: 83:22:bb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNjEyMjMzNTIzWhcNMjUwNjE5MjMzNTIzWjAYMRYwFAYD VQQDEw02ODRiNjQzYi01NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEi+5vI7vRtEWFe5TQI97Z+tuPdhRV3ZwoGh5Kc+k+2QR36B/UY9Wkx3AHpv EYuakjVVYI6aEi8OfXKVih9z6UN/fjF/CcHVcJt//AiV6w9L9nh5pLNN0Y82M+o9 QBUUU3vFzfcGsgyrzFogdSEy7Z6D3T7Xo1/rbyrbyzLoGoJkt8s6UhOeyJrIsg5N U+ZODJ0uReTIhfKfbSEtNVFLF6LxJoHcVzg7sUrZmEUWaRWhLjaL5cFmgj4NhaAj 7Fjzo66+M16U5/1uOd2tE/Ks3J7GysOKqqWuiZfPg2bcRlJCKYkfZ0qiCy+eEEVo p4LGl2SWiYREhH9aOL/NU2HpswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA31k5xO nUFVOdbpQQ9ZeOOM0uXUMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkhEujhgNXJ/c5rt85eKVEBY77tuEGiM9/pbunZEMpUPhlSi21hAo8 RvDgXa5BE8aEiYZmY2yAzCxzBovS5cFQvPc9RQ/6R6m8QFhTgiDf1BwFYPWcc7fw sO3+OM2GomPbeIoJnOh7U02V8Tg5LVReMAbccpx6ETQ5UpAR1cKgd5xFx4PmEP1Q AzoqVnEbEFCqq40hVoqNn+2XQjQ61HusgJGfUv3wUhSol++EGXM8WFIBjcCkVaCj YBA9e5UV4noviy++0ME4YZrNybfU3zh2G/EzCuOOXA8eppOIoyOW7PvYZ/0KrBN+ b7nqxQoT0mN/k5+Xd+TBVfwoWYWDIrvd -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:27 2025 by rpki-client