$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: /je37fnXcZ0II6OVidEamoGrFkMaSbMlUe2cficp9pU= Subject key identifier: 4C:5A:81:87:DE:B2:23:DD:20:4E:5C:10:57:A4:FC:91:7A:85:CD:6A Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: 43 Signing time: Sat 09 Aug 2025 07:58:22 +0000 Manifest this update: Sat 09 Aug 2025 07:58:22 +0000 Manifest next update: Sat 16 Aug 2025 07:58:22 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: 3/WOqWMsep83f/G9f3LjvtPc4P2S95sDmc3Z+ljdTlE=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: wOxc2mRdKwnrkxXakYEXBYgQ1Llp1nvGe0GOb+4AM30=) 3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: AY2s5T5nFgYlJrJemH+atWCYX2gv1ohpQJNZYKJbmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: Aug 9 07:58:22 2025 GMT Not After : Aug 16 07:58:22 2025 GMT Subject: CN=6896ff9e-6e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:48:4b:be:23:38:f9:15:57:30:1c:71:af: 53:53:bb:09:ad:4b:f6:47:e2:99:e1:b2:e0:30:6d: a3:e2:14:64:4c:06:c0:13:f2:19:8a:a5:92:4a:86: 53:4e:50:c4:3e:86:1d:97:21:bc:4f:c5:54:40:47: 27:2a:aa:cf:07:bf:90:39:35:6f:f6:df:25:46:25: 9f:0d:60:a9:16:aa:cf:49:fa:96:d6:bd:d8:f6:0b: d3:e7:60:21:ca:cc:c7:03:fe:c6:37:f4:6c:52:f1: ba:a0:f5:59:16:9c:71:9b:0f:55:7a:44:f0:4f:4f: 0e:27:ae:a0:61:ac:6a:de:27:44:63:23:69:ca:d8: 01:5a:da:03:97:29:63:23:30:85:01:f3:fb:8b:62: c5:94:80:97:f3:40:9e:db:38:2c:97:ea:c4:4a:0c: eb:d0:a2:b3:43:1e:b0:a7:9d:c5:d9:e9:66:4f:62: 90:22:12:40:ac:07:2f:88:0e:57:1f:b0:d2:7b:fb: 7c:3c:2d:63:30:9f:43:3f:69:b2:c6:65:66:9a:5b: 62:7e:f6:bb:c2:95:8e:9b:2d:74:d9:19:b2:37:20: 43:4a:9f:ff:fb:30:27:a8:bb:33:7a:5a:c7:cf:b6: 24:1d:7d:9b:8a:6d:1b:f3:c3:e5:bf:4f:f9:44:83: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:81:87:DE:B2:23:DD:20:4E:5C:10:57:A4:FC:91:7A:85:CD:6A X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:65:6f:a8:f5:65:c2:13:f1:d0:30:56:90:37:45:67:83:63: 90:9b:b6:ac:1c:8b:fa:24:4b:36:fa:cb:14:5d:0f:d4:66:1d: 36:c6:2b:88:69:03:d6:30:0e:f3:38:71:84:d9:39:d8:39:42: 59:02:86:d0:61:ac:ec:76:be:58:c0:11:b2:3c:7d:1c:ed:49: 8d:e0:97:16:8e:d7:d0:4e:85:09:04:f5:32:fb:d6:fe:48:dc: 85:a2:ed:75:3e:88:4c:21:6f:c2:d2:65:88:bc:11:78:db:be: 13:ce:47:a9:16:23:ad:a4:bf:9b:84:5d:16:51:63:e5:7b:e7: 43:f8:16:23:fe:ab:06:d1:e4:0c:95:7b:ca:14:e8:c1:9a:c3: a0:8d:d1:71:7d:9c:7e:87:a1:9c:ad:2c:c1:09:a6:1f:2b:04: eb:80:b4:87:6a:b1:84:2f:10:ea:8c:07:02:8e:8a:07:47:2d: 3a:47:e6:de:08:ba:bf:47:34:cb:54:15:ef:49:3d:18:40:91: 71:27:da:c2:15:fe:bf:04:dd:ba:e9:c5:0e:6c:50:4b:2a:be: 6b:8b:39:45:b9:11:cf:39:c7:46:f5:f8:02:f5:df:9f:06:b4: 4d:91:80:12:a7:e6:69:db:30:b8:05:e8:12:c5:d2:6d:00:68: ee:c6:9b:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0MwODExMC8GA1UEBRMoMzIxRUVGQjgwODUxRkY4MkZFQjdDQjZDMDhBOTRGNURE MkQ5MjcwRDAeFw0yNTA4MDkwNzU4MjJaFw0yNTA4MTYwNzU4MjJaMBgxFjAUBgNV BAMTDTY4OTZmZjllLTZlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOTEhLviM4+RVXMBxxr1NTuwmtS/ZH4pnhsuAwbaPiFGRMBsAT8hmKpZJKhlNO UMQ+hh2XIbxPxVRARycqqs8Hv5A5NW/23yVGJZ8NYKkWqs9J+pbWvdj2C9PnYCHK zMcD/sY39GxS8bqg9VkWnHGbD1V6RPBPTw4nrqBhrGreJ0RjI2nK2AFa2gOXKWMj MIUB8/uLYsWUgJfzQJ7bOCyX6sRKDOvQorNDHrCnncXZ6WZPYpAiEkCsBy+IDlcf sNJ7+3w8LWMwn0M/abLGZWaaW2J+9rvClY6bLXTZGbI3IENKn//7MCeouzN6WsfP tiQdfZuKbRvzw+W/T/lEg4iDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTFqBh96y I90gTlwQV6T8kXqFzWowHwYDVR0jBBgwFoAUMh7vuAhR/4L+t8tsCKlPXdLZJw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQzA4L0FGRkMwREU0MTE3 QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWg3dnVBaFJfNEwtdDh0c0NLbFBYZExaSncwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz QzA4L0FGRkMwREU0MTE3QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRM LXQ4dHNDS2xQWGRMWkp3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL9lb6j1ZcIT8dAwVpA3RWeDY5Cbtqwci/okSzb6yxRdD9RmHTbGK4hp A9YwDvM4cYTZOdg5QlkChtBhrOx2vljAEbI8fRztSY3glxaO19BOhQkE9TL71v5I 3IWi7XU+iEwhb8LSZYi8EXjbvhPOR6kWI62kv5uEXRZRY+V750P4FiP+qwbR5AyV e8oU6MGaw6CN0XF9nH6HoZytLMEJph8rBOuAtIdqsYQvEOqMBwKOigdHLTpH5t4I ur9HNMtUFe9JPRhAkXEn2sIV/r8E3brpxQ5sUEsqvmuLOUW5Ec85x0b1+AL1358G tE2RgBKn5mnbMLgF6BLF0m0AaO7Gm2k= -----END CERTIFICATE-----Generated at Sun Aug 10 21:04:43 2025 by rpki-client