$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: fiHl8NncxyeFVhVMyBY8i1JsVfDr8ElKJ4EiGsjXCNE= Subject key identifier: A1:7C:00:FE:B2:02:94:7C:F1:6B:BD:0C:89:CD:D7:8E:B6:10:CB:DB Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 06AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 0693 Signing time: Sat 14 Jun 2025 22:02:50 +0000 Manifest this update: Sat 14 Jun 2025 22:02:50 +0000 Manifest next update: Sat 21 Jun 2025 22:02:50 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: Wzo/0fbHrk0MMJAsX8Y6R0EhRGSGdzNZkI9JSxBs3Yc=) 2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Kmy121XzUGh8ewwF3KZSeQZhERtI3ipUIuwTYhIH4NM=) 3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: h+i7d4l1n6vcg20ldi1OzleaWsx0vPPuUjmVScWRXXI=) 4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: PifTuQf9ETmHsQRTOYGkROLV+pof9sWcOvRDOEXvkJE=) 5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9n7ji7mRbxqw5LbmJKOtKEWm7L5OaLEva61LWM3vFFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Jun 14 22:02:50 2025 GMT Not After : Jun 21 22:02:50 2025 GMT Subject: CN=684df18a-c39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:61:56:ad:d3:8e:db:1d:3d:63:86:97:cd: 33:54:d4:e2:4e:84:73:0c:aa:e1:e5:be:4d:0f:3d: 74:04:17:fd:ed:b9:68:58:28:c3:7c:56:b1:33:ae: 3b:2a:1c:89:a3:8a:85:5e:a1:72:01:a9:b9:3b:e2: 0e:c3:61:ec:42:4b:c8:33:db:c3:ea:90:e6:8f:a2: bb:32:da:ba:1a:55:96:75:9e:49:4f:33:09:88:94: a8:c1:c0:bd:ef:f2:8c:32:b8:30:77:4f:5e:c8:fe: df:f3:aa:ba:eb:ef:3b:39:f5:d8:58:ec:69:9a:9c: 88:a9:3e:5c:22:b5:1f:72:de:d5:91:99:f8:30:5e: a1:b1:3c:f1:ec:f4:82:1c:2c:09:31:52:23:3c:50: 16:80:6d:36:64:74:72:90:cb:49:c3:8f:17:75:53: 89:96:50:14:85:40:e9:1d:7d:97:86:6c:f2:06:9b: ce:2c:c8:c6:55:2e:f8:8d:80:cd:a0:b2:da:8d:41: 74:e9:e6:c8:dc:08:0d:d0:3d:2d:a2:18:a8:98:2c: 9a:7a:57:48:14:90:bc:ad:04:a7:e0:88:7f:7b:a5: 90:9b:86:af:b4:eb:f4:76:06:4f:9d:d6:14:7e:cb: df:da:88:ee:2b:7c:a7:b7:4c:b2:2a:4d:ad:b6:94: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:00:FE:B2:02:94:7C:F1:6B:BD:0C:89:CD:D7:8E:B6:10:CB:DB X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c6:c6:fe:79:4a:92:e6:57:86:2f:ff:d0:18:00:f8:42:37: 94:19:0a:a0:1a:9b:fa:be:13:95:16:b2:d1:7a:8a:b1:00:01: cd:2d:f5:e0:a6:0c:73:7a:ff:29:f8:b2:fa:e0:fb:1f:6c:42: 76:23:49:6d:c3:ed:0b:09:bc:80:2d:01:11:a6:96:9b:03:e4: 53:8e:ea:8a:34:60:6b:8b:55:66:79:73:cd:f8:0e:46:a1:8c: 27:fd:14:59:33:1d:de:5a:6d:e8:f0:12:2b:28:54:26:27:a4: 4f:2e:b0:ba:60:3e:07:55:b9:67:90:05:35:2e:55:be:57:ab: 70:73:cb:03:50:7d:04:3a:a5:38:e7:1a:3d:7e:d3:a0:ae:c2: d8:87:25:56:43:9e:ff:8d:80:f9:3e:d5:8e:80:34:2d:c0:17: ad:f7:b5:b8:f3:a9:9d:fb:1d:85:e9:5f:f9:ef:25:36:bb:ee: b4:7f:e8:d3:7a:4d:09:7b:15:19:aa:e2:75:f2:43:18:7d:f3: 2c:58:fd:90:7b:c9:e7:05:d8:c6:78:89:1a:35:4b:2d:cc:5e: ea:25:b2:f9:31:a9:58:1b:01:a1:01:93:e1:b6:ae:f7:db:58: 0a:14:24:85:79:85:61:88:5a:f0:35:21:e5:69:5a:3a:fa:79: e2:4d:23:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUwNjE0MjIwMjUwWhcNMjUwNjIxMjIwMjUwWjAYMRYwFAYD VQQDEw02ODRkZjE4YS1jMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCJhVq3TjtsdPWOGl80zVNTiToRzDKrh5b5NDz10BBf97bloWCjDfFaxM647 KhyJo4qFXqFyAam5O+IOw2HsQkvIM9vD6pDmj6K7Mtq6GlWWdZ5JTzMJiJSowcC9 7/KMMrgwd09eyP7f86q66+87OfXYWOxpmpyIqT5cIrUfct7VkZn4MF6hsTzx7PSC HCwJMVIjPFAWgG02ZHRykMtJw48XdVOJllAUhUDpHX2XhmzyBpvOLMjGVS74jYDN oLLajUF06ebI3AgN0D0tohiomCyaeldIFJC8rQSn4Ih/e6WQm4avtOv0dgZPndYU fsvf2ojuK3ynt0yyKk2ttpRZ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF8AP6y ApR88Wu9DInN1462EMvbMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpxsb+eUqS5leGL//QGAD4QjeUGQqgGpv6vhOVFrLReoqxAAHNLfXg pgxzev8p+LL64PsfbEJ2I0ltw+0LCbyALQERppabA+RTjuqKNGBri1VmeXPN+A5G oYwn/RRZMx3eWm3o8BIrKFQmJ6RPLrC6YD4HVblnkAU1LlW+V6twc8sDUH0EOqU4 5xo9ftOgrsLYhyVWQ57/jYD5PtWOgDQtwBet97W486md+x2F6V/57yU2u+60f+jT ek0JexUZquJ18kMYffMsWP2Qe8nnBdjGeIkaNUstzF7qJbL5MalYGwGhAZPhtq73 21gKFCSFeYVhiFrwNSHlaVo6+nniTSNn -----END CERTIFICATE-----Generated at Sun Jun 15 10:23:56 2025 by rpki-client