$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: t/MkO9gQGHqdHtsUvHRXPcYaQx3J4iMdzxN5e29WnCg= Subject key identifier: 5A:46:D6:26:85:64:77:98:69:EE:62:19:4B:02:33:7C:77:4A:92:3E Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 2377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 234C Signing time: Thu 12 Jun 2025 15:48:34 +0000 Manifest this update: Thu 12 Jun 2025 15:48:34 +0000 Manifest next update: Thu 19 Jun 2025 15:48:34 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: ilV/ehqTfh7Z9aUk/uaPGBfPhmUD1jWqzJKo8PnCM4E=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: mpzCA23Ss/c1ac0bYDvVsjbQgPjS/ZvKyhpNDl7GtoA=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: l+TYh6v3YY1hm+93/643Dl+hMCHqLK38fQC5FpyC0mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9079 (0x2377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Jun 12 15:48:34 2025 GMT Not After : Jun 19 15:48:34 2025 GMT Subject: CN=684af6d2-fc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:6f:08:bb:aa:ce:84:72:5f:85:19:d7:f6: 5f:da:49:2b:6f:c6:97:91:4f:4e:0f:7a:12:c3:ba: 0d:25:24:a0:3d:d7:67:53:fc:37:9e:41:5a:b7:2e: c4:ca:42:d6:9e:29:f3:f1:66:fd:d9:3b:1e:76:c7: 30:1d:95:21:60:3b:62:db:d4:57:ea:32:1a:78:cf: 93:35:5b:59:29:52:a0:ca:d3:77:6c:93:91:7d:d1: bf:80:dc:c8:12:54:8e:e2:51:73:ec:67:3e:60:08: e3:8e:27:69:6b:38:88:e3:ef:9d:f0:3d:59:d9:05: 47:d1:93:a7:c1:05:ea:44:a1:6f:3b:aa:f4:5f:43: 8a:75:43:8b:02:23:3b:39:ee:9c:6a:36:52:b4:03: 67:8f:c7:d8:88:6a:56:0e:6a:cf:12:ce:d4:5c:f3: 2a:8a:16:a3:03:8f:38:5f:95:e6:e5:81:53:de:e7: f0:40:8f:e9:22:af:04:74:02:8c:1c:20:57:8f:80: 36:8e:ab:bb:e8:5d:27:3d:b0:76:28:89:53:ba:87: 27:4a:28:72:a3:4c:a7:a2:f8:97:79:90:43:ce:39: 76:f6:95:bb:3e:8f:8f:2b:66:0c:73:fa:4e:18:08: c0:a0:a6:01:0c:93:1b:ee:54:06:8b:4b:70:14:93: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:D6:26:85:64:77:98:69:EE:62:19:4B:02:33:7C:77:4A:92:3E X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:61:38:d9:a7:4e:81:76:ce:87:96:18:c4:eb:a3:13:62:dc: 6c:c8:fe:25:fd:d5:1d:73:cd:fb:df:c7:c5:5c:d3:1c:50:9b: 03:25:bb:20:63:c0:1c:28:54:b5:0b:e0:a6:94:d1:5e:fd:f7: ff:95:88:3c:99:70:f3:3f:20:be:0a:ba:a3:68:4b:1b:4e:ca: 03:6e:e6:fd:67:15:e5:a9:f5:40:00:cb:30:cd:b3:09:61:e7: f6:50:c4:f0:0f:e2:38:c5:75:5d:18:bd:ad:ff:7f:10:16:1f: 33:19:da:88:6e:19:f4:d8:b6:d3:85:c9:53:c8:76:98:5a:b9: ba:98:26:ba:d0:3a:ac:b7:da:40:b2:76:1f:b9:d6:69:1f:40: 30:43:36:07:e1:05:89:85:de:d4:c8:3c:91:9d:72:9b:12:68: ab:bf:a8:2c:ea:4a:5e:61:2d:93:1d:d8:9b:ca:48:b3:02:f4: 45:13:eb:fe:83:2e:4d:cd:d5:b8:2f:9e:9c:a2:75:fd:a1:03: fa:1f:56:28:cd:a1:00:cf:89:31:ac:6e:a1:c3:70:54:41:05: 77:20:45:a8:45:df:60:67:85:15:b5:67:41:23:4d:61:eb:d7: 28:22:34:72:c8:b4:82:4c:9f:5d:8b:36:8d:e0:b8:0c:28:1e: 8e:c0:26:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwNjEyMTU0ODM0WhcNMjUwNjE5MTU0ODM0WjAYMRYwFAYD VQQDEw02ODRhZjZkMi1mYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUFvCLuqzoRyX4UZ1/Zf2kkrb8aXkU9OD3oSw7oNJSSgPddnU/w3nkFaty7E ykLWninz8Wb92TsedscwHZUhYDti29RX6jIaeM+TNVtZKVKgytN3bJORfdG/gNzI ElSO4lFz7Gc+YAjjjidpaziI4++d8D1Z2QVH0ZOnwQXqRKFvO6r0X0OKdUOLAiM7 Oe6cajZStANnj8fYiGpWDmrPEs7UXPMqihajA484X5Xm5YFT3ufwQI/pIq8EdAKM HCBXj4A2jqu76F0nPbB2KIlTuocnSihyo0ynoviXeZBDzjl29pW7Po+PK2YMc/pO GAjAoKYBDJMb7lQGi0twFJNw+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpG1iaF ZHeYae5iGUsCM3x3SpI+MB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUYTjZp06Bds6HlhjE66MTYtxsyP4l/dUdc83738fFXNMcUJsDJbsg Y8AcKFS1C+CmlNFe/ff/lYg8mXDzPyC+CrqjaEsbTsoDbub9ZxXlqfVAAMswzbMJ Yef2UMTwD+I4xXVdGL2t/38QFh8zGdqIbhn02LbThclTyHaYWrm6mCa60Dqst9pA snYfudZpH0AwQzYH4QWJhd7UyDyRnXKbEmirv6gs6kpeYS2THdibykizAvRFE+v+ gy5NzdW4L56conX9oQP6H1YozaEAz4kxrG6hw3BUQQV3IEWoRd9gZ4UVtWdBI01h 69coIjRyyLSCTJ9dizaN4LgMKB6OwCaL -----END CERTIFICATE-----Generated at Sat Jun 14 17:11:12 2025 by rpki-client