$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: SeLQGAMdNjrip6qx6/uk8mwkdWNoribeblDTfhEdPYo= Subject key identifier: 36:C1:2D:27:EC:CF:52:C7:73:AC:A5:37:79:63:62:2D:F3:2A:4F:45 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 2391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 2366 Signing time: Sat 02 Aug 2025 15:56:38 +0000 Manifest this update: Sat 02 Aug 2025 15:56:38 +0000 Manifest next update: Sat 09 Aug 2025 15:56:38 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: IgKsI29yT4eQvZjciHMXaPGZEPHsonV4gq4x0K4Fy20=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: mpzCA23Ss/c1ac0bYDvVsjbQgPjS/ZvKyhpNDl7GtoA=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: l+TYh6v3YY1hm+93/643Dl+hMCHqLK38fQC5FpyC0mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9105 (0x2391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Aug 2 15:56:38 2025 GMT Not After : Aug 9 15:56:38 2025 GMT Subject: CN=688e3536-3a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:72:19:ba:fd:b9:79:8a:ac:57:23:3d:43: 40:ff:91:59:ef:c6:79:d9:67:3a:a1:17:9a:fb:92: 6b:ee:6a:dd:72:fd:8b:f8:79:02:98:b1:55:97:f6: c0:3f:84:5a:38:37:48:12:37:87:98:62:47:ff:45: 1f:fa:8d:34:6c:99:61:83:73:e2:5f:6a:f9:6d:bf: 48:83:02:9f:be:19:11:3b:bc:3f:fd:39:b5:46:14: 31:93:92:2a:30:39:bb:44:a6:f2:3d:7f:26:7b:4b: 37:fb:0d:26:73:1a:19:f1:af:95:54:24:7e:bc:e4: e4:81:c0:30:24:09:43:81:52:d1:91:46:04:9e:64: 15:3f:da:1a:0d:8a:c0:1f:3a:73:da:4a:7c:0f:e6: d3:85:57:26:3a:66:9a:da:69:be:49:23:63:7b:53: 3a:fc:62:55:96:7a:d2:c4:6e:b8:51:48:b0:f4:bb: e2:bf:2e:fe:58:63:ab:38:80:3e:76:e6:58:35:34: 10:63:04:46:3e:75:d8:ae:4b:89:e1:f7:d5:bd:9f: c2:18:73:c4:20:18:95:37:b8:9d:df:7c:62:b6:22: bd:2c:f8:b1:91:98:6b:04:2b:bc:c6:bd:70:13:32: 70:0a:94:58:89:d8:f8:5b:7b:a9:a8:f7:e8:61:60: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:2D:27:EC:CF:52:C7:73:AC:A5:37:79:63:62:2D:F3:2A:4F:45 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:6c:20:18:a7:64:f7:54:d8:2d:81:a2:2c:4f:c7:f8:2f: 10:29:71:74:9a:d2:8e:3f:55:d4:aa:05:61:89:1f:62:c9:d0: bd:47:a7:b2:51:15:58:b4:14:1d:c6:e9:4f:14:84:71:32:01: 4e:ca:3c:1a:8e:11:d8:1a:7a:ef:79:b3:5a:6d:bc:5f:dd:fc: c6:49:19:fa:01:dc:79:d5:c8:2a:64:1b:5f:3c:6b:91:14:e8: bf:4d:c9:19:c9:81:56:cc:bc:72:a6:cc:7c:02:36:52:9c:82: 09:ba:2f:62:da:09:ad:bb:1f:03:3f:c0:f3:66:95:6b:1d:1d: 8a:0e:1f:2c:63:2a:f2:49:b8:3d:8b:ec:a2:d7:44:5c:c6:58: 31:fa:80:0d:15:84:56:3c:fc:f6:18:bc:40:a7:c8:42:95:54: 4a:f6:07:58:ba:8b:b1:3b:7f:db:0c:fc:a1:7e:28:02:3c:be: e4:24:a3:cf:08:28:a4:73:54:89:77:de:c6:2e:9e:fd:01:6f: a1:48:2e:df:a2:c6:81:ee:f1:a4:ff:87:7d:b9:56:7a:d5:cd: 62:9e:f4:52:54:d7:02:fa:2c:6a:75:c5:4a:72:67:95:7d:9a: df:5e:43:05:bc:52:ed:b3:19:67:34:c2:08:e7:f1:fb:ff:56: 0d:ac:62:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwODAyMTU1NjM4WhcNMjUwODA5MTU1NjM4WjAYMRYwFAYD VQQDEw02ODhlMzUzNi0zYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXlyGbr9uXmKrFcjPUNA/5FZ78Z52Wc6oRea+5Jr7mrdcv2L+HkCmLFVl/bA P4RaODdIEjeHmGJH/0Uf+o00bJlhg3PiX2r5bb9IgwKfvhkRO7w//Tm1RhQxk5Iq MDm7RKbyPX8me0s3+w0mcxoZ8a+VVCR+vOTkgcAwJAlDgVLRkUYEnmQVP9oaDYrA Hzpz2kp8D+bThVcmOmaa2mm+SSNje1M6/GJVlnrSxG64UUiw9Lvivy7+WGOrOIA+ duZYNTQQYwRGPnXYrkuJ4ffVvZ/CGHPEIBiVN7id33xitiK9LPixkZhrBCu8xr1w EzJwCpRYidj4W3upqPfoYWDe6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbBLSfs z1LHc6ylN3ljYi3zKk9FMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbNGwgGKdk91TYLYGiLE/H+C8QKXF0mtKOP1XUqgVhiR9iydC9R6ey URVYtBQdxulPFIRxMgFOyjwajhHYGnrvebNabbxf3fzGSRn6Adx51cgqZBtfPGuR FOi/TckZyYFWzLxypsx8AjZSnIIJui9i2gmtux8DP8DzZpVrHR2KDh8sYyrySbg9 i+yi10Rcxlgx+oANFYRWPPz2GLxAp8hClVRK9gdYuouxO3/bDPyhfigCPL7kJKPP CCikc1SJd97GLp79AW+hSC7fosaB7vGk/4d9uVZ61c1invRSVNcC+ixqdcVKcmeV fZrfXkMFvFLtsxlnNMII5/H7/1YNrGJ/ -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:06 2025 by rpki-client