$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: z548S45lPLpQTjRBazxjvtncYmb98u8vDwaC1DqcHy4= Subject key identifier: 46:F4:F5:1C:8A:08:7A:67:B0:BA:49:CC:0E:C5:48:BF:7E:F0:93:64 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 0489 Signing time: Sat 14 Jun 2025 23:45:17 +0000 Manifest this update: Sat 14 Jun 2025 23:45:16 +0000 Manifest next update: Sat 21 Jun 2025 23:45:16 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: qyyqgEWpVEUrIBVsV83uaS+kVnxFK38cEpJ8pMlR+8o=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Jun 14 23:45:16 2025 GMT Not After : Jun 21 23:45:16 2025 GMT Subject: CN=684e098d-b539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:30:93:84:f1:86:79:55:0c:8e:52:a1:88: 92:5e:83:c3:fa:e5:05:c0:66:77:63:b8:e2:46:7a: 20:26:67:35:86:6b:59:d8:6f:e4:cd:8b:62:62:8a: 89:b5:59:db:cb:0b:75:81:af:75:86:79:57:de:e6: 93:10:fa:82:f8:5b:b9:96:fc:2f:de:e8:6a:bd:b3: 11:f6:aa:ff:cf:9f:66:58:6a:bf:78:1c:82:d8:d0: e2:8d:ef:a8:f5:7d:c0:56:f0:e4:f4:b9:28:b4:cd: a3:ed:82:32:fc:8d:11:56:18:6f:f6:12:26:39:67: 1d:5c:9c:fe:53:76:af:e9:d7:06:cb:d3:6a:d2:f9: 16:80:8c:71:7b:90:7f:ca:0e:8d:07:2e:2b:29:57: 77:40:ab:f7:e5:b3:55:8b:78:97:27:c4:ef:0a:04: fd:c1:b2:69:1a:a2:21:40:24:a2:b8:33:aa:81:b4: ae:66:07:2f:dc:cd:7e:27:80:c3:cc:03:e0:01:75: 33:93:26:b5:82:5c:d3:8f:2f:5c:ee:ed:35:b0:92: ba:ee:ad:3b:35:36:23:b3:85:76:f5:47:ad:46:c8: 9c:9a:d0:a7:83:b1:d9:27:fd:8b:7b:a8:3d:c7:09: 34:19:47:53:8c:32:ef:ce:95:cb:64:4e:1e:1a:16: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:F5:1C:8A:08:7A:67:B0:BA:49:CC:0E:C5:48:BF:7E:F0:93:64 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:34:27:19:87:5d:f4:fb:99:1b:53:b1:1a:23:f8:69:36:0d: 04:03:61:19:e3:b0:91:b7:28:80:49:f5:24:f2:65:83:ea:cd: 8b:9d:00:64:16:79:89:a0:94:77:f7:d7:01:1d:73:f7:cb:5a: de:00:b0:2e:5e:f5:86:b6:a6:8b:d3:a9:2f:f7:50:b1:8f:49: 76:22:33:af:03:11:09:47:1e:e6:a1:b4:39:0c:8e:a7:e6:3f: 7b:27:63:1a:6f:0e:43:02:f9:2c:0d:fa:bf:f6:ec:24:c8:ea: a4:ae:6b:45:13:e1:3b:ee:bd:3c:47:9b:2d:ac:a3:14:2c:14: 61:1c:31:76:dc:ee:49:e9:a7:24:c1:1a:94:7e:7e:5b:68:41: c8:9c:5e:30:55:b4:1a:0a:d5:75:0d:0f:72:22:85:73:97:82: 3c:05:ae:a5:1f:c3:f5:cd:2b:cf:04:52:4c:1b:f1:63:41:72: 33:26:3e:a9:6b:f6:b6:ed:55:e8:db:7e:5f:d7:69:d5:76:92: 29:70:36:60:06:54:30:df:f6:7d:66:3c:5c:e5:b5:23:59:ad: 82:1a:2f:1b:8c:40:a7:19:51:6a:6a:61:85:ec:c8:a4:61:39: e5:5b:ce:d6:7c:28:86:8d:f6:2b:6f:fc:54:95:17:9f:fb:e9: 25:dc:25:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwNjE0MjM0NTE2WhcNMjUwNjIxMjM0NTE2WjAYMRYwFAYD VQQDEw02ODRlMDk4ZC1iNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTIwk4TxhnlVDI5SoYiSXoPD+uUFwGZ3Y7jiRnogJmc1hmtZ2G/kzYtiYoqJ tVnbywt1ga91hnlX3uaTEPqC+Fu5lvwv3uhqvbMR9qr/z59mWGq/eByC2NDije+o 9X3AVvDk9LkotM2j7YIy/I0RVhhv9hImOWcdXJz+U3av6dcGy9Nq0vkWgIxxe5B/ yg6NBy4rKVd3QKv35bNVi3iXJ8TvCgT9wbJpGqIhQCSiuDOqgbSuZgcv3M1+J4DD zAPgAXUzkya1glzTjy9c7u01sJK67q07NTYjs4V29UetRsicmtCng7HZJ/2Le6g9 xwk0GUdTjDLvzpXLZE4eGhbqUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb09RyK CHpnsLpJzA7FSL9+8JNkMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuNCcZh130+5kbU7EaI/hpNg0EA2EZ47CRtyiASfUk8mWD6s2LnQBk FnmJoJR399cBHXP3y1reALAuXvWGtqaL06kv91Cxj0l2IjOvAxEJRx7mobQ5DI6n 5j97J2Mabw5DAvksDfq/9uwkyOqkrmtFE+E77r08R5strKMULBRhHDF23O5J6ack wRqUfn5baEHInF4wVbQaCtV1DQ9yIoVzl4I8Ba6lH8P1zSvPBFJMG/FjQXIzJj6p a/a27VXo235f12nVdpIpcDZgBlQw3/Z9Zjxc5bUjWa2CGi8bjECnGVFqamGF7Mik YTnlW87WfCiGjfYrb/xUlRef++kl3CXK -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:07 2025 by rpki-client