$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json) Hash identifier: 42yOqeO4Vdv8BBbQBairScpzsmXBRp+t2Xi1srPjN/g= Subject key identifier: 4A:2C:AA:BF:32:C5:04:8E:B7:29:79:88:15:DF:1B:15:53:5C:4B:1A Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 25AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft Manifest number: 2596 Signing time: Wed 02 Jul 2025 15:50:23 +0000 Manifest this update: Wed 02 Jul 2025 15:50:22 +0000 Manifest next update: Wed 09 Jul 2025 15:50:22 +0000 Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: d9kBbxnZO0ygZMAFExKycTdB/X6wJAMmjKrvi8rRU4A=) 2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=) 3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9643 (0x25ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Jul 2 15:50:22 2025 GMT Not After : Jul 9 15:50:22 2025 GMT Subject: CN=6865553e-aee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:68:2b:2e:d2:84:17:73:55:da:7e:54:84: c8:46:be:24:2d:2f:f9:52:da:45:91:21:62:1a:3b: 3d:45:a1:a5:5f:b0:e0:45:3a:44:79:9e:3e:0d:77: 25:e6:97:07:82:23:b2:83:bc:e5:52:f5:05:ba:6f: 98:63:64:bf:cd:18:9a:74:2a:0a:38:c8:48:a4:00: 52:69:4e:9e:c3:22:00:c6:d7:fc:77:ef:aa:66:da: 35:9a:f3:61:ec:0f:da:ad:ba:59:b5:e4:c9:08:7f: 32:bd:5d:ad:81:66:7f:2b:46:69:d1:3e:f9:2f:cd: 8e:df:1a:55:70:cf:eb:5e:44:76:cb:f1:51:5e:45: bf:6f:89:42:e2:b4:53:64:65:ac:32:d9:3a:f8:39: 6a:4f:02:69:84:fc:5f:f2:58:c2:91:5a:a1:f6:b9: 9f:33:3f:4a:1e:20:15:72:12:d7:94:99:dc:16:85: a2:ae:03:13:e1:17:a8:6b:36:7a:d9:22:78:d6:6b: 6e:dd:f2:94:16:e1:5a:0d:c6:1b:34:cc:c9:91:cc: 3b:be:bb:ca:b7:a9:3e:2e:a8:8f:96:91:f4:55:05: 00:f1:61:81:3b:33:c5:05:3e:12:99:8a:4e:7a:0c: 60:b1:3e:25:76:26:90:7a:a2:48:35:28:d6:6e:b5: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2C:AA:BF:32:C5:04:8E:B7:29:79:88:15:DF:1B:15:53:5C:4B:1A X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b3:10:02:6a:fa:8e:a1:e4:63:96:b2:af:54:10:5b:99:29: d8:e7:9e:fd:7f:2a:eb:27:1b:df:ee:9b:83:48:ec:31:0e:d7: 6a:5d:bd:87:43:f3:e0:4a:1d:da:35:2e:67:67:28:46:6e:65: e9:74:b9:42:96:b2:11:ff:66:99:0f:b0:1e:08:ab:f8:69:d6: 43:f8:c0:e9:b7:b7:2c:5a:ea:87:46:d0:1e:4e:4c:70:ca:96: ec:60:eb:66:1e:f6:99:68:8d:c5:d4:1b:be:d2:74:8f:1f:19: 14:85:b5:cb:68:a4:3a:92:8d:d0:b6:f1:84:2c:56:e9:dc:91: af:b1:15:95:11:86:f3:f8:ef:7f:12:7c:86:10:20:3e:33:4f: 18:75:e7:13:e9:db:f1:b1:5d:9f:53:15:9c:b7:b6:b0:ca:7b: b9:e9:4f:28:00:04:8f:76:d5:10:36:43:4c:38:27:94:76:a0: b0:cb:74:3e:f3:28:c0:7f:0e:6b:c6:72:3c:3a:23:44:12:b7: b3:cf:ed:62:1b:ba:6f:98:42:29:36:21:28:de:2d:d6:3a:a1: 8f:ad:4c:de:9a:6b:a6:4a:1c:a5:8e:f9:e8:7c:af:93:9c:be: 6f:5a:51:c8:14:46:80:8d:26:e1:18:c2:37:2a:3f:96:a4:86: 23:39:60:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNzAyMTU1MDIyWhcNMjUwNzA5MTU1MDIyWjAYMRYwFAYD VQQDEw02ODY1NTUzZS1hZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhtoKy7ShBdzVdp+VITIRr4kLS/5UtpFkSFiGjs9RaGlX7DgRTpEeZ4+DXcl 5pcHgiOyg7zlUvUFum+YY2S/zRiadCoKOMhIpABSaU6ewyIAxtf8d++qZto1mvNh 7A/arbpZteTJCH8yvV2tgWZ/K0Zp0T75L82O3xpVcM/rXkR2y/FRXkW/b4lC4rRT ZGWsMtk6+DlqTwJphPxf8ljCkVqh9rmfMz9KHiAVchLXlJncFoWirgMT4ReoazZ6 2SJ41mtu3fKUFuFaDcYbNMzJkcw7vrvKt6k+LqiPlpH0VQUA8WGBOzPFBT4SmYpO egxgsT4ldiaQeqJINSjWbrWnCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEosqr8y xQSOtyl5iBXfGxVTXEsaMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCysxACavqOoeRjlrKvVBBbmSnY5579fyrrJxvf7puDSOwxDtdqXb2H Q/PgSh3aNS5nZyhGbmXpdLlClrIR/2aZD7AeCKv4adZD+MDpt7csWuqHRtAeTkxw ypbsYOtmHvaZaI3F1Bu+0nSPHxkUhbXLaKQ6ko3QtvGELFbp3JGvsRWVEYbz+O9/ EnyGECA+M08YdecT6dvxsV2fUxWct7awynu56U8oAASPdtUQNkNMOCeUdqCwy3Q+ 8yjAfw5rxnI8OiNEErezz+1iG7pvmEIpNiEo3i3WOqGPrUzemmumShyljvnofK+T nL5vWlHIFEaAjSbhGMI3Kj+WpIYjOWB6 -----END CERTIFICATE-----Generated at Thu Jul 3 02:08:27 2025 by rpki-client