$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft File: 5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json) Hash identifier: Q56VDo4MXpPsCSWhPlfIguDhjBHtU/PXRhc0l8k2HCo= Subject key identifier: C1:9A:B7:67:DE:4F:EF:50:5A:5A:BF:52:94:92:CE:E1:D0:B0:E3:0E Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03 Certificate issuer: /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203 Certificate serial: 147E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft Manifest number: 147C Signing time: Wed 02 Jul 2025 17:03:22 +0000 Manifest this update: Wed 02 Jul 2025 17:03:21 +0000 Manifest next update: Wed 09 Jul 2025 17:03:21 +0000 Files and hashes: 1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: ngbvyOHMr0jqL4SgSoFooTDI8uCIGMb5Vj1N9fcqoiA=) 2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: h/4RQkDOLBBPlrQUpebdiQb7wWMHpGVL3kG7tSUKXbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5246 (0x147e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203 Validity Not Before: Jul 2 17:03:21 2025 GMT Not After : Jul 9 17:03:21 2025 GMT Subject: CN=6865665a-4760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:e6:6b:6f:89:bd:65:1c:77:e9:63:c3:ad: ab:c5:28:23:75:95:ae:b1:11:47:62:3b:2e:94:51: 42:28:6f:33:55:7b:7c:04:76:da:7e:b1:87:ef:1d: 73:85:07:99:63:72:28:e0:60:02:db:59:48:b4:a9: bf:eb:c3:9e:3d:4e:e7:cb:0a:2c:97:73:c0:00:62: 4b:46:e1:83:61:46:55:92:fe:ee:37:3a:0e:d8:aa: 30:de:36:0a:0e:20:1f:e7:e6:83:54:ff:8a:2b:3d: d7:12:3a:fa:4c:08:b5:15:2a:38:09:6b:43:7c:64: 52:07:84:a9:20:ea:e8:5c:28:c7:6f:80:da:47:d5: f7:b8:a0:8f:f5:61:a7:46:95:22:54:06:c0:e8:e9: 2f:27:10:6d:8b:c3:65:90:6c:57:6d:0e:45:dc:f1: c8:1d:3c:d0:5e:2b:d0:57:2f:04:3c:25:f9:6b:b2: e6:09:db:80:4c:f3:b3:99:70:2e:64:32:51:e7:01: 50:b0:bb:91:1e:a7:24:b7:b3:0a:66:ca:e4:18:9f: f3:d5:4b:3a:25:1b:65:41:e8:ba:7e:65:f9:2f:25: 1c:fd:b3:8b:e7:8c:b0:0c:26:d0:43:f0:56:f9:e4: 0f:9b:c1:1b:d4:26:2b:1e:1f:f3:a7:ae:d9:6f:f3: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9A:B7:67:DE:4F:EF:50:5A:5A:BF:52:94:92:CE:E1:D0:B0:E3:0E X509v3 Authority Key Identifier: keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:62:4d:ca:60:fe:06:db:2f:03:c1:5f:cf:67:03:6c:15:be: c2:26:33:da:00:44:e4:2e:d9:21:88:bf:bf:d6:99:41:e7:24: 2f:e8:d1:97:f3:65:14:fa:5e:73:d1:da:8c:26:2c:dd:10:2d: 3d:59:92:e3:4f:8d:37:35:e1:10:e4:12:7d:39:58:0e:af:64: ed:4c:50:7b:80:8e:50:bc:df:15:63:ec:f3:2f:c7:81:f5:07: 17:c9:9e:a9:8e:62:2b:e0:76:77:c9:60:a7:37:26:e9:b3:af: 58:db:24:c4:5f:46:88:84:8b:88:e0:3c:bc:43:4c:97:2d:4b: 55:42:98:b6:d3:ab:b5:72:de:77:a7:81:33:cd:57:50:7d:78: 28:80:64:98:26:85:e1:b5:f6:66:73:9f:82:6e:8a:c0:98:a4: f0:41:95:35:3c:2b:ef:18:b4:57:b4:c1:d8:7c:06:29:33:7b: e5:4e:ca:e3:bb:6f:43:e5:e5:83:be:59:c7:ed:fe:29:15:cc: 8b:b9:52:c2:fb:9e:7b:78:d5:b4:aa:31:e8:f5:e4:d2:10:7b: 2b:02:de:d3:b4:b4:b2:34:6a:7f:f4:cc:54:09:ed:c3:13:5f: 2e:0c:cd:99:39:23:c1:cc:40:27:79:76:87:ef:75:b3:e2:3a: 91:f7:bf:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCQTQxMTAvBgNVBAUTKEU2NkJBODkyNTk1MDE0Nzk0QkI2NDUxRDE0MjgxQzg0 MDAyMDYyMDMwHhcNMjUwNzAyMTcwMzIxWhcNMjUwNzA5MTcwMzIxWjAYMRYwFAYD VQQDEw02ODY1NjY1YS00NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqHma2+JvWUcd+ljw62rxSgjdZWusRFHYjsulFFCKG8zVXt8BHbafrGH7x1z hQeZY3Io4GAC21lItKm/68OePU7nywosl3PAAGJLRuGDYUZVkv7uNzoO2Kow3jYK DiAf5+aDVP+KKz3XEjr6TAi1FSo4CWtDfGRSB4SpIOroXCjHb4DaR9X3uKCP9WGn RpUiVAbA6OkvJxBti8NlkGxXbQ5F3PHIHTzQXivQVy8EPCX5a7LmCduATPOzmXAu ZDJR5wFQsLuRHqckt7MKZsrkGJ/z1Us6JRtlQei6fmX5LyUc/bOL54ywDCbQQ/BW +eQPm8Eb1CYrHh/zp67Zb/P3PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGat2fe T+9QWlq/UpSSzuHQsOMOMB8GA1UdIwQYMBaAFOZrqJJZUBR5S7ZFHRQoHIQAIGID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJBNC80N0U5MjY4NjY4 RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZIbEx0a1VkRkNnY2hBQWdZ Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVtdW9rbGxRRkhsTHRrVWRGQ2djaEFBZ1lnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJBNC80N0U5MjY4NjY4RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZI bEx0a1VkRkNnY2hBQWdZZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVYk3KYP4G2y8DwV/PZwNsFb7CJjPaAETkLtkhiL+/1plB5yQv6NGX 82UU+l5z0dqMJizdEC09WZLjT403NeEQ5BJ9OVgOr2TtTFB7gI5QvN8VY+zzL8eB 9QcXyZ6pjmIr4HZ3yWCnNybps69Y2yTEX0aIhIuI4Dy8Q0yXLUtVQpi206u1ct53 p4EzzVdQfXgogGSYJoXhtfZmc5+CborAmKTwQZU1PCvvGLRXtMHYfAYpM3vlTsrj u29D5eWDvlnH7f4pFcyLuVLC+557eNW0qjHo9eTSEHsrAt7TtLSyNGp/9MxUCe3D E18uDM2ZOSPBzEAneXaH73Wz4jqR979/ -----END CERTIFICATE-----Generated at Thu Jul 3 10:29:28 2025 by rpki-client