$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: STNIo7wJzexU4qd0KNMbsks+gSWTrDQpBLJzLJPA8/I= Subject key identifier: 60:9F:8A:C3:C7:C9:2B:27:8B:50:4B:34:8C:95:64:94:0E:CA:F4:C0 Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 349A Signing time: Wed 02 Jul 2025 14:57:55 +0000 Manifest this update: Wed 02 Jul 2025 14:57:55 +0000 Manifest next update: Wed 09 Jul 2025 14:57:55 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: rqahzQ1rvvrNa48oK4aY0jEDKFCUkenRyXJ8HN1KnFY=) 2: AA15744E2B0111F09CD4A96AC4F9AE02.roa (hash: 45hnvJuRb+v92htfdvjwOgRNSDtIXR5oDwj0w/Xa5e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Jul 2 14:57:55 2025 GMT Not After : Jul 9 14:57:55 2025 GMT Subject: CN=686548f3-6f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:b6:54:39:68:25:46:f4:f0:93:e1:5d:ad: 6c:bb:9c:c3:cb:9a:2f:c4:9d:39:93:03:a1:df:4a: b4:c3:00:bf:7b:7f:8f:a6:cf:eb:7f:3b:48:dc:05: 79:bb:02:7d:d4:80:95:67:23:93:52:d7:fe:0a:5d: 91:59:27:03:3a:2c:dc:cf:4f:23:49:03:c5:fd:35: 0c:4a:0f:5e:1f:16:2f:48:13:01:94:e9:d1:7c:de: d5:9d:82:43:e2:fd:03:ee:5d:d2:c2:a9:e3:ab:2b: f1:41:bf:8a:92:03:ca:57:d4:e2:f2:73:3b:a0:0d: 09:f3:fd:76:ce:5d:aa:4e:eb:20:34:38:80:41:cd: d7:a6:db:90:6e:36:d9:72:30:c2:85:13:5e:1c:4b: 7a:67:2c:98:b4:88:9c:ca:a2:37:fa:84:de:44:13: ce:ba:4d:9a:d1:a9:81:e6:4a:37:b9:73:cd:98:70: bc:d0:75:61:73:a0:a7:d4:cf:b8:4a:c4:ab:47:41: 7d:4d:38:e6:11:ce:ef:15:cf:52:70:af:20:a3:de: ea:7d:14:d5:c6:52:9f:c5:05:10:57:3b:09:f7:76: a7:0b:54:15:c7:b2:f0:d2:79:19:51:ee:99:fc:ab: 19:e3:bd:92:f0:d7:63:af:cd:ad:a1:52:49:61:68: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9F:8A:C3:C7:C9:2B:27:8B:50:4B:34:8C:95:64:94:0E:CA:F4:C0 X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a8:ee:e0:ed:de:6a:cb:07:d6:c1:e6:18:87:56:7f:9f:76: 74:6e:46:68:9d:23:b6:b3:23:b6:be:42:78:81:6f:f0:fb:a1: ed:af:28:cb:e7:94:7a:ce:86:87:a6:c3:7b:a0:2e:8e:36:b7: bd:5e:e8:3f:ec:f1:60:b5:ea:d3:68:23:f0:26:0d:8c:db:5d: 89:2d:fb:0f:08:15:d7:e1:56:5f:e8:3a:3c:c1:f7:0f:03:2e: ec:d6:bf:45:2d:86:0e:b0:9b:eb:81:4f:9f:b0:d9:d5:b3:27: fd:e0:92:93:14:78:dc:1b:ff:0a:4c:8e:a9:3a:0c:78:c7:dd: b9:b0:b9:9f:86:cf:3e:73:ad:85:d9:ad:27:40:73:7c:73:6b: 90:fd:d7:10:92:b6:50:a9:8f:27:65:8f:18:32:7e:58:fb:ea: 0c:2e:37:91:a4:26:cb:74:4e:9e:11:cb:d0:6b:72:24:2c:ef: a5:7b:ad:45:71:de:3c:ab:99:88:1e:48:80:c7:a5:be:1a:04: f4:ee:17:c9:ff:0a:b4:29:82:f2:c8:f0:6e:da:58:ff:27:6a: 08:99:a6:5a:3b:24:39:36:bd:06:e6:e0:48:48:90:0c:f3:3d: c0:3a:05:ec:f8:62:f3:ed:e7:f2:b3:93:96:a3:57:4c:91:7c: 85:bc:28:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjUwNzAyMTQ1NzU1WhcNMjUwNzA5MTQ1NzU1WjAYMRYwFAYD VQQDEw02ODY1NDhmMy02ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCG2VDloJUb08JPhXa1su5zDy5ovxJ05kwOh30q0wwC/e3+Pps/rfztI3AV5 uwJ91ICVZyOTUtf+Cl2RWScDOizcz08jSQPF/TUMSg9eHxYvSBMBlOnRfN7VnYJD 4v0D7l3SwqnjqyvxQb+KkgPKV9Ti8nM7oA0J8/12zl2qTusgNDiAQc3XptuQbjbZ cjDChRNeHEt6ZyyYtIicyqI3+oTeRBPOuk2a0amB5ko3uXPNmHC80HVhc6Cn1M+4 SsSrR0F9TTjmEc7vFc9ScK8go97qfRTVxlKfxQUQVzsJ93anC1QVx7Lw0nkZUe6Z /KsZ472S8Ndjr82toVJJYWjJKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCfisPH ySsni1BLNIyVZJQOyvTAMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAqO7g7d5qywfWweYYh1Z/n3Z0bkZonSO2syO2vkJ4gW/w+6HtryjL 55R6zoaHpsN7oC6ONre9Xug/7PFgterTaCPwJg2M212JLfsPCBXX4VZf6Do8wfcP Ay7s1r9FLYYOsJvrgU+fsNnVsyf94JKTFHjcG/8KTI6pOgx4x925sLmfhs8+c62F 2a0nQHN8c2uQ/dcQkrZQqY8nZY8YMn5Y++oMLjeRpCbLdE6eEcvQa3IkLO+le61F cd48q5mIHkiAx6W+GgT07hfJ/wq0KYLyyPBu2lj/J2oImaZaOyQ5Nr0G5uBISJAM 8z3AOgXs+GLz7efys5OWo1dMkXyFvCiP -----END CERTIFICATE-----Generated at Fri Jul 4 06:48:00 2025 by rpki-client