$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: /U8Nva4M1CHrM2ZY/QgMW3beSijDLcWDXtNteaCQXIU= Subject key identifier: 18:B9:A5:57:38:A9:00:D1:8D:94:AD:91:3E:52:73:CE:44:CD:6E:5F Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09BC Signing time: Wed 14 May 2025 20:05:42 +0000 Manifest this update: Wed 14 May 2025 20:05:41 +0000 Manifest next update: Wed 21 May 2025 20:05:41 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: jo83PaP0YlfD4vqP2q1htIneEzrLA4QWJxQklluh1os=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: May 14 20:05:41 2025 GMT Not After : May 21 20:05:41 2025 GMT Subject: CN=6824f795-a9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:ab:05:14:42:93:3c:1f:6b:4a:e3:bc:36: 1c:c0:1c:87:f9:14:af:49:3d:d9:ba:eb:c6:84:16: 51:08:50:e9:31:32:68:60:65:ef:a7:d2:f8:1f:e7: f4:ad:0f:a4:8c:e0:62:50:e9:cd:10:7b:b9:c1:81: 97:11:a6:4d:be:2a:32:6e:a7:12:21:4b:f2:d0:9a: 9f:d8:8a:6c:e6:b5:ce:a5:ad:3d:87:db:ec:51:c0: 10:ed:87:b7:97:4b:e2:3a:83:28:38:7e:a2:3b:9f: e0:95:0a:2b:0e:a8:c7:af:85:28:24:0d:3b:e1:21: c4:44:e0:2a:5a:3d:29:b7:c3:32:03:ba:65:8d:5f: b1:ef:d5:e4:ca:01:ab:57:d8:95:20:f9:f5:5f:61: 37:f7:ee:5f:96:2c:4d:9d:5e:4f:c4:4d:64:56:73: 13:0b:90:3e:eb:88:37:26:95:e4:b8:f0:0b:46:56: 55:d8:81:85:b4:d1:19:eb:6b:80:e3:fe:d8:b4:1d: a8:32:dd:d5:87:c4:f3:d9:84:92:59:06:d0:75:2f: bd:a6:24:36:3a:89:5c:06:08:3f:56:0c:3c:78:fe: a2:d7:80:dc:17:ee:35:79:87:d2:64:45:dc:87:97: cd:3f:07:a0:d2:f7:13:0c:21:53:08:f6:57:81:a8: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B9:A5:57:38:A9:00:D1:8D:94:AD:91:3E:52:73:CE:44:CD:6E:5F X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:7a:c6:30:69:7b:0d:a0:83:6c:78:00:11:68:fa:25:be: a8:2c:29:c0:cc:b3:85:fd:d2:a2:26:46:25:55:f3:78:82:59: 68:13:e8:71:62:38:e8:60:47:ef:4a:92:57:70:5b:9f:04:73: d0:4e:83:fd:5a:12:c9:1c:19:4b:00:54:13:d7:4d:16:2b:99: 43:d6:57:9a:d9:45:e7:44:c2:9a:01:89:c3:86:25:da:bb:05: 7b:48:43:ca:8d:bc:1c:92:0e:1d:0e:23:b1:8e:02:49:99:9f: 8e:37:8b:72:3d:83:43:8a:12:3b:93:ab:ae:79:61:53:08:c3: 7f:52:be:60:01:a8:39:be:88:1d:de:b1:80:ab:b9:8a:e7:c8: 54:48:b6:c8:32:af:f4:77:61:a6:26:7b:0c:9e:8d:c0:94:8c: 76:90:00:14:d5:34:48:e3:dd:49:e0:97:75:55:c2:29:fd:1c: 4e:49:ce:a5:18:c9:2c:bd:4b:f9:dd:ce:57:4c:e2:9d:95:1a: 57:7a:de:80:d0:dd:2a:cc:69:b6:63:96:de:44:0d:0b:ad:d2: 9b:d9:3b:2a:d0:9e:e9:92:2c:9a:d0:e1:82:4d:e1:a0:96:b1: a6:34:11:4b:35:03:3e:c8:01:63:c3:53:03:1b:c2:2c:97:37: 2d:ae:cf:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwNTE0MjAwNTQxWhcNMjUwNTIxMjAwNTQxWjAYMRYwFAYD VQQDEw02ODI0Zjc5NS1hOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYarBRRCkzwfa0rjvDYcwByH+RSvST3ZuuvGhBZRCFDpMTJoYGXvp9L4H+f0 rQ+kjOBiUOnNEHu5wYGXEaZNvioybqcSIUvy0Jqf2Ips5rXOpa09h9vsUcAQ7Ye3 l0viOoMoOH6iO5/glQorDqjHr4UoJA074SHEROAqWj0pt8MyA7pljV+x79XkygGr V9iVIPn1X2E39+5flixNnV5PxE1kVnMTC5A+64g3JpXkuPALRlZV2IGFtNEZ62uA 4/7YtB2oMt3Vh8Tz2YSSWQbQdS+9piQ2OolcBgg/Vgw8eP6i14DcF+41eYfSZEXc h5fNPweg0vcTDCFTCPZXgaghgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi5pVc4 qQDRjZStkT5Sc85EzW5fMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUH3rGMGl7DaCDbHgAEWj6Jb6oLCnAzLOF/dKiJkYlVfN4glloE+hx YjjoYEfvSpJXcFufBHPQToP9WhLJHBlLAFQT100WK5lD1lea2UXnRMKaAYnDhiXa uwV7SEPKjbwckg4dDiOxjgJJmZ+ON4tyPYNDihI7k6uueWFTCMN/Ur5gAag5vogd 3rGAq7mK58hUSLbIMq/0d2GmJnsMno3AlIx2kAAU1TRI491J4Jd1VcIp/RxOSc6l GMksvUv53c5XTOKdlRpXet6A0N0qzGm2Y5beRA0LrdKb2Tsq0J7pkiya0OGCTeGg lrGmNBFLNQM+yAFjw1MDG8Islzctrs8k -----END CERTIFICATE-----Generated at Fri May 16 06:31:45 2025 by rpki-client