$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: ddXOcqfAe/xACX+2iN3ZzZTYZs6vzkKXMgbcd3+CTsM= Subject key identifier: 37:7B:48:F2:DB:EF:1C:2E:7E:A9:F4:FE:FD:1F:22:FF:75:24:A6:00 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09D4 Signing time: Wed 02 Jul 2025 20:09:17 +0000 Manifest this update: Wed 02 Jul 2025 20:09:16 +0000 Manifest next update: Wed 09 Jul 2025 20:09:16 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: wh77XemgGVcFno+F889it1FQaVtbkOAaEbLT3ty7gow=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2522 (0x9da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Jul 2 20:09:16 2025 GMT Not After : Jul 9 20:09:16 2025 GMT Subject: CN=686591ec-7fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:ea:80:52:ca:cf:95:ab:e2:85:66:19:a3: 9c:f7:e2:87:3c:8e:0e:ba:8b:40:70:a4:c6:7b:73: 24:25:c0:7e:e3:02:47:46:eb:d7:04:b7:9d:e1:98: d9:02:7e:5f:fd:a9:c9:3b:b2:da:d2:5b:fd:c1:bf: 00:aa:1c:d9:84:fc:fe:39:9f:64:16:82:ee:f9:f4: a2:b1:6a:92:f7:95:a4:bf:4c:63:35:66:05:f1:55: ee:51:48:6d:3b:cf:4e:68:98:5b:d4:9e:4f:cb:77: 4c:a7:af:d8:4a:11:ac:e4:0c:8d:8e:24:09:a2:b9: fd:22:e0:2d:fe:16:66:f4:ad:f9:2c:08:d8:0d:9e: 6b:54:c9:e9:d9:b5:8e:e5:d3:74:6a:b0:d7:5d:ef: 46:3d:8d:33:f0:7c:17:65:9d:ac:24:e2:ce:61:b5: 5b:b9:df:1d:01:c5:8c:01:3d:58:0c:5c:02:de:5a: ea:4b:63:fa:90:06:3c:87:e0:c9:c7:b9:dc:bf:aa: 0d:b1:6f:84:63:89:cd:19:c9:aa:c7:a0:f2:89:d1: ec:a0:5c:c3:62:ed:76:0d:d2:11:23:e0:3a:60:46: ee:f4:05:40:ab:63:47:21:6f:3e:42:dc:30:71:f1: dc:d7:79:e3:d3:43:14:80:0c:a8:17:1c:54:14:a9: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7B:48:F2:DB:EF:1C:2E:7E:A9:F4:FE:FD:1F:22:FF:75:24:A6:00 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:dd:6d:c6:e9:c8:44:a6:89:71:7d:48:b1:a6:c3:51:a0:1b: 41:93:5c:fe:38:36:ee:37:70:7c:db:a9:55:de:d1:f1:9c:77: 33:31:52:9f:cb:78:0c:1c:7f:a8:e8:c6:95:80:09:7e:58:60: 4d:6e:5f:62:a0:c0:14:80:ec:b5:35:2e:bd:a3:30:48:b0:28: 2b:d6:d9:f6:be:1a:92:b6:16:79:cc:c0:0d:b7:17:c0:5b:53: e5:05:34:ca:b1:b1:f8:c6:8b:cb:4e:de:6d:6c:91:03:b5:58: 32:f5:2f:d1:d5:e8:33:49:f5:ff:7f:28:2a:00:95:c5:a5:fe: a4:c6:92:59:11:1f:40:c8:53:67:89:b3:1d:70:12:44:56:37: 65:ee:f5:cc:8c:57:d0:f2:e5:5e:00:b5:b9:ae:72:15:f5:2d: 7f:42:f0:9e:26:b6:78:b2:b0:2f:29:b2:dc:e4:9e:b2:ff:f1: f3:36:c4:e3:cc:ae:4c:88:86:9a:9e:d8:ae:ae:87:0d:58:d6: 48:e0:45:7b:81:40:75:81:27:0e:ee:68:2b:ab:3b:8e:f5:d0: ff:59:98:23:33:c3:1d:22:79:96:b6:64:78:92:24:54:9d:bb: ea:ac:97:af:37:0a:18:03:63:81:f4:2b:4b:06:60:93:53:0e: 25:29:61:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwNzAyMjAwOTE2WhcNMjUwNzA5MjAwOTE2WjAYMRYwFAYD VQQDEw02ODY1OTFlYy03ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsDqgFLKz5Wr4oVmGaOc9+KHPI4OuotAcKTGe3MkJcB+4wJHRuvXBLed4ZjZ An5f/anJO7La0lv9wb8AqhzZhPz+OZ9kFoLu+fSisWqS95Wkv0xjNWYF8VXuUUht O89OaJhb1J5Py3dMp6/YShGs5AyNjiQJorn9IuAt/hZm9K35LAjYDZ5rVMnp2bWO 5dN0arDXXe9GPY0z8HwXZZ2sJOLOYbVbud8dAcWMAT1YDFwC3lrqS2P6kAY8h+DJ x7ncv6oNsW+EY4nNGcmqx6DyidHsoFzDYu12DdIRI+A6YEbu9AVAq2NHIW8+Qtww cfHc13nj00MUgAyoFxxUFKkXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd7SPLb 7xwufqn0/v0fIv91JKYAMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc3W3G6chEpolxfUixpsNRoBtBk1z+ODbuN3B826lV3tHxnHczMVKf y3gMHH+o6MaVgAl+WGBNbl9ioMAUgOy1NS69ozBIsCgr1tn2vhqSthZ5zMANtxfA W1PlBTTKsbH4xovLTt5tbJEDtVgy9S/R1egzSfX/fygqAJXFpf6kxpJZER9AyFNn ibMdcBJEVjdl7vXMjFfQ8uVeALW5rnIV9S1/QvCeJrZ4srAvKbLc5J6y//HzNsTj zK5MiIaantiurocNWNZI4EV7gUB1gScO7mgrqzuO9dD/WZgjM8MdInmWtmR4kiRU nbvqrJevNwoYA2OB9CtLBmCTUw4lKWFF -----END CERTIFICATE-----Generated at Thu Jul 3 06:29:36 2025 by rpki-client