$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: Jg+iqZNjM1m/LFGlPjQc2Vm11CAFeBNkCAEQ2IDnQvA= Subject key identifier: D7:0E:89:6A:5E:E4:9D:C0:97:75:53:FA:EF:E9:86:95:14:EB:A9:AD Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09F0 Signing time: Fri 22 Aug 2025 20:00:25 +0000 Manifest this update: Fri 22 Aug 2025 20:00:25 +0000 Manifest next update: Fri 29 Aug 2025 20:00:25 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: Ksk66UM0m7GhB02shsueBJTwVQs8w5Zdq6CclRuxlIs=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: ClQj70D4QsMeSPs5XhoDWoqTMjGb5jdaAiwIUHB/7eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Aug 22 20:00:25 2025 GMT Not After : Aug 29 20:00:25 2025 GMT Subject: CN=68a8cc59-0f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:72:8e:ff:bc:e9:7c:34:8e:fc:53:11:28: 3b:5d:b6:e7:05:2d:13:40:a3:4e:66:67:40:08:d5: 86:64:2a:13:48:46:b0:48:d4:0a:4f:a8:00:0c:e7: 9d:7c:64:44:1b:0f:c0:f9:92:4a:f7:ad:2e:b0:b9: 6b:ad:47:e0:14:c4:ef:91:cb:92:da:12:39:5e:94: f6:a0:8d:f1:fe:25:ac:b4:b8:f3:70:c7:d9:a0:de: 98:46:49:11:4d:0d:0c:f8:08:a8:3a:cb:9f:8e:18: 66:a6:d1:c9:21:b1:19:c4:08:4f:28:fd:86:77:9e: fb:49:89:fa:7f:10:29:34:5e:1b:6b:b1:4a:a3:f1: a7:f4:97:e2:68:97:1f:b1:08:74:19:35:48:b3:49: 9e:b8:be:10:d7:cb:dd:67:5d:be:68:06:13:87:48: c4:a4:a2:1f:3c:94:a3:82:36:32:92:c1:09:d2:e6: a1:12:1f:44:5d:1b:00:19:aa:89:f2:ec:d0:33:4c: 28:10:db:2c:29:e8:27:12:cb:11:8c:59:8d:06:da: 0d:9c:a2:b7:fd:81:b3:79:e4:22:54:d7:98:c3:a9: 41:59:b0:63:2d:ef:ed:a2:78:6e:f7:7d:c2:b6:96: 99:7a:e1:68:fb:af:a2:58:4c:71:fc:d4:ab:af:cd: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:89:6A:5E:E4:9D:C0:97:75:53:FA:EF:E9:86:95:14:EB:A9:AD X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:92:fd:c9:45:bc:5b:ce:05:4d:02:9e:d2:b9:90:40:c2:55: bb:2a:8d:35:00:fa:84:62:fe:ee:af:e4:56:09:ae:41:b4:d6: 28:f9:6c:93:3d:c0:02:25:c8:8b:9b:3d:0d:27:93:1d:25:9c: 7c:7f:ed:62:62:95:ec:e9:68:75:0d:02:9b:4c:c1:48:11:80: 53:b6:58:52:f7:20:6e:64:d0:da:ce:94:35:51:49:4f:e6:c9: 0d:a5:47:08:44:ff:6f:76:39:61:91:a2:9c:fa:a5:2e:84:0d: bf:59:c0:44:2a:d3:2d:d4:1a:0d:06:85:ba:80:ed:99:43:45: 06:f1:7a:de:11:da:34:7e:d7:2d:9e:c5:7c:d1:e4:b3:d7:81: f8:f0:12:be:36:37:d6:8b:05:4b:de:f9:17:f8:97:06:1c:7d: d0:e8:81:b1:d9:69:34:0a:31:3a:73:3c:a4:d8:d3:c2:07:7c: 8a:8f:75:cc:37:14:7e:dc:15:aa:95:c8:93:26:a8:dc:3c:69: 9b:e5:d1:b9:83:77:46:23:40:1f:0a:04:df:a5:e0:56:5a:e1: 48:f3:ba:fe:de:17:3f:f8:02:9e:7c:bd:dd:df:13:f9:0b:08: a6:48:2e:6d:7d:e0:99:c8:37:ab:22:01:2d:78:1a:82:87:01: 36:40:61:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwODIyMjAwMDI1WhcNMjUwODI5MjAwMDI1WjAYMRYwFAYD VQQDEw02OGE4Y2M1OS0wZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbFyjv+86Xw0jvxTESg7XbbnBS0TQKNOZmdACNWGZCoTSEawSNQKT6gADOed fGREGw/A+ZJK960usLlrrUfgFMTvkcuS2hI5XpT2oI3x/iWstLjzcMfZoN6YRkkR TQ0M+AioOsufjhhmptHJIbEZxAhPKP2Gd577SYn6fxApNF4ba7FKo/Gn9JfiaJcf sQh0GTVIs0meuL4Q18vdZ12+aAYTh0jEpKIfPJSjgjYyksEJ0uahEh9EXRsAGaqJ 8uzQM0woENssKegnEssRjFmNBtoNnKK3/YGzeeQiVNeYw6lBWbBjLe/tonhu933C tpaZeuFo+6+iWExx/NSrr81aDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcOiWpe 5J3Al3VT+u/phpUU66mtMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWkv3JRbxbzgVNAp7SuZBAwlW7Ko01APqEYv7ur+RWCa5BtNYo+WyT PcACJciLmz0NJ5MdJZx8f+1iYpXs6Wh1DQKbTMFIEYBTtlhS9yBuZNDazpQ1UUlP 5skNpUcIRP9vdjlhkaKc+qUuhA2/WcBEKtMt1BoNBoW6gO2ZQ0UG8XreEdo0ftct nsV80eSz14H48BK+NjfWiwVL3vkX+JcGHH3Q6IGx2Wk0CjE6czyk2NPCB3yKj3XM NxR+3BWqlciTJqjcPGmb5dG5g3dGI0AfCgTfpeBWWuFI87r+3hc/+AKefL3d3xP5 CwimSC5tfeCZyDerIgEteBqChwE2QGGg -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:34 2025 by rpki-client