$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: j07fWtyJk4qH47E1NTAIKTiBHtIhCwJhcISjVA4ggtQ= Subject key identifier: 1B:C0:69:D7:C6:78:78:6B:7F:4B:B4:E0:B7:7B:AE:E3:17:1E:34:F6 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 54 Signing time: Tue 01 Jul 2025 08:00:21 +0000 Manifest this update: Tue 01 Jul 2025 08:00:21 +0000 Manifest next update: Tue 08 Jul 2025 08:00:21 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: D06r4bydgpr9+00maSzkz6l67g1GlaYJf7dljeb9U3w=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: Jul 1 08:00:21 2025 GMT Not After : Jul 8 08:00:21 2025 GMT Subject: CN=68639595-08da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:95:f8:3d:e8:c2:46:14:64:78:21:ce:94: ae:66:2d:5c:b1:ed:fb:1b:ed:da:93:b0:94:fa:68: a7:2b:53:85:fc:82:38:c6:98:0b:1f:db:b5:48:41: 9a:1e:dc:40:c9:8d:c9:9c:f0:3d:13:54:8f:27:dd: ed:96:db:32:ba:75:be:d1:ce:69:07:33:b7:fb:2f: ce:d4:1d:fe:d2:c9:18:9e:98:25:93:5f:59:11:9c: 9f:6d:6e:59:06:c1:79:36:0b:1d:0a:f0:af:5f:3c: b3:75:29:99:7e:4d:58:4c:09:f1:e1:d7:7c:b2:29: 0a:f8:75:c2:ea:8f:0f:6f:22:79:da:da:ad:b8:3d: b8:80:10:bd:6f:1b:54:65:84:4d:7c:ab:71:98:6a: 66:45:83:0e:64:e4:17:c0:25:c4:d6:38:a0:c6:b0: 48:43:2a:e4:fe:72:9a:21:36:2f:3c:98:2f:af:f3: 67:05:ac:79:61:53:33:21:82:aa:c8:aa:8f:06:0d: 58:9f:2e:e4:07:b6:21:16:3a:96:39:f0:97:ee:0c: 82:92:be:ca:6f:91:d7:75:24:ea:ae:a7:1e:b1:08: 0f:c0:ad:ef:d0:9f:b4:ce:76:91:46:74:2c:6a:89: b5:46:3a:00:6b:56:99:f5:74:b7:79:fd:62:df:98: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:69:D7:C6:78:78:6B:7F:4B:B4:E0:B7:7B:AE:E3:17:1E:34:F6 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:e9:09:e4:e2:14:10:c7:fb:3f:4a:13:1f:57:de:d0:3a:23: ea:37:df:26:27:66:e3:70:90:b8:a5:e5:cf:8d:24:f8:4b:b7: 4f:0c:c7:10:d7:e8:58:59:f9:d7:93:10:9d:4b:6e:37:c7:99: 15:7b:c6:93:5d:db:6d:70:a6:55:45:21:ed:e6:c6:09:e3:10: ec:33:a2:d1:23:f1:75:34:76:8e:7f:32:e6:ff:23:f1:26:46: 39:3d:af:74:3c:d3:d6:41:1c:c6:f0:7d:1c:48:33:fe:5c:c7: 96:91:95:cf:0e:86:9d:fe:49:ef:90:01:f1:ff:28:76:eb:df: 72:44:17:16:98:27:ec:1e:a0:83:3e:44:55:25:d2:a5:ce:7b: a9:14:05:ab:90:21:90:c6:0e:ea:ba:f1:9e:c7:db:1f:42:47: a9:c7:66:2b:5b:25:b9:82:30:8b:ff:24:e8:f3:66:32:01:53: ce:2e:95:4f:c2:5a:e8:cc:eb:d5:16:34:40:ba:4b:bf:72:02: 72:a5:de:0a:49:da:af:33:f4:7f:d8:9c:c9:ac:80:fa:8f:58: a4:64:cd:21:a1:2d:78:11:1c:c7:2e:97:ff:a2:a1:02:3e:d9: b5:20:26:a2:77:82:28:e2:54:28:12:9f:79:f2:a7:c5:ab:ed: 2d:3d:cd:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NCRTExMC8GA1UEBRMoOUExNjI0RjQ2MDgyRjU0QUM1Nzc4ODU5RTIyNkJEM0JB NjkwMjNGNDAeFw0yNTA3MDEwODAwMjFaFw0yNTA3MDgwODAwMjFaMBgxFjAUBgNV BAMTDTY4NjM5NTk1LTA4ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+jZX4PejCRhRkeCHOlK5mLVyx7fsb7dqTsJT6aKcrU4X8gjjGmAsf27VIQZoe 3EDJjcmc8D0TVI8n3e2W2zK6db7RzmkHM7f7L87UHf7SyRiemCWTX1kRnJ9tblkG wXk2Cx0K8K9fPLN1KZl+TVhMCfHh13yyKQr4dcLqjw9vInna2q24PbiAEL1vG1Rl hE18q3GYamZFgw5k5BfAJcTWOKDGsEhDKuT+cpohNi88mC+v82cFrHlhUzMhgqrI qo8GDVifLuQHtiEWOpY58JfuDIKSvspvkdd1JOqupx6xCA/Are/Qn7TOdpFGdCxq ibVGOgBrVpn1dLd5/WLfmPGBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG8Bp18Z4 eGt/S7Tgt3uu4xceNPYwHwYDVR0jBBgwFoAUmhYk9GCC9UrFd4hZ4ia9O6aQI/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0JFLzgzQkE4N0FFRDdD MjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWhZazlHQ0M5VXJGZDRoWjRpYTlPNmFRSV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0JFLzgzQkE4N0FFRDdDMjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVy RmQ0aFo0aWE5TzZhUUlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEbpCeTiFBDH+z9KEx9X3tA6I+o33yYnZuNwkLil5c+NJPhLt08MxxDX 6FhZ+deTEJ1LbjfHmRV7xpNd221wplVFIe3mxgnjEOwzotEj8XU0do5/Mub/I/Em Rjk9r3Q809ZBHMbwfRxIM/5cx5aRlc8Ohp3+Se+QAfH/KHbr33JEFxaYJ+weoIM+ RFUl0qXOe6kUBauQIZDGDuq68Z7H2x9CR6nHZitbJbmCMIv/JOjzZjIBU84ulU/C WujM69UWNEC6S79yAnKl3gpJ2q8z9H/YnMmsgPqPWKRkzSGhLXgRHMcul/+ioQI+ 2bUgJqJ3gijiVCgSn3nyp8Wr7S09zRQ= -----END CERTIFICATE-----Generated at Thu Jul 3 05:43:48 2025 by rpki-client