$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: ybWpYakB1eG/9mHUr2B+xoQIFjEDX24owaXJ5Hx4B/o= Subject key identifier: 33:2E:0F:5C:92:73:73:F7:EA:DF:CA:F9:1D:C6:46:EE:D8:5A:AF:37 Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0473 Signing time: Sat 23 Aug 2025 00:20:10 +0000 Manifest this update: Sat 23 Aug 2025 00:20:10 +0000 Manifest next update: Sat 30 Aug 2025 00:20:10 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: b0+AxuON/EV4E4P5+SuKISl3NFDMIEKHnN2pQbza0Hg=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Aug 23 00:20:10 2025 GMT Not After : Aug 30 00:20:10 2025 GMT Subject: CN=68a9093a-4447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:cf:71:5b:d1:ce:f3:86:8f:40:88:c0:cc: e3:8a:bd:7e:3e:7a:f5:bd:fc:41:0a:cc:12:f9:b1: 4c:dd:ce:3b:88:b2:15:c4:23:51:b7:2c:29:36:fe: 18:64:c1:86:0d:a6:fd:d6:a5:c8:a7:d0:a0:3f:1c: 46:cd:8d:91:da:4b:7d:69:97:28:9b:30:6e:1f:92: a0:2f:e2:7b:84:72:af:11:51:e5:7b:e6:1f:c3:0e: c3:44:8d:23:1a:e4:5a:27:84:d5:e1:14:4c:2c:0d: 2a:6a:af:b8:34:75:6f:c6:1b:10:cb:6e:f9:01:a3: 14:78:cd:45:ba:98:01:49:3e:94:d1:9c:66:67:55: 89:90:4c:3e:34:e4:fb:b1:00:f3:78:eb:04:63:8b: 10:38:c2:94:10:2c:69:6f:bc:b2:12:e5:b0:ef:7f: 46:c9:d1:c1:43:9f:84:89:b8:b9:ac:33:18:c0:f8: 28:3f:41:85:dc:96:55:54:7e:0e:6a:cb:fc:27:84: 07:b2:e9:38:e1:9b:2c:3d:b9:03:2f:e9:ca:f3:18: e9:7e:be:10:59:68:cc:ef:26:d8:51:58:5a:b2:72: 42:91:f1:4d:6e:fe:ac:37:91:ae:00:cd:d1:15:83: 06:c2:1e:cd:c5:fb:f9:bb:ae:50:72:d1:83:ef:5b: 7a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:0F:5C:92:73:73:F7:EA:DF:CA:F9:1D:C6:46:EE:D8:5A:AF:37 X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:06:63:e7:ca:c6:4b:2a:87:89:f9:cb:6f:ab:7d:47:3a:3d: 1a:1f:ab:0c:e7:0a:98:d0:6f:64:8e:46:33:e9:cf:95:b0:80: 9a:9a:2e:74:48:32:fb:1c:10:85:ed:16:2b:36:17:af:f7:d4: e0:68:5c:f1:f3:b5:08:d3:b9:04:10:30:2d:c9:08:6d:72:9c: bd:17:f7:de:4f:39:91:35:5b:bb:08:35:7f:ea:c5:4c:c1:9f: b4:d9:1d:e5:c3:00:3a:f9:dd:88:85:97:f5:93:93:ab:13:b6: ce:e5:dd:2f:12:f9:5b:90:0b:ae:2f:69:7f:24:5a:2d:3c:a7: 06:db:f8:5f:5b:c6:10:e1:14:35:f7:23:bf:e6:2e:c9:b6:99: 67:97:2e:64:88:8d:b1:c5:cf:6f:8f:73:0e:7e:ca:22:66:95: 7b:08:70:a7:26:f7:9d:63:cf:8e:f9:e9:c0:f0:87:c6:dc:bf: 82:d4:50:b0:af:4b:fb:b9:22:e3:00:a7:1d:30:db:c5:b8:6f: 4b:4b:12:03:9a:44:21:1b:e5:fc:19:0a:47:23:2e:6c:f6:03: 01:61:1a:93:a7:6e:d8:0d:e6:f4:68:eb:36:da:a9:ed:ea:6e: c5:98:a0:25:1f:21:52:e3:85:ba:0a:c6:2f:83:05:92:55:27: 79:d1:62:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUwODIzMDAyMDEwWhcNMjUwODMwMDAyMDEwWjAYMRYwFAYD VQQDEw02OGE5MDkzYS00NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGLPcVvRzvOGj0CIwMzjir1+Pnr1vfxBCswS+bFM3c47iLIVxCNRtywpNv4Y ZMGGDab91qXIp9CgPxxGzY2R2kt9aZcomzBuH5KgL+J7hHKvEVHle+Yfww7DRI0j GuRaJ4TV4RRMLA0qaq+4NHVvxhsQy275AaMUeM1FupgBST6U0ZxmZ1WJkEw+NOT7 sQDzeOsEY4sQOMKUECxpb7yyEuWw739GydHBQ5+Eibi5rDMYwPgoP0GF3JZVVH4O asv8J4QHsuk44ZssPbkDL+nK8xjpfr4QWWjM7ybYUVhasnJCkfFNbv6sN5GuAM3R FYMGwh7Nxfv5u65QctGD71t6wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMuD1yS c3P36t/K+R3GRu7YWq83MB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEBmPnysZLKoeJ+ctvq31HOj0aH6sM5wqY0G9kjkYz6c+VsICami50 SDL7HBCF7RYrNhev99TgaFzx87UI07kEEDAtyQhtcpy9F/feTzmRNVu7CDV/6sVM wZ+02R3lwwA6+d2IhZf1k5OrE7bO5d0vEvlbkAuuL2l/JFotPKcG2/hfW8YQ4RQ1 9yO/5i7Jtplnly5kiI2xxc9vj3MOfsoiZpV7CHCnJvedY8+O+enA8IfG3L+C1FCw r0v7uSLjAKcdMNvFuG9LSxIDmkQhG+X8GQpHIy5s9gMBYRqTp27YDeb0aOs22qnt 6m7FmKAlHyFS44W6CsYvgwWSVSd50WLD -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:09 2025 by rpki-client