$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: 8xBa2V6LBvwVrXHTo9n9j1QK5vLUWAk/llgaVS+JmT8= Subject key identifier: B9:8B:37:8E:94:DE:51:3A:11:2D:A8:5D:B2:E9:2B:98:C9:79:F2:CB Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 043F Signing time: Sat 10 May 2025 23:51:10 +0000 Manifest this update: Sat 10 May 2025 23:51:10 +0000 Manifest next update: Sat 17 May 2025 23:51:10 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: TPNbb+AsDLzvqlvHG9txTemGqWytxLPo9UX/nqSMpHw=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: May 10 23:51:10 2025 GMT Not After : May 17 23:51:10 2025 GMT Subject: CN=681fe66e-3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:36:bd:9a:4a:c1:74:5a:79:73:ae:e4:75: 6b:1d:a0:a0:6c:97:23:23:56:83:f4:a5:99:a7:73: 62:ce:ff:b0:86:cf:9a:15:ae:7c:79:9a:2f:00:b4: a0:e8:b2:f0:d9:ab:15:6e:57:9e:fb:01:67:41:c3: 97:1b:c6:55:78:5f:aa:7c:07:d0:b5:d4:cc:de:e6: c9:37:43:6b:72:a7:7c:bc:c0:fc:6f:33:a9:42:44: c3:d0:1f:07:de:6a:28:b9:09:37:4c:d7:37:c4:d2: 7c:5c:0e:1e:ca:a7:58:d0:66:b3:f8:47:fb:7d:92: e9:0f:81:fe:fd:a7:32:40:8f:ea:8d:fc:b3:9e:8f: a0:6f:9b:a0:3e:eb:e4:45:be:ce:81:05:fd:b5:4a: c5:ed:ac:1d:18:f2:f5:c1:72:35:32:aa:aa:c9:d6: de:72:98:4d:04:ef:c4:28:54:b6:83:46:21:ce:58: b3:ac:e0:d9:55:64:7b:ed:aa:58:06:ae:25:63:13: 6a:4a:8e:09:73:e4:d0:99:df:2f:fc:3d:c8:0d:82: d2:59:0a:96:2b:5d:a9:5e:bd:e1:24:4b:f6:be:c3: f8:2e:f9:3c:aa:7e:15:db:99:a7:63:01:ce:e9:13: 95:5d:36:69:ff:43:45:61:fc:22:57:be:81:82:3a: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:37:8E:94:DE:51:3A:11:2D:A8:5D:B2:E9:2B:98:C9:79:F2:CB X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:27:94:e5:69:de:8a:57:95:88:23:38:f8:bc:61:98:db: c8:4a:30:00:f9:04:5f:85:9a:b2:a2:26:dc:ee:c8:b5:12:f9: ed:b8:33:35:60:ed:c2:f4:45:9e:3c:e8:8c:ef:81:1e:84:5a: d2:7e:82:8c:ed:b0:9b:48:c4:07:87:62:de:1f:72:56:94:74: 18:ba:81:4c:21:3c:81:50:8c:65:e4:cb:3a:27:6f:94:7a:d2: d3:ba:3a:55:83:b3:ee:1d:55:58:d5:64:9b:55:30:f1:3b:94: 95:72:bd:3a:2e:26:01:23:ea:81:86:a8:eb:19:d6:f6:8d:d4: 7a:44:c6:7b:4b:b5:f8:82:79:84:01:d8:6d:8e:b5:b8:14:cd: 1f:e1:cd:06:16:68:30:d0:cc:9b:4e:7c:d3:09:ce:60:75:9a: be:42:fb:8a:24:77:5e:55:d7:08:6b:a2:ef:02:52:d1:bb:ba: 5b:ea:a3:1d:c1:e9:fc:11:e8:de:ea:b5:8d:71:0a:cd:e9:d1: f7:15:32:ec:16:be:41:d8:57:83:d8:61:a9:8b:6b:16:4a:3c: bc:33:a3:0d:0e:58:84:05:5b:67:60:72:e7:60:5d:6f:59:07: b0:db:f1:f3:f8:d0:2b:ed:28:ed:25:d0:ee:01:a3:61:ee:40: 56:c2:e7:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUwNTEwMjM1MTEwWhcNMjUwNTE3MjM1MTEwWjAYMRYwFAYD VQQDEw02ODFmZTY2ZS0zZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrY2vZpKwXRaeXOu5HVrHaCgbJcjI1aD9KWZp3Nizv+whs+aFa58eZovALSg 6LLw2asVblee+wFnQcOXG8ZVeF+qfAfQtdTM3ubJN0Nrcqd8vMD8bzOpQkTD0B8H 3moouQk3TNc3xNJ8XA4eyqdY0Gaz+Ef7fZLpD4H+/acyQI/qjfyzno+gb5ugPuvk Rb7OgQX9tUrF7awdGPL1wXI1MqqqydbecphNBO/EKFS2g0YhzlizrODZVWR77apY Bq4lYxNqSo4Jc+TQmd8v/D3IDYLSWQqWK12pXr3hJEv2vsP4Lvk8qn4V25mnYwHO 6ROVXTZp/0NFYfwiV76BgjqcVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmLN46U 3lE6ES2oXbLpK5jJefLLMB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACISeU5WneileViCM4+LxhmNvISjAA+QRfhZqyoibc7si1EvntuDM1 YO3C9EWePOiM74EehFrSfoKM7bCbSMQHh2LeH3JWlHQYuoFMITyBUIxl5Ms6J2+U etLTujpVg7PuHVVY1WSbVTDxO5SVcr06LiYBI+qBhqjrGdb2jdR6RMZ7S7X4gnmE AdhtjrW4FM0f4c0GFmgw0MybTnzTCc5gdZq+QvuKJHdeVdcIa6LvAlLRu7pb6qMd wen8Eeje6rWNcQrN6dH3FTLsFr5B2FeD2GGpi2sWSjy8M6MNDliEBVtnYHLnYF1v WQew2/Hz+NAr7SjtJdDuAaNh7kBWwudm -----END CERTIFICATE-----Generated at Mon May 12 23:15:32 2025 by rpki-client