$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: 0f9pzKiTGajOPFXe8wlzj2huqYrag3ezSH6uPy2If78= Subject key identifier: 61:D4:45:6E:D7:56:EE:E8:B2:51:0B:EE:48:69:0C:84:BE:22:00:F8 Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0458 Signing time: Tue 01 Jul 2025 00:43:17 +0000 Manifest this update: Tue 01 Jul 2025 00:43:16 +0000 Manifest next update: Tue 08 Jul 2025 00:43:16 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: ZdXKBfPZlf3W2J2FAPcmEFyd9xWgOXiJzdHqTHbdW3M=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: Jul 1 00:43:16 2025 GMT Not After : Jul 8 00:43:16 2025 GMT Subject: CN=68632f25-a7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:7b:3d:e4:36:a2:72:b9:cd:03:80:59:0c: a2:fb:2d:02:41:07:9b:9f:fa:5f:8d:88:76:ef:f6: 95:c4:2b:7b:c5:57:43:00:36:74:0c:cd:58:1c:ff: a3:31:b3:d4:6e:36:a0:61:5a:da:e3:7f:63:10:04: d0:a1:a4:a1:36:a6:81:9d:17:40:d9:58:40:4b:58: 3b:23:76:59:47:f7:f3:51:e1:99:a9:11:19:65:b5: 3a:8f:28:2c:47:62:da:21:06:b5:5f:4a:58:27:c0: 88:db:a9:f0:c5:f0:54:00:10:08:5d:64:5f:03:0b: 88:ea:61:17:56:04:50:5c:b4:47:8e:bd:80:e6:cb: 4c:e4:88:51:a0:b7:19:1f:53:2b:b4:b5:79:b3:1b: 2b:1d:23:ea:67:62:00:cb:a5:4b:d0:ec:93:c0:21: 67:09:b5:2d:54:9b:85:92:61:ff:07:13:44:79:53: 17:75:eb:e9:c6:6f:90:ea:14:c2:d2:b2:72:f1:10: 3e:a7:0d:ec:a3:e0:f5:9b:08:ee:62:7b:2e:c9:9f: 1e:d2:79:62:26:28:f3:bd:e4:11:2c:39:30:ff:ef: bc:b6:63:32:bd:21:29:93:3f:2e:37:ca:3c:36:de: e5:7f:b2:2b:c3:e3:4d:0e:ad:16:57:a1:92:6c:77: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D4:45:6E:D7:56:EE:E8:B2:51:0B:EE:48:69:0C:84:BE:22:00:F8 X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:53:11:d9:da:53:2f:6e:11:3d:8e:f0:8f:d0:7d:fc:44:2d: 4f:22:2c:be:3e:af:4d:83:d2:b4:35:73:80:4a:f1:08:d1:26: 93:89:84:c5:13:9f:79:28:31:24:99:c8:9c:91:6e:2a:d2:aa: 70:7c:d2:b6:28:27:6e:03:bb:96:2d:a3:88:d2:f2:78:a9:40: 3e:e2:28:1d:af:79:f0:f9:99:fe:2b:2a:74:26:d3:55:b1:e4: 2e:b0:be:20:84:54:bf:6f:9b:3d:8f:5b:fb:fd:72:05:ae:9e: d5:f5:dd:85:66:97:9e:1b:8d:2f:05:dc:b5:82:f4:6c:43:24: 35:85:b2:10:23:94:6f:21:11:a1:0f:e0:05:96:0d:b3:c7:97: fc:fe:9c:3d:3d:fa:24:c7:34:3a:54:72:73:14:d7:04:ee:c9: 2c:8d:ac:89:e8:32:06:fb:30:09:5d:2b:85:02:8e:04:52:09: 3d:58:74:1a:4b:ad:b9:b4:b7:cf:65:ab:d2:2e:33:9b:68:ef: 21:47:d2:eb:df:18:66:0c:12:ff:79:52:b3:64:fd:f3:c0:a8: ac:2c:66:48:a3:e5:89:c2:25:80:4b:2b:0c:d1:81:2c:47:1d: fd:92:92:2f:15:b7:57:20:25:da:24:05:16:c3:fe:9b:d0:58: 53:67:e9:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUwNzAxMDA0MzE2WhcNMjUwNzA4MDA0MzE2WjAYMRYwFAYD VQQDEw02ODYzMmYyNS1hN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uV7PeQ2onK5zQOAWQyi+y0CQQebn/pfjYh27/aVxCt7xVdDADZ0DM1YHP+j MbPUbjagYVra439jEATQoaShNqaBnRdA2VhAS1g7I3ZZR/fzUeGZqREZZbU6jygs R2LaIQa1X0pYJ8CI26nwxfBUABAIXWRfAwuI6mEXVgRQXLRHjr2A5stM5IhRoLcZ H1MrtLV5sxsrHSPqZ2IAy6VL0OyTwCFnCbUtVJuFkmH/BxNEeVMXdevpxm+Q6hTC 0rJy8RA+pw3so+D1mwjuYnsuyZ8e0nliJijzveQRLDkw/++8tmMyvSEpkz8uN8o8 Nt7lf7Irw+NNDq0WV6GSbHerTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHURW7X Vu7oslEL7khpDIS+IgD4MB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/UxHZ2lMvbhE9jvCP0H38RC1PIiy+Pq9Ng9K0NXOASvEI0SaTiYTF E595KDEkmcickW4q0qpwfNK2KCduA7uWLaOI0vJ4qUA+4igdr3nw+Zn+Kyp0JtNV seQusL4ghFS/b5s9j1v7/XIFrp7V9d2FZpeeG40vBdy1gvRsQyQ1hbIQI5RvIRGh D+AFlg2zx5f8/pw9PfokxzQ6VHJzFNcE7sksjayJ6DIG+zAJXSuFAo4EUgk9WHQa S625tLfPZavSLjObaO8hR9Lr3xhmDBL/eVKzZP3zwKisLGZIo+WJwiWASysM0YEs Rx39kpIvFbdXICXaJAUWw/6b0FhTZ+mc -----END CERTIFICATE-----Generated at Wed Jul 2 19:40:20 2025 by rpki-client