$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: T7/2zXEet33UalCC1K0R8Pchf2eLr3bus/y5T4yLNr0= Subject key identifier: 7C:F2:88:A0:01:F4:A2:E2:C5:CE:99:0F:D6:AE:E8:B7:F5:E0:E0:12 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 04A0 Signing time: Thu 03 Jul 2025 00:18:40 +0000 Manifest this update: Thu 03 Jul 2025 00:18:40 +0000 Manifest next update: Thu 10 Jul 2025 00:18:40 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: GsCkrc3yMGtdgoAgq2/IDPIahS+aBP/9Nx6qXO9acng=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Jul 3 00:18:40 2025 GMT Not After : Jul 10 00:18:40 2025 GMT Subject: CN=6865cc60-7c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:49:2e:85:4e:5b:ae:54:69:e2:9b:cc:7e: d7:40:74:06:57:bc:38:9b:f2:98:b7:64:ca:50:86: f2:5b:4e:d6:5a:5c:3e:d7:5b:61:2f:e4:f6:5f:54: 4b:a8:81:b5:4b:33:00:c7:6e:73:e1:3b:b0:62:7d: ff:27:45:c8:e2:11:07:53:3b:10:92:3e:fd:5d:eb: 5d:9c:90:61:84:d4:64:47:28:ac:33:3f:4f:6b:67: dc:51:c9:af:cb:e9:ad:46:0f:02:47:62:b0:6f:a1: 8c:92:b7:d7:f9:37:69:a7:8e:b1:2f:68:f9:89:1f: a3:cd:c5:95:d1:9a:bb:0f:6b:5c:4b:53:b3:2b:b3: e3:c4:e9:94:97:43:c4:da:f8:8a:54:62:eb:53:3d: a9:c2:df:90:34:23:ff:88:b6:f3:c3:c9:8e:fc:cd: 8b:86:7d:4e:b9:bd:de:57:f9:2d:22:d2:af:14:f7: 6e:f9:6e:08:50:b1:5c:55:af:13:34:54:4f:f6:74: 0f:4d:4c:ea:9f:ba:fc:50:b8:a8:ee:d6:16:d7:07: 6b:58:c6:7d:4a:a9:5c:f8:37:bf:6c:c2:ba:8d:58: 68:75:12:02:f7:4a:e0:fa:94:26:53:73:fd:42:c7: 58:73:22:a7:40:18:af:8d:7e:ea:12:18:56:8d:b9: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F2:88:A0:01:F4:A2:E2:C5:CE:99:0F:D6:AE:E8:B7:F5:E0:E0:12 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:94:d4:f6:2b:cf:af:3a:08:91:79:6b:c4:3f:31:f7:c9:bc: a4:fd:31:4c:9f:44:40:09:23:ff:0c:9d:cd:6b:67:52:62:a0: 29:f8:08:08:64:39:0a:f0:a2:9a:b4:ee:53:9c:a2:8f:8d:a2: b0:c1:a2:33:0f:a8:0e:78:73:de:10:3a:38:c2:27:8d:8d:24: 43:b1:cb:60:c2:cb:c8:b9:cf:97:97:c6:6f:b0:b1:5b:ec:3e: 05:8a:5a:21:f0:36:7f:ac:bf:b6:28:ba:17:37:b4:9d:70:5c: 52:89:79:4d:77:8c:18:17:55:c1:94:69:bb:34:b3:ae:b8:f7: 74:3c:86:16:5a:62:cb:89:9b:fa:9a:52:29:dd:3f:61:85:72: 82:1e:aa:5a:2b:77:12:f4:2b:eb:4d:0f:10:6d:7a:21:14:0e: b9:ac:f9:10:5d:d7:e7:61:ca:db:e5:67:5e:52:97:53:30:b6: da:7a:c3:b1:1a:75:d5:c2:1e:4f:c5:4f:76:d6:8f:d0:63:a4: f2:66:b0:56:dd:a7:a2:36:3c:0d:21:20:0f:b9:72:99:ed:20: 36:62:6f:dc:5b:e9:79:4d:dd:33:5c:ee:28:0e:41:97:03:81: a4:24:1e:9e:ce:32:32:f3:3e:a5:12:19:24:01:fb:0c:14:65: 01:b1:8c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNzAzMDAxODQwWhcNMjUwNzEwMDAxODQwWjAYMRYwFAYD VQQDEw02ODY1Y2M2MC03Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufRJLoVOW65UaeKbzH7XQHQGV7w4m/KYt2TKUIbyW07WWlw+11thL+T2X1RL qIG1SzMAx25z4TuwYn3/J0XI4hEHUzsQkj79XetdnJBhhNRkRyisMz9Pa2fcUcmv y+mtRg8CR2Kwb6GMkrfX+Tdpp46xL2j5iR+jzcWV0Zq7D2tcS1OzK7PjxOmUl0PE 2viKVGLrUz2pwt+QNCP/iLbzw8mO/M2Lhn1Oub3eV/ktItKvFPdu+W4IULFcVa8T NFRP9nQPTUzqn7r8ULio7tYW1wdrWMZ9Sqlc+De/bMK6jVhodRIC90rg+pQmU3P9 QsdYcyKnQBivjX7qEhhWjbmv9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzyiKAB 9KLixc6ZD9au6Lf14OASMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBglNT2K8+vOgiReWvEPzH3ybyk/TFMn0RACSP/DJ3Na2dSYqAp+AgI ZDkK8KKatO5TnKKPjaKwwaIzD6gOeHPeEDo4wieNjSRDsctgwsvIuc+Xl8ZvsLFb 7D4Filoh8DZ/rL+2KLoXN7SdcFxSiXlNd4wYF1XBlGm7NLOuuPd0PIYWWmLLiZv6 mlIp3T9hhXKCHqpaK3cS9CvrTQ8QbXohFA65rPkQXdfnYcrb5WdeUpdTMLbaesOx GnXVwh5PxU921o/QY6TyZrBW3aeiNjwNISAPuXKZ7SA2Ym/cW+l5Td0zXO4oDkGX A4GkJB6ezjIy8z6lEhkkAfsMFGUBsYwp -----END CERTIFICATE-----Generated at Thu Jul 3 14:32:32 2025 by rpki-client