$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: PDI+Jj5inxE1T3rtIazZ9pZDOlvu2rtzrLRzT3T58e4= Subject key identifier: 33:1E:E1:60:D1:EC:B5:50:DF:8C:82:AF:EF:D4:98:1D:21:7D:0D:BF Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 04BD Signing time: Thu 03 Jul 2025 00:13:29 +0000 Manifest this update: Thu 03 Jul 2025 00:13:28 +0000 Manifest next update: Thu 10 Jul 2025 00:13:28 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: cS4H4eYPChS4O+QZ4z9tfs8MavH9WggdXCU8Om5BQNI=) 2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: CoT7676o1FhYn/hTok256b21HFRTMynmtKsMLIXyZyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Jul 3 00:13:28 2025 GMT Not After : Jul 10 00:13:28 2025 GMT Subject: CN=6865cb28-eaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:16:aa:88:11:16:48:8c:b1:89:9b:8a:f2: 18:5f:43:8c:b4:16:78:46:c0:e3:dc:f9:57:ce:6b: 47:71:b8:ec:d5:49:df:07:38:38:ef:e8:f5:a0:0b: 07:45:5e:a6:0b:60:19:99:94:f8:7a:ec:d7:f9:ae: 79:cc:c3:0d:aa:0d:c5:76:0c:26:40:6d:b4:90:e1: 7b:12:23:19:7d:bf:35:db:28:f8:a1:e6:e5:c5:30: 99:86:3f:cd:a0:7e:63:09:f1:6b:22:86:23:d3:77: df:a0:7a:8f:7f:ed:67:9f:b0:e9:b3:81:ea:ba:a0: 31:5f:bb:0a:8f:4c:e1:25:9f:00:cd:95:62:74:73: c2:8d:1a:ec:6e:12:90:1f:90:9f:6e:2f:28:56:6e: 86:ee:81:e3:7c:d0:e0:20:59:18:d0:2d:41:9b:de: 7f:a0:16:b8:06:c0:1d:42:cc:67:35:f1:de:3d:9d: 04:04:75:ee:34:bb:e2:a4:8d:08:75:a2:5d:3a:33: 09:5b:93:d9:31:30:32:7b:22:a4:d5:00:43:38:f1: bf:b3:53:86:37:2c:36:ee:09:26:99:72:52:f8:70: be:e2:2a:72:6e:e1:b5:de:26:21:70:6b:ed:e9:f9: 4c:87:7f:26:14:90:40:06:24:89:72:4b:53:27:86: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:E1:60:D1:EC:B5:50:DF:8C:82:AF:EF:D4:98:1D:21:7D:0D:BF X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:76:68:c3:bb:3e:5b:cd:fe:61:50:8a:5a:04:93:ac:71:c9: a8:db:96:a9:e6:bc:4a:b7:a9:d1:c3:f3:25:9c:3a:76:a2:34: 6f:d8:69:27:76:3d:dd:65:7e:98:8d:43:2d:41:fb:56:be:8b: 9a:c9:3f:a8:e5:65:b2:85:d2:7e:48:85:85:de:5f:e0:a8:0c: 51:37:bc:0e:57:9f:78:11:42:01:c3:6a:34:95:c9:c6:30:37: ab:7b:cf:fb:0f:e2:c2:83:40:4e:e2:85:84:74:31:e2:15:4e: c1:53:5e:86:4b:30:5c:25:84:05:19:fc:51:0c:f1:3e:b7:07: 73:55:3c:ec:8d:a5:7f:5f:3b:c8:99:d5:e8:36:40:ba:68:39: 89:f9:84:29:da:01:a6:cf:a9:22:de:07:41:70:11:ee:4b:c0: 93:7c:55:5b:fc:14:db:1e:97:d9:3c:7d:e6:a5:56:db:e7:00: d5:aa:d8:0c:7a:f9:bc:2d:8b:7a:8e:32:67:ee:39:1b:ee:f0: c7:90:ca:40:16:de:24:50:a0:df:d9:46:80:d6:cb:3e:b1:83: 77:00:2e:04:a6:23:84:77:48:c5:ae:76:fc:ab:90:53:6a:f5: 40:bd:79:d3:dd:49:b3:7d:49:5b:31:84:9d:28:d7:29:bf:9c: 87:8c:4d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjUwNzAzMDAxMzI4WhcNMjUwNzEwMDAxMzI4WjAYMRYwFAYD VQQDEw02ODY1Y2IyOC1lYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz4WqogRFkiMsYmbivIYX0OMtBZ4RsDj3PlXzmtHcbjs1UnfBzg47+j1oAsH RV6mC2AZmZT4euzX+a55zMMNqg3FdgwmQG20kOF7EiMZfb812yj4oeblxTCZhj/N oH5jCfFrIoYj03ffoHqPf+1nn7Dps4HquqAxX7sKj0zhJZ8AzZVidHPCjRrsbhKQ H5Cfbi8oVm6G7oHjfNDgIFkY0C1Bm95/oBa4BsAdQsxnNfHePZ0EBHXuNLvipI0I daJdOjMJW5PZMTAyeyKk1QBDOPG/s1OGNyw27gkmmXJS+HC+4ipybuG13iYhcGvt 6flMh38mFJBABiSJcktTJ4Y7wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMe4WDR 7LVQ34yCr+/UmB0hfQ2/MB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfdmjDuz5bzf5hUIpaBJOsccmo25ap5rxKt6nRw/MlnDp2ojRv2Gkn dj3dZX6YjUMtQftWvouayT+o5WWyhdJ+SIWF3l/gqAxRN7wOV594EUIBw2o0lcnG MDere8/7D+LCg0BO4oWEdDHiFU7BU16GSzBcJYQFGfxRDPE+twdzVTzsjaV/XzvI mdXoNkC6aDmJ+YQp2gGmz6ki3gdBcBHuS8CTfFVb/BTbHpfZPH3mpVbb5wDVqtgM evm8LYt6jjJn7jkb7vDHkMpAFt4kUKDf2UaA1ss+sYN3AC4EpiOEd0jFrnb8q5BT avVAvXnT3UmzfUlbMYSdKNcpv5yHjE1k -----END CERTIFICATE-----Generated at Fri Jul 4 23:09:03 2025 by rpki-client