$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: mVyto4rIfHigyC5jmpNOQYFdxvSIZeyg8LfxZIQgBpA= Subject key identifier: EC:08:E5:1E:9F:C9:02:A0:5C:1A:82:81:72:11:0A:16:78:03:5B:C6 Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 0479 Signing time: Sat 28 Jun 2025 23:39:36 +0000 Manifest this update: Sat 28 Jun 2025 23:39:36 +0000 Manifest next update: Sat 05 Jul 2025 23:39:36 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: ATBdzf9Dd7YqHnrXNrqfpM6eueGZrDWfr5lV/diTBvc=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: VtnOs46KlpQVSJ9THDVnSS8EzLS3A9xUSm3n/4RNrWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: Jun 28 23:39:36 2025 GMT Not After : Jul 5 23:39:36 2025 GMT Subject: CN=68607d38-e5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:8d:ea:3a:85:b9:1f:38:1c:d8:8d:cb:e4: 89:4c:d7:73:ff:ba:19:9f:13:2d:ef:b5:75:fa:d0: 15:37:a8:6d:0f:89:c3:c7:ac:0e:b4:a2:92:4e:d5: b2:91:74:f7:e6:9b:f1:37:29:d2:0c:44:b2:cb:0c: b7:be:16:1c:9b:b0:28:43:95:c6:b8:56:7c:4e:76: b0:f8:26:4b:28:c2:c9:16:db:4b:10:c3:ff:da:7c: 3f:05:d4:76:ab:aa:4b:a0:39:50:15:c3:64:a7:7c: 7a:dc:ee:4e:bc:bc:e6:3c:ff:f9:1b:e4:27:eb:b2: e3:3d:96:7b:20:e6:c2:ad:23:6d:b2:69:f1:47:a9: fa:99:3d:ff:59:fd:5a:e5:a3:48:78:67:29:ab:25: 29:f4:ab:0d:b1:af:13:5b:c7:37:7b:f6:bf:8b:42: 1c:ac:fa:06:1d:1f:41:a4:c4:25:78:d9:2d:53:c3: 91:5e:23:cc:08:0d:d0:6e:8d:56:9b:98:3c:70:35: 53:62:ef:d9:d7:1c:32:f0:aa:37:6f:da:66:f4:8d: 2c:8f:e8:0b:2c:c8:28:b2:f3:41:54:25:ad:97:f0: b4:ae:96:6b:ea:fa:de:59:92:29:77:54:f5:6f:17: 96:f0:46:b0:71:93:51:51:34:e9:e4:ef:89:6b:43: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:08:E5:1E:9F:C9:02:A0:5C:1A:82:81:72:11:0A:16:78:03:5B:C6 X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:be:a2:52:ac:53:21:02:67:50:82:98:f1:c0:d4:8c:7c:77: ec:a4:e6:03:d9:93:3f:ec:4b:76:0e:1d:6b:bf:9e:de:0b:99: 86:df:7a:a9:49:6b:71:bf:76:97:06:9d:09:0b:4e:20:35:4e: d3:d9:62:ce:fd:a7:4e:4b:ec:80:c2:1c:28:ca:00:43:2b:97: 79:f5:d7:7a:2c:4f:e2:80:c0:c4:b0:60:0b:19:d1:d1:17:24: 0e:7c:3a:d1:d7:02:9f:e8:52:16:65:a0:8d:6c:d0:f4:33:a3: 1d:93:73:67:6e:32:80:4b:3f:9e:3b:6d:2b:59:a8:37:62:d1: a4:a1:cd:15:20:d1:3b:78:64:3e:e2:0b:c6:5d:3d:cd:d6:a1: 88:09:0c:ef:1e:ba:d6:4d:37:c1:e9:eb:28:03:69:b2:b8:41: 4d:36:8b:c6:56:38:81:06:92:f4:a9:66:a6:fc:61:ac:cb:44: 01:b9:ed:9b:54:2b:cd:b4:2b:4c:12:58:a7:d9:a3:d1:fe:22: 9b:73:8f:ec:b2:97:f3:51:a0:02:9c:92:42:74:d6:b8:0d:f9: 5a:34:b5:3b:48:9c:f5:ee:3e:12:cb:8f:b0:e6:86:aa:69:35: 31:63:11:bc:83:bb:5e:eb:f5:35:e7:34:81:e3:23:b2:65:20: 93:7f:c6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjUwNjI4MjMzOTM2WhcNMjUwNzA1MjMzOTM2WjAYMRYwFAYD VQQDEw02ODYwN2QzOC1lNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZqN6jqFuR84HNiNy+SJTNdz/7oZnxMt77V1+tAVN6htD4nDx6wOtKKSTtWy kXT35pvxNynSDESyywy3vhYcm7AoQ5XGuFZ8Tnaw+CZLKMLJFttLEMP/2nw/BdR2 q6pLoDlQFcNkp3x63O5OvLzmPP/5G+Qn67LjPZZ7IObCrSNtsmnxR6n6mT3/Wf1a 5aNIeGcpqyUp9KsNsa8TW8c3e/a/i0IcrPoGHR9BpMQleNktU8ORXiPMCA3Qbo1W m5g8cDVTYu/Z1xwy8Ko3b9pm9I0sj+gLLMgosvNBVCWtl/C0rpZr6vreWZIpd1T1 bxeW8EawcZNRUTTp5O+Ja0PiMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwI5R6f yQKgXBqCgXIRChZ4A1vGMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBavqJSrFMhAmdQgpjxwNSMfHfspOYD2ZM/7Et2Dh1rv57eC5mG33qp SWtxv3aXBp0JC04gNU7T2WLO/adOS+yAwhwoygBDK5d59dd6LE/igMDEsGALGdHR FyQOfDrR1wKf6FIWZaCNbND0M6Mdk3NnbjKASz+eO20rWag3YtGkoc0VINE7eGQ+ 4gvGXT3N1qGICQzvHrrWTTfB6esoA2myuEFNNovGVjiBBpL0qWam/GGsy0QBue2b VCvNtCtMElin2aPR/iKbc4/sspfzUaACnJJCdNa4DflaNLU7SJz17j4Sy4+w5oaq aTUxYxG8g7te6/U15zSB4yOyZSCTf8bH -----END CERTIFICATE-----Generated at Sun Jun 29 10:42:51 2025 by rpki-client