$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: fn+sYj4aiKJrkGaVSR8ukbK9uLLgZC/4Yy3NW2caso0= Subject key identifier: D8:19:41:1F:E7:5D:FD:61:85:0E:ED:24:4F:AE:4C:E7:73:2E:2D:52 Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 014D Signing time: Thu 03 Jul 2025 04:19:16 +0000 Manifest this update: Thu 03 Jul 2025 04:19:15 +0000 Manifest next update: Thu 10 Jul 2025 04:19:15 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: tsUsMXmLt6Qhy2KisMFAmb2z+XzeZLEkw09xsWT2sM4=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: vLLtqJRwe55PLrIjKzUZV3hunL6I7HlofeTqMR4Wk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: Jul 3 04:19:15 2025 GMT Not After : Jul 10 04:19:15 2025 GMT Subject: CN=686604c3-5dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:e9:50:50:0f:0d:60:69:1a:9e:6b:26:88: 8c:d2:e7:0c:28:92:7a:e0:9f:61:8c:c6:ae:a4:f5: 31:a7:76:bc:32:1d:7a:c9:61:75:5e:a9:c8:b6:bc: 66:c1:dc:c6:2b:b7:90:1a:2e:e8:7f:81:14:4e:69: 50:c4:6f:ef:ca:32:87:98:e1:90:7a:d6:0f:ad:8b: 88:78:50:60:b3:87:6d:3b:be:a0:fe:94:cc:78:56: f9:5e:53:88:e6:e5:c1:7e:28:0f:d1:d3:a0:4b:2e: c1:75:c3:fa:b4:f5:86:8a:69:e2:b1:31:7b:6f:c7: 2e:80:1d:a8:8b:30:84:50:1a:e4:2f:88:1a:30:84: 1f:36:36:2d:ed:0b:80:c0:c5:f8:c2:6a:ae:26:a9: 5c:b7:c5:8d:9a:64:93:f8:fd:ef:78:06:98:a6:83: ff:81:d9:5b:1b:4d:14:57:12:6d:10:58:f2:5e:af: e7:a0:ee:0f:d6:92:e7:e7:5e:ab:c9:03:a7:b4:b6: e0:06:2b:ff:8e:d9:42:4b:72:75:e2:77:a0:00:75: 66:a1:e3:7a:22:bf:58:13:3a:46:3a:85:71:cd:bc: 1e:ca:27:96:7e:1b:5d:04:5f:a8:05:73:ce:89:6b: 69:9b:48:05:36:e6:58:da:a1:64:80:47:c8:6c:87: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:41:1F:E7:5D:FD:61:85:0E:ED:24:4F:AE:4C:E7:73:2E:2D:52 X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:11:5d:8b:7b:d8:36:51:b2:3f:08:7c:2f:5d:46:4d:58: 6a:a6:3b:df:db:96:30:ba:8e:51:4a:5e:78:35:cf:4c:4f:7b: e3:b4:51:54:88:c7:95:a3:84:e9:7a:f8:d0:c8:8e:99:23:cd: fb:af:91:50:69:48:a3:19:49:27:28:b0:0a:d8:af:79:b0:0f: d9:ff:47:8d:b1:22:e8:b4:0f:e4:a4:f5:94:51:3c:1c:28:3e: 6b:ea:a5:f5:aa:a6:86:73:b7:3c:47:5f:e8:2c:eb:6f:ee:15: 31:12:d2:18:01:f1:89:fd:3e:81:1c:7c:a3:86:a1:17:6d:e1: 52:66:9e:c5:ff:13:9b:f9:be:22:96:2c:de:87:02:8c:1d:c8: 57:36:18:86:8a:29:33:9b:78:5d:3d:66:c2:fe:5b:44:97:ab: ea:fe:54:5d:bd:44:f2:ec:36:57:e9:39:2d:ac:e0:ab:ac:19: 4e:43:d0:38:af:af:7c:26:23:51:04:ee:3a:b6:52:82:de:ff: e1:6e:8d:68:a7:5f:35:01:bb:86:77:45:39:5f:24:fd:7f:fa: 01:f3:9d:1e:3e:7f:9c:32:5d:54:a7:b7:40:e1:e2:a8:3c:91: 76:83:38:ac:12:cf:f6:e0:b6:a3:bb:43:03:da:6f:27:c5:6d: 38:6d:a1:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUwNzAzMDQxOTE1WhcNMjUwNzEwMDQxOTE1WjAYMRYwFAYD VQQDEw02ODY2MDRjMy01ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vTpUFAPDWBpGp5rJoiM0ucMKJJ64J9hjMaupPUxp3a8Mh16yWF1XqnItrxm wdzGK7eQGi7of4EUTmlQxG/vyjKHmOGQetYPrYuIeFBgs4dtO76g/pTMeFb5XlOI 5uXBfigP0dOgSy7BdcP6tPWGimnisTF7b8cugB2oizCEUBrkL4gaMIQfNjYt7QuA wMX4wmquJqlct8WNmmST+P3veAaYpoP/gdlbG00UVxJtEFjyXq/noO4P1pLn516r yQOntLbgBiv/jtlCS3J14negAHVmoeN6Ir9YEzpGOoVxzbweyieWfhtdBF+oBXPO iWtpm0gFNuZY2qFkgEfIbIdfoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgZQR/n Xf1hhQ7tJE+uTOdzLi1SMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6 aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcBRFdi3vYNlGyPwh8L11GTVhqpjvf25Ywuo5RSl54Nc9MT3vjtFFU iMeVo4TpevjQyI6ZI837r5FQaUijGUknKLAK2K95sA/Z/0eNsSLotA/kpPWUUTwc KD5r6qX1qqaGc7c8R1/oLOtv7hUxEtIYAfGJ/T6BHHyjhqEXbeFSZp7F/xOb+b4i lizehwKMHchXNhiGiikzm3hdPWbC/ltEl6vq/lRdvUTy7DZX6TktrOCrrBlOQ9A4 r698JiNRBO46tlKC3v/hbo1op181AbuGd0U5XyT9f/oB850ePn+cMl1Up7dA4eKo PJF2gzisEs/24Laju0MD2m8nxW04baHG -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:00 2025 by rpki-client