$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft File: MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json) Hash identifier: KHwTtSYdoncxpMvLpBlc+2FHeVUt9xz1JAVucuE8oms= Subject key identifier: 36:0C:9A:56:13:2A:8B:F2:DF:2D:DC:1E:84:5B:3A:A5:9E:1E:D6:93 Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft Manifest number: 069F Signing time: Fri 04 Jul 2025 23:03:46 +0000 Manifest this update: Fri 04 Jul 2025 23:03:46 +0000 Manifest next update: Fri 11 Jul 2025 23:03:46 +0000 Files and hashes: 1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: JJh1hTVlEcKU5c7xVISJs/OxutcAMEtPe8YtNETaX0Y=) 2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Ng5tUT5XtWth/UeVCj9UP+U8A5SqwEGWBOOoygGvFMc=) 3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: ecb64YVTHrU3z12q4OTbq4blJYoHWP6/Sh6BnZVtvcQ=) 4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: 8KuusaWdM7XE0SsLxUanmFi6arr5FObPV+arfCP9uGg=) 5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: FFJCcbR2xaawUKSL+usbkIr74Y7s8fy0PX5AM1LQSnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB Validity Not Before: Jul 4 23:03:46 2025 GMT Not After : Jul 11 23:03:46 2025 GMT Subject: CN=68685dd2-7db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:47:f7:60:66:32:4e:71:02:06:a4:8d:7d:2b: 09:03:f7:f3:f1:48:2f:d9:0e:01:39:ea:96:19:7d: 43:40:ba:cd:0f:04:a9:14:b7:29:72:1e:bf:2d:88: 16:a2:0a:ae:08:e0:aa:89:79:99:3b:15:27:d2:45: 52:d5:ce:2a:80:0a:ac:8e:fd:4a:bb:a1:6d:a2:58: 95:bc:84:76:25:d6:4d:d3:26:18:55:96:ef:3f:41: 4c:d4:56:c8:6e:cc:fa:aa:cd:ab:af:d2:f9:6e:ed: 6a:dc:90:e9:e4:c9:86:12:9d:8c:f9:06:d0:a5:ff: 9d:b3:22:dd:e1:76:ca:f7:c0:f5:dd:dd:2d:94:03: ee:ad:9c:38:56:36:ef:ce:55:da:e1:d3:ee:2a:0f: d4:11:69:17:69:5e:5b:b8:ce:88:47:82:e1:a0:08: e2:03:bb:6f:c5:75:08:b0:84:43:b9:33:67:5e:78: e3:84:e2:b8:67:5d:ee:a5:45:fe:4a:fa:f2:08:9a: 1a:81:c2:4f:e3:c3:c8:b4:d6:b8:70:91:73:ea:a2: d6:6a:93:37:0b:bb:cd:8d:90:3a:69:2e:aa:c0:2a: 17:c7:55:1c:3b:0d:0b:c3:35:48:33:c0:bb:f6:1b: 4a:69:38:6e:a6:94:81:bd:5f:da:95:7a:97:24:6e: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0C:9A:56:13:2A:8B:F2:DF:2D:DC:1E:84:5B:3A:A5:9E:1E:D6:93 X509v3 Authority Key Identifier: keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:94:7f:13:af:92:bc:69:4d:31:17:07:db:cc:5b:68:39:c7: 5e:23:0d:68:26:d2:2e:7b:63:6c:0c:fd:e5:1c:96:72:4a:54: 0e:0f:a0:9c:77:0f:5f:f4:7d:44:32:92:d8:16:62:cd:58:8b: df:99:7e:78:6b:85:fe:af:40:1c:96:41:b4:3e:68:7d:4f:e5: 0b:bc:b8:02:19:60:30:b4:51:1f:0e:ec:eb:af:49:6a:55:f2: d7:53:aa:e3:0f:88:f6:0a:3c:9b:50:ca:bb:a7:78:f0:27:82: 8b:f5:fb:4b:83:ab:a3:eb:38:84:8f:36:45:12:b5:7c:b9:37: 07:e3:26:40:c3:a6:65:fe:1b:5b:1e:af:d4:bb:6b:94:e1:c1: 55:f2:ff:ae:41:0f:b4:78:dc:77:bc:e8:f9:fd:0d:ea:4c:d2: 9d:fb:9f:82:76:2c:d8:ec:0d:77:28:19:e2:fa:1e:d2:2e:0a: a3:e7:5b:5f:73:cd:f2:33:64:f6:0d:2e:0d:30:b2:a8:25:f0: a9:fe:9c:73:24:9f:1f:99:ae:cc:0d:a1:85:34:6f:a7:a6:32: 1b:4c:3f:61:b2:1b:48:41:37:f3:3d:48:a1:0b:65:6c:6c:39: 11:92:e1:c8:a1:9a:1b:ba:69:cf:26:80:35:76:15:5e:3d:20: cc:01:51:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4 MzE0RThGQ0IwHhcNMjUwNzA0MjMwMzQ2WhcNMjUwNzExMjMwMzQ2WjAYMRYwFAYD VQQDEw02ODY4NWRkMi03ZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70f3YGYyTnECBqSNfSsJA/fz8Ugv2Q4BOeqWGX1DQLrNDwSpFLcpch6/LYgW ogquCOCqiXmZOxUn0kVS1c4qgAqsjv1Ku6FtoliVvIR2JdZN0yYYVZbvP0FM1FbI bsz6qs2rr9L5bu1q3JDp5MmGEp2M+QbQpf+dsyLd4XbK98D13d0tlAPurZw4Vjbv zlXa4dPuKg/UEWkXaV5buM6IR4LhoAjiA7tvxXUIsIRDuTNnXnjjhOK4Z13upUX+ SvryCJoagcJP48PItNa4cJFz6qLWapM3C7vNjZA6aS6qwCoXx1UcOw0LwzVIM8C7 9htKaThuppSBvV/alXqXJG5WHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYMmlYT Kovy3y3cHoRbOqWeHtaTMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYlH8Tr5K8aU0xFwfbzFtoOcdeIw1oJtIue2NsDP3lHJZySlQOD6Cc dw9f9H1EMpLYFmLNWIvfmX54a4X+r0AclkG0Pmh9T+ULvLgCGWAwtFEfDuzrr0lq VfLXU6rjD4j2CjybUMq7p3jwJ4KL9ftLg6uj6ziEjzZFErV8uTcH4yZAw6Zl/htb Hq/Uu2uU4cFV8v+uQQ+0eNx3vOj5/Q3qTNKd+5+CdizY7A13KBni+h7SLgqj51tf c83yM2T2DS4NMLKoJfCp/pxzJJ8fma7MDaGFNG+npjIbTD9hshtIQTfzPUihC2Vs bDkRkuHIoZobumnPJoA1dhVePSDMAVGT -----END CERTIFICATE-----Generated at Sat Jul 5 02:33:31 2025 by rpki-client