$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: ajWJI5LC5tTml+4XrEZJPDkIuJXTm8W2YHrQFVjF+gw= Subject key identifier: 0A:E9:A5:76:99:CC:B1:9C:7E:29:FB:65:D7:58:83:03:DF:B0:E5:80 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 237F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 2354 Signing time: Sat 28 Jun 2025 15:44:24 +0000 Manifest this update: Sat 28 Jun 2025 15:44:24 +0000 Manifest next update: Sat 05 Jul 2025 15:44:24 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: bPacvDW0aiQS+vW3QGR19c9nTag3QjZuuRs7Ci5Kq5Q=) 2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: mpzCA23Ss/c1ac0bYDvVsjbQgPjS/ZvKyhpNDl7GtoA=) 4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=) 5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: l+TYh6v3YY1hm+93/643Dl+hMCHqLK38fQC5FpyC0mY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9087 (0x237f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Jun 28 15:44:24 2025 GMT Not After : Jul 5 15:44:24 2025 GMT Subject: CN=68600dd8-7038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2f:d4:87:de:34:5d:25:96:a2:9f:c9:ec:cb: 8c:ac:cf:48:13:62:a8:f0:77:20:72:fe:53:62:58: c2:cb:79:5f:ee:c2:f8:57:31:ee:9b:dd:ac:ea:c5: 28:8f:6d:79:fa:c2:52:d0:48:64:2b:83:c8:9f:8f: 3b:67:6f:42:0f:ff:22:56:ca:7d:7b:c6:f8:2b:e1: 80:5e:26:0a:e5:e0:c4:80:39:e3:da:f8:f4:e3:da: 23:73:ba:13:04:bb:74:b3:6c:1d:b8:e8:de:fb:11: 1f:3e:76:b3:8a:58:93:1b:ed:8f:57:6c:a5:64:f7: 48:e5:49:78:cc:e9:60:79:2d:56:5b:cb:d9:98:b2: 61:e3:40:76:85:27:54:2d:a4:57:c4:d4:a1:ef:9b: f9:c9:01:70:37:80:79:21:86:ea:fa:44:91:ee:c9: 6e:0e:bb:13:0e:cf:88:43:ce:ee:0a:ae:c6:d7:8b: 2e:9c:cd:26:22:f7:04:6d:d7:c3:ca:37:71:ed:00: b2:bf:22:7c:03:38:e2:5c:56:10:3b:73:92:c2:85: 24:0d:49:01:63:52:12:60:87:f5:08:c7:f2:de:41: 95:e2:49:04:ce:fb:b3:ab:9d:b3:ba:5d:8f:02:03: b2:d5:46:5e:fa:72:f7:91:ff:56:8f:f8:71:1c:bd: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E9:A5:76:99:CC:B1:9C:7E:29:FB:65:D7:58:83:03:DF:B0:E5:80 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:39:cb:dc:37:38:79:95:d7:76:9e:d1:09:ff:70:38:61: ed:35:8f:13:09:b4:ce:d0:e1:66:0b:02:26:72:6a:38:40:49: 3e:b1:6f:84:9e:04:01:5c:e2:be:95:99:a8:b8:02:11:8e:44: ea:6f:74:db:f5:41:16:a9:40:54:3b:fc:96:9a:ea:8f:02:97: 89:4f:f0:74:4f:84:95:24:32:88:c9:8d:ba:ec:ce:b8:93:fe: 9f:23:70:b0:31:29:ab:9e:06:8f:5f:22:35:4d:65:33:13:24: 91:2a:a2:58:9f:af:19:46:24:c4:90:15:27:2f:90:f1:3b:23: ae:88:fd:9a:9d:0a:2a:97:cb:00:79:6b:33:46:55:64:8f:0f: f6:97:3c:80:8c:19:ff:8c:0e:bd:a2:27:23:0a:26:a1:7f:8f: 28:25:ef:88:02:29:37:6e:44:04:5b:a5:5e:37:06:64:49:99: d8:e5:30:cf:0b:3d:ab:17:45:1b:9e:77:e2:f6:b0:4b:bc:8b: c3:ef:80:87:93:70:77:0b:c9:5d:01:15:33:07:02:d2:de:29: b7:32:3c:69:ba:7c:c6:b4:36:a2:78:96:7b:79:90:af:ba:ef: 52:8d:98:ef:26:ff:94:68:93:14:b4:41:83:41:a0:74:02:21: 98:cd:e0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjUwNjI4MTU0NDI0WhcNMjUwNzA1MTU0NDI0WjAYMRYwFAYD VQQDEw02ODYwMGRkOC03MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5y/Uh940XSWWop/J7MuMrM9IE2Ko8Hcgcv5TYljCy3lf7sL4VzHum92s6sUo j215+sJS0EhkK4PIn487Z29CD/8iVsp9e8b4K+GAXiYK5eDEgDnj2vj049ojc7oT BLt0s2wduOje+xEfPnaziliTG+2PV2ylZPdI5Ul4zOlgeS1WW8vZmLJh40B2hSdU LaRXxNSh75v5yQFwN4B5IYbq+kSR7sluDrsTDs+IQ87uCq7G14sunM0mIvcEbdfD yjdx7QCyvyJ8AzjiXFYQO3OSwoUkDUkBY1ISYIf1CMfy3kGV4kkEzvuzq52zul2P AgOy1UZe+nL3kf9Wj/hxHL15cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArppXaZ zLGcfin7ZddYgwPfsOWAMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKiTnL3Dc4eZXXdp7RCf9wOGHtNY8TCbTO0OFmCwImcmo4QEk+sW+E ngQBXOK+lZmouAIRjkTqb3Tb9UEWqUBUO/yWmuqPApeJT/B0T4SVJDKIyY267M64 k/6fI3CwMSmrngaPXyI1TWUzEySRKqJYn68ZRiTEkBUnL5DxOyOuiP2anQoql8sA eWszRlVkjw/2lzyAjBn/jA69oicjCiahf48oJe+IAik3bkQEW6VeNwZkSZnY5TDP Cz2rF0Ubnnfi9rBLvIvD74CHk3B3C8ldARUzBwLS3im3MjxpunzGtDaieJZ7eZCv uu9SjZjvJv+UaJMUtEGDQaB0AiGYzeDk -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:56 2025 by rpki-client