$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: Merey/VcyBXHGoUHQMpLoeis3bdBXRwFutaf5QSkG2A= Subject key identifier: 85:A2:F1:0E:A3:6E:F2:1F:AA:CE:81:10:61:F6:1E:56:98:B1:11:41 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 0492 Signing time: Thu 03 Jul 2025 00:20:15 +0000 Manifest this update: Thu 03 Jul 2025 00:20:15 +0000 Manifest next update: Thu 10 Jul 2025 00:20:15 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: bOCSnq1NE4E4ITuMWopgomDaJDLx4jLLa3Dl0XUxtzs=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Jul 3 00:20:15 2025 GMT Not After : Jul 10 00:20:15 2025 GMT Subject: CN=6865ccbf-bebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:20:ad:06:67:be:e6:92:f8:7b:2e:cc:1b: b4:0c:da:6a:fc:e6:b1:4d:fc:90:c5:23:47:38:1f: d4:c6:5f:b7:a1:ac:2d:d1:31:57:e6:7c:96:0d:8b: 08:a1:96:c3:6b:79:82:ad:b9:03:c2:5a:bb:68:4c: d3:f6:9e:36:47:2b:46:1a:ee:d8:e8:36:d1:25:b0: 1f:6d:15:fa:f6:84:c9:fb:95:25:e2:df:b5:bf:f7: b1:18:b6:0f:e5:0a:3f:87:92:13:66:06:17:2c:72: 11:cb:9c:fe:db:73:b4:7a:11:76:9a:92:26:42:0f: 96:4d:68:23:55:f5:63:3b:98:4e:0f:3e:00:8d:59: 0d:03:63:63:14:47:a5:c1:4b:96:f4:58:1c:71:19: b0:5b:1d:f8:0e:47:b6:b4:34:71:37:26:01:90:7c: 26:e0:06:14:b3:52:fc:cd:d4:ef:40:90:1e:99:20: 6b:8e:c5:35:92:f0:8d:32:3b:25:7a:f9:22:ec:7a: 1b:84:25:04:63:0d:3e:4a:f9:9e:30:52:4f:0e:2e: c7:e5:47:6b:7a:48:48:7c:76:b9:b7:04:e5:66:52: be:cb:80:6d:6b:5b:c0:3d:5a:7c:ed:51:0d:50:5b: 22:2b:c7:91:d8:b7:da:0d:0c:26:1e:4f:61:66:5a: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:F1:0E:A3:6E:F2:1F:AA:CE:81:10:61:F6:1E:56:98:B1:11:41 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:55:77:73:52:ad:c7:c9:00:43:1b:d3:43:41:f4:49:9b:ca: c6:17:09:69:45:b9:16:0a:5d:0a:86:c3:78:59:73:56:6c:4b: a5:85:4d:b9:94:15:0f:74:de:b7:0e:cb:4a:d0:37:3d:58:03: 05:a9:e8:59:c2:f5:d1:5d:3a:ad:0b:e8:78:70:a0:cd:4a:47: 1a:72:49:f8:0c:bd:e3:d1:34:e4:2d:a5:31:23:93:9b:ef:d3: 39:0b:c5:7c:84:0a:df:06:a3:d8:d1:c5:79:aa:16:55:56:40: 61:f5:80:e2:32:00:5d:ae:49:31:16:e8:0a:b4:b5:96:a7:6c: 92:22:eb:74:30:96:c7:96:40:7a:e4:69:94:b9:db:95:05:94: a6:81:7e:e1:22:82:f2:60:20:03:25:38:b5:41:2d:ef:37:20: 9e:cc:25:a8:03:66:cd:91:5e:b9:4a:34:6f:ff:a0:e4:2a:ba: 10:2d:55:b2:67:7f:a9:f6:4d:a3:a3:e5:a1:8d:76:8c:4a:a1: 57:f2:7f:53:23:2c:a0:d9:9c:5a:3e:49:eb:e2:46:4e:a2:2f: e4:32:3e:f5:79:71:06:9c:4f:63:21:28:fe:3d:48:e8:08:51: 04:7c:c0:77:ad:e8:ca:33:b7:ab:d0:65:96:4f:24:3c:0b:ea: 18:80:64:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwNzAzMDAyMDE1WhcNMjUwNzEwMDAyMDE1WjAYMRYwFAYD VQQDEw02ODY1Y2NiZi1iZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFQgrQZnvuaS+HsuzBu0DNpq/OaxTfyQxSNHOB/Uxl+3oawt0TFX5nyWDYsI oZbDa3mCrbkDwlq7aEzT9p42RytGGu7Y6DbRJbAfbRX69oTJ+5Ul4t+1v/exGLYP 5Qo/h5ITZgYXLHIRy5z+23O0ehF2mpImQg+WTWgjVfVjO5hODz4AjVkNA2NjFEel wUuW9FgccRmwWx34Dke2tDRxNyYBkHwm4AYUs1L8zdTvQJAemSBrjsU1kvCNMjsl evki7HobhCUEYw0+SvmeMFJPDi7H5UdrekhIfHa5twTlZlK+y4Bta1vAPVp87VEN UFsiK8eR2LfaDQwmHk9hZlrRfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWi8Q6j bvIfqs6BEGH2HlaYsRFBMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClVXdzUq3HyQBDG9NDQfRJm8rGFwlpRbkWCl0KhsN4WXNWbEulhU25 lBUPdN63DstK0Dc9WAMFqehZwvXRXTqtC+h4cKDNSkcackn4DL3j0TTkLaUxI5Ob 79M5C8V8hArfBqPY0cV5qhZVVkBh9YDiMgBdrkkxFugKtLWWp2ySIut0MJbHlkB6 5GmUuduVBZSmgX7hIoLyYCADJTi1QS3vNyCezCWoA2bNkV65SjRv/6DkKroQLVWy Z3+p9k2jo+WhjXaMSqFX8n9TIyyg2ZxaPknr4kZOoi/kMj71eXEGnE9jISj+PUjo CFEEfMB3rejKM7er0GWWTyQ8C+oYgGTz -----END CERTIFICATE-----Generated at Thu Jul 3 07:14:13 2025 by rpki-client