$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: DDlbAbRyr4GAzSEVSsxxflcFd4Pncq/+W/fMAoFK0Gk= Subject key identifier: 90:18:07:DB:7B:41:65:33:3A:E6:A1:F0:D1:A1:4E:38:87:DB:90:69 Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 0963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 095D Signing time: Sat 12 Apr 2025 19:59:11 +0000 Manifest this update: Sat 12 Apr 2025 19:59:10 +0000 Manifest next update: Sat 19 Apr 2025 19:59:10 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: Bo0i6a3sokITAK/gQw4ElumS51BT5ni/ivrvrU7lGqw=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 19:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: Apr 12 19:59:10 2025 GMT Not After : Apr 19 19:59:10 2025 GMT Subject: CN=67fac60f-35d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:03:b7:a2:c0:77:f1:ce:85:56:f3:df:45: 71:22:00:7a:92:07:1a:49:7d:82:82:14:c2:2b:df: bc:9a:83:84:59:b3:3a:7b:d7:14:41:17:20:ce:3c: 54:c4:b1:32:49:de:94:58:1d:5b:58:71:ae:d2:d0: eb:2d:1e:01:7b:dc:4c:66:1e:2f:40:75:bf:86:c6: c4:de:64:e3:a6:b8:13:c3:45:e1:33:64:a1:e1:15: b0:4b:37:d7:e6:d6:4f:03:90:bb:d0:45:18:4c:6e: 62:8c:3b:44:a9:6b:46:9a:ba:06:4a:02:65:02:7a: 1f:04:28:a5:86:8c:11:10:35:6c:ff:ab:31:c5:27: fd:e4:4e:f4:b5:b9:11:db:99:44:3e:87:5f:ab:76: 78:a0:a3:7b:7d:38:7a:61:87:b0:13:72:a8:30:1a: fa:6e:c9:9d:61:e4:17:08:c1:dd:ad:1e:1a:39:01: 82:e8:54:6e:03:10:33:c0:57:2f:46:96:f9:41:64: d7:1e:ea:26:1f:eb:9d:10:60:59:e2:28:b6:d6:22: 4b:f8:ef:66:36:64:3c:13:e8:b6:2b:08:d2:a8:67: de:25:ff:f9:ee:df:4e:20:e0:9b:b7:30:c5:22:11: 2c:ff:87:35:15:bd:9e:1c:95:b0:fc:40:27:42:93: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:18:07:DB:7B:41:65:33:3A:E6:A1:F0:D1:A1:4E:38:87:DB:90:69 X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e3:de:a0:bd:c5:8c:86:a9:82:89:76:6a:89:0a:7f:7f:eb: 61:04:d9:6f:4e:cd:82:60:fc:6f:a0:1a:b4:89:80:a5:87:cb: 2d:c3:5b:c8:ee:69:29:6e:72:c1:d3:27:cb:41:12:0b:de:b1: d1:fc:2a:60:15:15:ab:1d:19:14:e8:a1:56:7d:10:b0:7c:e9: cc:a8:01:80:47:27:64:89:a3:46:1f:8d:19:94:b1:0f:ef:2d: 73:50:63:09:5a:f1:94:d7:25:83:9c:f2:90:f1:1e:15:26:3e: 75:c1:a5:04:28:25:c9:f7:cc:53:0b:6e:00:f0:f5:a7:2b:a5: a1:b6:bf:00:99:e5:41:6a:a9:70:b2:c7:0e:cf:f0:cf:36:02: 34:1e:8d:ca:00:3e:32:be:fe:d4:c8:34:3a:6d:d8:23:0e:72: c3:66:1f:20:89:de:e9:dd:ac:4b:8a:27:98:7e:16:b8:ec:48: 1d:19:22:b9:1c:15:42:42:82:9d:9b:86:18:7d:72:5b:90:8c: 85:8c:58:e9:80:70:1e:e8:7c:c0:f0:2d:04:0f:b8:78:7d:65: 1e:64:55:c7:5e:2d:02:a4:b9:39:af:c1:d4:a8:07:34:8e:40: a6:a2:cc:1c:d4:06:25:e4:fb:64:32:7d:06:a7:55:8a:14:35: b3:3c:3e:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwNDEyMTk1OTEwWhcNMjUwNDE5MTk1OTEwWjAYMRYwFAYD VQQDEw02N2ZhYzYwZi0zNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHwDt6LAd/HOhVbz30VxIgB6kgcaSX2CghTCK9+8moOEWbM6e9cUQRcgzjxU xLEySd6UWB1bWHGu0tDrLR4Be9xMZh4vQHW/hsbE3mTjprgTw0XhM2Sh4RWwSzfX 5tZPA5C70EUYTG5ijDtEqWtGmroGSgJlAnofBCilhowREDVs/6sxxSf95E70tbkR 25lEPodfq3Z4oKN7fTh6YYewE3KoMBr6bsmdYeQXCMHdrR4aOQGC6FRuAxAzwFcv Rpb5QWTXHuomH+udEGBZ4ii21iJL+O9mNmQ8E+i2KwjSqGfeJf/57t9OIOCbtzDF IhEs/4c1Fb2eHJWw/EAnQpP6+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAYB9t7 QWUzOuah8NGhTjiH25BpMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD496gvcWMhqmCiXZqiQp/f+thBNlvTs2CYPxvoBq0iYClh8stw1vI 7mkpbnLB0yfLQRIL3rHR/CpgFRWrHRkU6KFWfRCwfOnMqAGARydkiaNGH40ZlLEP 7y1zUGMJWvGU1yWDnPKQ8R4VJj51waUEKCXJ98xTC24A8PWnK6Whtr8AmeVBaqlw sscOz/DPNgI0Ho3KAD4yvv7UyDQ6bdgjDnLDZh8gid7p3axLiieYfha47EgdGSK5 HBVCQoKdm4YYfXJbkIyFjFjpgHAe6HzA8C0ED7h4fWUeZFXHXi0CpLk5r8HUqAc0 jkCmoswc1AYl5PtkMn0Gp1WKFDWzPD6G -----END CERTIFICATE-----Generated at Sun Apr 13 04:29:29 2025 by rpki-client