$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: giVTijoHjrVw1BdCXL2JqS0oue3TL0q0kZqCP4X76bA= Subject key identifier: 53:9D:51:D9:30:A4:AA:DA:0C:92:07:78:EE:DF:8A:AF:4C:E3:29:A3 Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0DB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0DB1 Signing time: Wed 02 Apr 2025 17:59:53 +0000 Manifest this update: Wed 02 Apr 2025 17:59:52 +0000 Manifest next update: Wed 09 Apr 2025 17:59:52 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: fji49dPI+2W4LUJflPF4ZUveiYsed0o5LYiaN4MNGQc=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3512 (0xdb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226 Validity Not Before: Apr 2 17:59:52 2025 GMT Not After : Apr 9 17:59:52 2025 GMT Subject: CN=67ed7b19-3ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:ac:99:fd:12:6c:2c:60:ee:54:79:3c:e9: f2:ec:56:c5:ec:d8:4c:dd:c1:92:c8:17:fd:47:7c: 58:e6:af:8a:61:8e:6a:60:51:cf:38:e7:79:f6:09: 4c:04:0f:d6:b0:74:3e:74:9b:0e:c8:9e:43:4c:8a: f9:32:19:64:bd:38:25:34:3a:e2:dc:9e:e9:4f:d7: e8:89:75:6e:20:4d:6e:f3:3d:19:53:5d:49:d1:29: 3a:bb:ba:10:b7:9b:ab:93:61:8f:db:90:b2:15:5b: 2a:fa:9f:50:af:f8:4c:c0:5f:94:13:4e:43:8f:ef: bc:8c:75:ca:4c:28:fd:ed:a4:32:61:ff:ef:16:6f: 62:7a:40:b8:a6:74:c9:8e:0f:20:4f:17:7c:dc:6c: 3b:4a:e4:d6:4d:49:c8:b0:bd:03:de:b0:3e:1e:f2: ec:7e:9d:f8:a1:4c:b7:e0:64:5e:b1:b4:0c:be:a4: 4d:3c:e0:14:5c:b8:c1:22:07:36:2b:28:2b:0d:97: 62:2f:73:e9:01:85:ed:dd:fc:69:16:61:dd:2d:e7: c9:7e:3e:26:29:37:7d:d8:e3:c4:76:c9:08:6f:c7: 3a:db:b1:13:64:c6:60:70:0f:0b:9f:6f:0b:ae:b3: 05:95:06:e2:d9:9a:12:32:82:17:47:ed:4e:22:c5: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9D:51:D9:30:A4:AA:DA:0C:92:07:78:EE:DF:8A:AF:4C:E3:29:A3 X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:63:95:6f:f2:b3:0f:68:d4:50:74:14:a9:25:43:57:94:a8: 36:de:15:1f:b7:c7:d1:2b:ae:2f:e2:9e:6a:da:33:f2:e7:97: 9b:d7:d1:06:b9:e2:29:af:c9:d4:82:17:5e:83:86:ca:d1:16: da:ce:bf:65:eb:8c:aa:3e:07:e0:4e:1c:ed:96:3f:ba:96:c8: a7:bd:eb:af:da:de:9f:3d:f0:2a:58:38:0b:55:18:20:ef:f9: 83:60:68:65:9e:89:d7:30:16:75:97:c0:65:2f:fd:af:b6:15: 74:cf:a5:16:a6:66:56:72:ff:6e:11:89:2f:8f:12:4b:9b:2f: 13:8c:bb:fd:44:b4:3b:ab:29:cb:ce:91:66:4f:b0:e5:b0:bf: 3d:0a:d2:b3:9a:28:d2:ab:43:db:c4:b0:1d:d9:c6:f9:6c:4f: bf:9e:cb:99:8f:d3:09:25:4a:a0:de:4c:93:e0:5f:c7:cb:86: 98:fb:5b:36:bd:48:d8:18:d8:fa:e8:ca:d7:17:e9:d3:ec:7f: 03:ff:9c:fa:ed:17:1e:50:69:e6:45:4a:cf:0b:f6:67:d6:ad: ae:b7:21:a7:6f:df:fb:4a:38:aa:5e:49:54:b7:19:c8:5e:c4: 3f:dc:9c:d5:c2:6d:ab:1a:83:6c:ab:1c:00:95:86:53:ea:a3: a2:e5:5e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUwNDAyMTc1OTUyWhcNMjUwNDA5MTc1OTUyWjAYMRYwFAYD VQQDEw02N2VkN2IxOS0zYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d+smf0SbCxg7lR5POny7FbF7NhM3cGSyBf9R3xY5q+KYY5qYFHPOOd59glM BA/WsHQ+dJsOyJ5DTIr5MhlkvTglNDri3J7pT9foiXVuIE1u8z0ZU11J0Sk6u7oQ t5urk2GP25CyFVsq+p9Qr/hMwF+UE05Dj++8jHXKTCj97aQyYf/vFm9iekC4pnTJ jg8gTxd83Gw7SuTWTUnIsL0D3rA+HvLsfp34oUy34GResbQMvqRNPOAUXLjBIgc2 KygrDZdiL3PpAYXt3fxpFmHdLefJfj4mKTd92OPEdskIb8c627ETZMZgcA8Ln28L rrMFlQbi2ZoSMoIXR+1OIsVjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOdUdkw pKraDJIHeO7fiq9M4ymjMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Y5Vv8rMPaNRQdBSpJUNXlKg23hUft8fRK64v4p5q2jPy55eb19EG ueIpr8nUghdeg4bK0Rbazr9l64yqPgfgThztlj+6lsinveuv2t6fPfAqWDgLVRgg 7/mDYGhlnonXMBZ1l8BlL/2vthV0z6UWpmZWcv9uEYkvjxJLmy8TjLv9RLQ7qynL zpFmT7DlsL89CtKzmijSq0PbxLAd2cb5bE+/nsuZj9MJJUqg3kyT4F/Hy4aY+1s2 vUjYGNj66MrXF+nT7H8D/5z67RceUGnmRUrPC/Zn1q2utyGnb9/7SjiqXklUtxnI XsQ/3JzVwm2rGoNsqxwAlYZT6qOi5V7S -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:54 2025 by rpki-client