$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json) Hash identifier: zTqrI3zuLRc/FVnajzK9SyoBfHlyBgrgs7VVeKZ8waQ= Subject key identifier: D3:16:0F:A9:0C:16:2D:73:7A:12:4B:00:4C:1A:0C:85:EA:6C:5C:75 Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft Manifest number: 024C Signing time: Sat 31 May 2025 02:02:14 +0000 Manifest this update: Sat 31 May 2025 02:02:13 +0000 Manifest next update: Sat 07 Jun 2025 02:02:13 +0000 Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: 6gg25X0p60PrFbvskrQZeJKh1kwK7LKKxSmHXp+nYZM=) 2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: 27aLcYczZ5MYFXDnhdewNPk3kbRzrioX5es/1Wn4iNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: May 31 02:02:13 2025 GMT Not After : Jun 7 02:02:13 2025 GMT Subject: CN=683a6325-8cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:7c:f4:80:8e:4b:5e:53:39:f1:85:f1:f5: 66:84:d8:84:bf:58:14:e8:6a:27:c8:6f:e4:b2:b0: b4:05:8c:19:13:95:f2:66:6b:45:c2:5b:e4:c9:9d: 97:3c:02:a9:b1:23:81:61:83:b7:23:52:af:54:39: 4c:39:fc:0d:b8:83:5a:6e:8f:ec:58:ad:d0:cc:a8: 76:5b:50:33:15:0d:59:fa:a4:07:4b:5d:8e:8f:62: 37:cf:1c:45:04:36:e6:ed:c0:a6:66:bf:2d:8d:54: a3:48:2b:7a:f8:d4:14:ba:c4:9f:bf:5d:f2:c3:e9: 7c:ba:10:c6:6c:33:05:20:9c:f3:47:60:d6:76:53: b8:cf:1d:46:3e:bc:86:87:64:92:9b:6d:56:8f:fa: 14:1d:1a:38:35:24:0d:98:8e:26:4d:b4:ad:fd:ab: 9f:21:30:ed:80:7c:84:df:45:d4:3d:6d:1b:f5:f5: b0:3c:83:85:c4:fa:d9:90:a5:0c:7d:42:8f:63:53: 01:17:ea:1c:d4:76:14:94:50:82:4c:1b:aa:ec:22: ef:20:3e:7d:62:02:08:ff:d0:77:09:a4:9d:dd:9a: 27:07:26:74:c9:da:c6:0e:de:6d:dc:3e:f0:b9:6b: 86:3f:59:3d:64:f9:42:df:02:38:32:00:52:9d:6d: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:0F:A9:0C:16:2D:73:7A:12:4B:00:4C:1A:0C:85:EA:6C:5C:75 X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:15:b2:a0:d4:5a:60:2c:e1:f1:e6:1f:de:f4:12:99:f3:4e: 72:a9:90:42:14:51:60:e1:62:1a:35:1c:52:22:b1:28:ca:d8: 2c:ff:c9:c4:0f:95:df:9f:a0:66:c4:a3:9a:3c:34:74:ce:fc: c0:c0:d4:6a:39:5e:58:58:17:6b:08:96:41:90:11:15:30:79: c4:2a:7e:59:8a:73:9a:7d:8f:8a:2f:ba:7b:f1:45:da:bc:35: 62:5f:5b:59:3d:18:43:e9:60:71:1c:50:59:dc:ca:74:16:f7: 10:4d:36:32:a3:e2:5d:df:30:96:08:5c:97:82:16:8c:94:57: 1d:ca:a1:d6:4b:93:58:d0:ae:72:00:1f:73:b0:46:6c:3e:4a: 55:0e:65:ff:00:ba:3a:8c:e9:f4:c9:0e:05:4d:07:a2:0d:d5: f3:b4:b5:23:6a:97:91:02:d1:8f:89:e3:aa:82:65:62:a9:1e: c2:a6:48:4a:6c:30:59:2e:3b:bc:e9:ef:ab:f9:46:41:93:4c: 51:64:fa:fa:a3:b0:73:6c:fc:7f:f1:fc:7a:3b:b2:df:12:02: 40:36:63:7e:16:e0:b4:43:f2:d5:d9:8b:3b:b7:09:48:cd:d7: 79:69:3f:d6:b0:bb:f6:36:63:8c:b2:07:8e:12:b7:01:19:4f: 76:56:d6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjUwNTMxMDIwMjEzWhcNMjUwNjA3MDIwMjEzWjAYMRYwFAYD VQQDEw02ODNhNjMyNS04Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuF89ICOS15TOfGF8fVmhNiEv1gU6GonyG/ksrC0BYwZE5XyZmtFwlvkyZ2X PAKpsSOBYYO3I1KvVDlMOfwNuINabo/sWK3QzKh2W1AzFQ1Z+qQHS12Oj2I3zxxF BDbm7cCmZr8tjVSjSCt6+NQUusSfv13yw+l8uhDGbDMFIJzzR2DWdlO4zx1GPryG h2SSm21Wj/oUHRo4NSQNmI4mTbSt/aufITDtgHyE30XUPW0b9fWwPIOFxPrZkKUM fUKPY1MBF+oc1HYUlFCCTBuq7CLvID59YgII/9B3CaSd3ZonByZ0ydrGDt5t3D7w uWuGP1k9ZPlC3wI4MgBSnW05VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMWD6kM Fi1zehJLAEwaDIXqbFx1MB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoFbKg1FpgLOHx5h/e9BKZ805yqZBCFFFg4WIaNRxSIrEoytgs/8nE D5Xfn6BmxKOaPDR0zvzAwNRqOV5YWBdrCJZBkBEVMHnEKn5ZinOafY+KL7p78UXa vDViX1tZPRhD6WBxHFBZ3Mp0FvcQTTYyo+Jd3zCWCFyXghaMlFcdyqHWS5NY0K5y AB9zsEZsPkpVDmX/ALo6jOn0yQ4FTQeiDdXztLUjapeRAtGPieOqgmViqR7CpkhK bDBZLju86e+r+UZBk0xRZPr6o7BzbPx/8fx6O7LfEgJANmN+FuC0Q/LV2Ys7twlI zdd5aT/WsLv2NmOMsgeOErcBGU92VtYL -----END CERTIFICATE-----Generated at Sat May 31 16:40:43 2025 by rpki-client