$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json) Hash identifier: XaIlPdgap9VRTNg+OuoRpdZ2sKoSG1cza/EqOTwZABk= Subject key identifier: B8:A5:F1:A8:68:A9:D7:37:FB:58:21:17:2D:AA:C7:00:EF:B1:77:F5 Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6 Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft Manifest number: 01D2 Signing time: Thu 05 Jun 2025 02:13:32 +0000 Manifest this update: Thu 05 Jun 2025 02:13:32 +0000 Manifest next update: Thu 12 Jun 2025 02:13:32 +0000 Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: 9ZjHl+JcEnt51epLCAO2nnmYFG6lZbFQFyseba9SkCM=) 2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: i1JD8msSihYz7KvKL8WS56vjnbp4Wnh0IyWM047eZr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6 Validity Not Before: Jun 5 02:13:32 2025 GMT Not After : Jun 12 02:13:32 2025 GMT Subject: CN=6840fd4c-6b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:24:55:3d:ea:d4:12:cd:5f:81:5d:af:af: 41:f6:2e:0c:e7:9a:89:c6:af:3a:86:5c:b5:aa:60: 7d:bd:bf:43:15:bf:9e:6f:c1:d6:c9:39:12:f1:d1: 39:08:9a:a6:70:c4:ba:d4:bb:ad:58:20:cc:3d:63: 1e:84:64:f9:09:6a:8a:b7:43:03:cf:22:38:34:eb: 36:be:84:69:83:68:ec:ea:b1:10:c1:98:2a:06:fc: 52:49:f9:2b:1e:ea:15:63:f0:e8:12:06:38:39:5d: a0:82:ff:bb:fb:e9:b6:1a:d8:10:3a:3c:69:f9:13: f9:16:7a:d4:97:9a:69:71:92:ed:ee:c4:a6:7b:a6: 0f:c7:7c:a3:7a:0d:d8:a7:38:00:b3:37:a1:a8:cf: d8:90:d3:7f:34:4c:b1:44:38:27:78:31:2a:c3:27: 5e:4f:97:10:37:1f:a3:45:cb:3d:ca:ad:1a:4d:fc: f5:df:8e:3d:02:07:f6:cc:71:9c:d9:a4:4d:c6:76: 4b:45:3c:17:62:72:9e:d9:0c:53:15:a2:cb:74:6b: 64:ca:66:66:f2:b1:b1:0d:4e:a3:7c:9a:a5:df:3d: 6b:0d:6b:13:d3:96:e5:9d:fc:28:d0:a4:56:16:94: 5b:1d:7e:f0:6c:03:67:1f:5c:f6:b7:0f:8b:99:5d: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A5:F1:A8:68:A9:D7:37:FB:58:21:17:2D:AA:C7:00:EF:B1:77:F5 X509v3 Authority Key Identifier: keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:75:49:1a:25:53:30:42:9a:c8:07:0b:cd:00:38:10:8e:74: e2:30:6f:a9:a8:87:39:61:f0:4e:ba:24:6e:e9:e0:a7:b5:5a: 6c:a6:25:b7:e9:01:a8:a4:39:f8:60:25:f4:08:f6:a4:66:30: 01:a5:25:fb:78:79:25:fe:fa:6b:2e:16:93:11:9a:0f:89:8f: 4b:29:5b:a4:8b:8c:82:db:6d:db:02:f6:a3:51:29:e1:22:9f: 56:93:c1:4c:6a:ea:73:58:ae:e4:c2:38:42:de:5b:fd:12:fe: ed:b1:e6:5a:58:86:5b:3c:2c:a9:aa:da:c1:35:16:c2:e4:31: d7:f6:38:f9:d5:ba:59:7a:1c:20:c2:27:4e:d8:c1:13:74:e9: a7:27:5f:2b:93:c5:d0:fa:e6:02:36:53:2b:f4:91:6f:87:04: 81:37:22:96:45:d8:b8:9c:f0:15:03:00:5f:87:b3:df:c3:b3: c0:36:d5:dc:cd:82:38:c0:73:3b:ba:95:42:34:e4:9f:83:04: 32:5e:17:79:c3:6d:73:80:37:96:ac:04:de:6a:5a:99:56:0a: 5d:b6:f3:52:ca:7d:95:fa:4f:79:48:c2:b1:b9:09:b5:b1:14: b3:2c:66:a9:5b:ca:d2:af:bf:fc:cf:d8:96:bb:84:0e:f8:e2: 65:3c:e5:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2 QkI5QTRFQTYwHhcNMjUwNjA1MDIxMzMyWhcNMjUwNjEyMDIxMzMyWjAYMRYwFAYD VQQDEw02ODQwZmQ0Yy02YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPMkVT3q1BLNX4Fdr69B9i4M55qJxq86hly1qmB9vb9DFb+eb8HWyTkS8dE5 CJqmcMS61LutWCDMPWMehGT5CWqKt0MDzyI4NOs2voRpg2js6rEQwZgqBvxSSfkr HuoVY/DoEgY4OV2ggv+7++m2GtgQOjxp+RP5FnrUl5ppcZLt7sSme6YPx3yjeg3Y pzgAszehqM/YkNN/NEyxRDgneDEqwydeT5cQNx+jRcs9yq0aTfz13449Agf2zHGc 2aRNxnZLRTwXYnKe2QxTFaLLdGtkymZm8rGxDU6jfJql3z1rDWsT05blnfwo0KRW FpRbHX7wbANnH1z2tw+LmV29IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLil8aho qdc3+1ghFy2qxwDvsXf1MB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1 RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj aWdVWkpIVFAtb2xydWFUcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYdUkaJVMwQprIBwvNADgQjnTiMG+pqIc5YfBOuiRu6eCntVpspiW3 6QGopDn4YCX0CPakZjABpSX7eHkl/vprLhaTEZoPiY9LKVuki4yC223bAvajUSnh Ip9Wk8FMaupzWK7kwjhC3lv9Ev7tseZaWIZbPCypqtrBNRbC5DHX9jj51bpZehwg widO2METdOmnJ18rk8XQ+uYCNlMr9JFvhwSBNyKWRdi4nPAVAwBfh7Pfw7PANtXc zYI4wHM7upVCNOSfgwQyXhd5w21zgDeWrATealqZVgpdtvNSyn2V+k95SMKxuQm1 sRSzLGapW8rSr7/8z9iWu4QO+OJlPOUQ -----END CERTIFICATE-----Generated at Thu Jun 5 20:09:25 2025 by rpki-client