$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: I/Utb647EsFJoJNL/BiVH8x0UcBFXdXU9NheN93hL7c= Subject key identifier: 70:93:64:E8:B7:0F:BB:0D:31:26:1E:6D:02:B9:86:6F:1E:FF:64:49 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 01DC Signing time: Sat 31 May 2025 02:30:22 +0000 Manifest this update: Sat 31 May 2025 02:30:22 +0000 Manifest next update: Sat 07 Jun 2025 02:30:22 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: 5qxMVL86U6CV82MolDjdeKAbaQfIZrVfTTzV7rKKdIc=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: Bfu/ALycXYH90jyLAqZWBRVy+FwJZTHe9HY8IeLE+Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: May 31 02:30:22 2025 GMT Not After : Jun 7 02:30:22 2025 GMT Subject: CN=683a69be-a6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:9b:4c:39:95:86:da:8f:e6:1b:9b:98:5d: f3:d7:95:93:03:c9:28:3c:25:ce:02:cd:7b:6b:ec: a3:7d:26:71:93:93:cb:e4:48:f9:6b:0b:0d:fe:c0: 09:be:48:a2:e2:13:0e:d1:e0:85:bb:fd:80:42:5d: fb:14:8b:29:33:c7:b4:d1:38:67:a1:37:0c:4d:69: 98:fb:7c:82:ad:ca:38:e9:eb:06:59:f1:16:fb:a8: 16:53:81:4c:79:a7:c2:18:8d:f7:20:ef:1d:51:91: bd:57:21:24:a2:9f:6e:c8:72:66:43:21:1f:f2:e0: 2d:3d:14:16:d2:57:b0:86:82:e7:18:75:75:d1:3e: 8b:9e:7f:a9:a2:31:5b:49:6f:15:4a:0a:60:e2:aa: c4:76:a3:a9:54:d5:9a:ad:62:ef:0c:bf:eb:2f:f2: 21:ab:5b:ab:7b:f1:34:de:59:53:33:b2:88:19:f6: dd:9b:b7:80:32:ee:9f:9c:94:e9:64:42:83:71:7f: fe:e2:ec:0e:75:a9:a7:76:95:18:bc:a6:7c:ca:f9: 89:bc:a5:63:24:68:ee:a9:d0:c8:87:93:9b:dd:f1: 62:5f:9c:4f:8c:8e:bc:0f:ba:bf:0e:5d:c1:43:aa: df:2f:14:1e:89:c5:70:47:26:71:0c:18:ca:be:c6: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:93:64:E8:B7:0F:BB:0D:31:26:1E:6D:02:B9:86:6F:1E:FF:64:49 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1b:f5:62:80:8f:78:a8:3e:8e:73:8e:e5:07:0d:e5:5a:e9: 53:08:19:3e:94:8d:2f:37:cd:89:ef:42:7c:bf:07:39:cb:13: 22:66:f3:02:eb:3d:01:40:00:00:9f:46:f6:76:51:8b:ac:5c: 03:cf:f0:63:50:53:8b:4a:cf:fb:20:7c:7c:ce:d5:cd:21:6f: 86:b8:f5:12:4c:0a:41:aa:a4:ac:c4:65:30:89:a5:6b:96:96: c7:13:2e:af:f9:89:2c:52:b5:11:10:c8:e8:af:ce:35:ee:08: 51:d3:c8:10:63:48:17:9d:26:a7:eb:a4:ce:c3:b7:b7:4e:f3: 8e:3b:e7:41:86:4f:1b:76:4f:ab:36:35:6a:0b:48:f7:32:5d: ea:90:fb:0f:3e:c1:11:f9:95:cf:82:13:b0:06:3c:b3:3b:46: ff:aa:b6:e7:d0:f4:43:a0:ef:db:4c:45:ed:18:98:0b:d7:b8: 87:46:97:21:ec:4c:64:b8:ee:78:a6:d1:1c:b7:20:38:53:c0: a0:ae:51:de:c0:4c:07:8f:e6:63:92:4a:a5:dd:70:0e:28:28: 9e:4e:00:5e:85:b8:d2:98:a2:0d:ad:42:13:2f:0a:38:3f:07: 9a:da:d0:e5:5f:89:43:9a:a4:fd:2c:43:a7:8b:0b:56:af:eb: 83:f7:8a:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUwNTMxMDIzMDIyWhcNMjUwNjA3MDIzMDIyWjAYMRYwFAYD VQQDEw02ODNhNjliZS1hNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SubTDmVhtqP5hubmF3z15WTA8koPCXOAs17a+yjfSZxk5PL5Ej5awsN/sAJ vkii4hMO0eCFu/2AQl37FIspM8e00ThnoTcMTWmY+3yCrco46esGWfEW+6gWU4FM eafCGI33IO8dUZG9VyEkop9uyHJmQyEf8uAtPRQW0lewhoLnGHV10T6Lnn+pojFb SW8VSgpg4qrEdqOpVNWarWLvDL/rL/Ihq1ure/E03llTM7KIGfbdm7eAMu6fnJTp ZEKDcX/+4uwOdamndpUYvKZ8yvmJvKVjJGjuqdDIh5Ob3fFiX5xPjI68D7q/Dl3B Q6rfLxQeicVwRyZxDBjKvsayyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCTZOi3 D7sNMSYebQK5hm8e/2RJMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgG/VigI94qD6Oc47lBw3lWulTCBk+lI0vN82J70J8vwc5yxMiZvMC 6z0BQAAAn0b2dlGLrFwDz/BjUFOLSs/7IHx8ztXNIW+GuPUSTApBqqSsxGUwiaVr lpbHEy6v+YksUrUREMjor8417ghR08gQY0gXnSan66TOw7e3TvOOO+dBhk8bdk+r NjVqC0j3Ml3qkPsPPsER+ZXPghOwBjyzO0b/qrbn0PRDoO/bTEXtGJgL17iHRpch 7ExkuO54ptEctyA4U8CgrlHewEwHj+Zjkkql3XAOKCieTgBehbjSmKINrUITLwo4 Pwea2tDlX4lDmqT9LEOniwtWr+uD94pn -----END CERTIFICATE-----Generated at Sat May 31 17:27:55 2025 by rpki-client