$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: 28DN+qBEI5neRIs6D/2NNhl/UAgeo4G59J5oIcvZzKM= Subject key identifier: 1E:91:5A:EA:D7:FB:AA:60:3A:51:70:B3:28:0E:C5:7F:13:9F:A7:43 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 0161 Signing time: Sat 07 Jun 2025 03:33:35 +0000 Manifest this update: Sat 07 Jun 2025 03:33:35 +0000 Manifest next update: Sat 14 Jun 2025 03:33:35 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: dGvAIr5dOXWdNXTcsZOQc+e7z+G/8Z9MiIBOjTMcdxg=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 03:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Jun 7 03:33:35 2025 GMT Not After : Jun 14 03:33:35 2025 GMT Subject: CN=6843b30f-eb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:1e:c6:12:c7:29:74:43:10:f4:b7:61:38: 74:b5:e9:82:75:40:68:23:a4:34:9d:2d:67:21:b2: bf:9d:1b:3e:6e:0e:6c:9a:10:7a:a1:bf:08:f7:d9: e1:03:55:20:e1:7f:0e:0e:b1:03:08:5a:98:38:6a: 10:5e:56:8b:e6:4d:c5:41:bd:16:b5:42:ef:1e:50: a2:f4:8d:95:5f:0e:eb:f2:64:cf:5b:1e:26:c0:46: ef:89:a2:97:67:9c:1a:49:d7:fa:93:37:ce:85:45: 79:74:ee:94:1f:f1:ee:61:14:89:b9:e1:1d:80:ed: 77:76:9b:f2:b6:b3:fa:7f:5e:2a:c0:fe:6a:cc:7f: 51:2c:6b:f7:9e:a1:38:e6:84:e1:2a:06:bc:59:55: 9f:bf:c3:04:0e:d4:59:64:15:37:bf:2e:35:77:df: 7e:23:d7:65:3e:d4:07:f7:fe:58:97:c3:34:17:18: 2d:59:e9:11:95:2e:e6:ec:15:fa:9a:0d:be:e3:22: bb:cc:31:0d:fe:e9:41:d0:19:02:a5:e9:f6:f6:68: b5:97:aa:9a:82:48:fc:43:ba:48:73:52:28:10:28: 32:93:05:10:aa:a7:63:40:2b:d0:10:03:bb:d0:1b: b2:be:72:44:97:af:3d:70:e6:a2:dc:44:46:24:24: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:91:5A:EA:D7:FB:AA:60:3A:51:70:B3:28:0E:C5:7F:13:9F:A7:43 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:34:01:7c:b2:e3:b9:4f:4e:bb:e4:32:d0:ca:53:1e:e2:e2: 4e:c3:4f:3a:01:ec:26:b1:23:ac:ba:92:02:5e:27:3f:b9:a0: 96:4b:93:e7:c8:04:42:14:8c:1a:31:56:de:1d:67:c6:b2:05: 61:5a:b3:a3:3c:ae:0f:c5:84:b3:2f:ba:30:d8:95:56:e0:56: 38:80:e4:7c:bb:07:08:41:1a:bf:e7:3d:b3:04:bd:12:e0:88: 79:c1:b0:74:a8:df:a7:a9:21:fc:9f:1f:a5:15:68:f3:55:0d: 75:c5:28:f9:45:52:0d:75:80:50:44:2f:98:49:7a:6d:77:8e: 42:d9:e0:93:ca:3e:3a:b0:c3:c8:32:00:6e:e1:dc:02:dc:1c: 88:d0:6f:9e:da:1f:2e:a7:24:92:9b:07:21:84:0b:da:25:e7: 27:69:84:a4:35:c7:c1:16:c4:cf:78:9a:f9:f6:be:ff:aa:b3: 77:30:08:1e:47:73:2d:05:cd:79:c1:d1:be:db:29:35:c0:11: f2:de:8a:9e:ef:7a:2b:f6:bb:f6:d5:25:da:e3:b3:13:b2:90: fd:78:b7:5d:0d:d7:3f:f3:c8:56:ef:63:36:00:45:43:70:48: 35:60:c3:13:c2:91:5b:ed:f2:a7:df:a2:53:74:90:81:e8:23: 9e:85:e2:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUwNjA3MDMzMzM1WhcNMjUwNjE0MDMzMzM1WjAYMRYwFAYD VQQDEw02ODQzYjMwZi1lYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz28exhLHKXRDEPS3YTh0temCdUBoI6Q0nS1nIbK/nRs+bg5smhB6ob8I99nh A1Ug4X8ODrEDCFqYOGoQXlaL5k3FQb0WtULvHlCi9I2VXw7r8mTPWx4mwEbviaKX Z5waSdf6kzfOhUV5dO6UH/HuYRSJueEdgO13dpvytrP6f14qwP5qzH9RLGv3nqE4 5oThKga8WVWfv8MEDtRZZBU3vy41d99+I9dlPtQH9/5Yl8M0FxgtWekRlS7m7BX6 mg2+4yK7zDEN/ulB0BkCpen29mi1l6qagkj8Q7pIc1IoECgykwUQqqdjQCvQEAO7 0BuyvnJEl689cOai3ERGJCRC8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6RWurX +6pgOlFwsygOxX8Tn6dDMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlNAF8suO5T0675DLQylMe4uJOw086AewmsSOsupICXic/uaCWS5Pn yARCFIwaMVbeHWfGsgVhWrOjPK4PxYSzL7ow2JVW4FY4gOR8uwcIQRq/5z2zBL0S 4Ih5wbB0qN+nqSH8nx+lFWjzVQ11xSj5RVINdYBQRC+YSXptd45C2eCTyj46sMPI MgBu4dwC3ByI0G+e2h8upySSmwchhAvaJecnaYSkNcfBFsTPeJr59r7/qrN3MAge R3MtBc15wdG+2yk1wBHy3oqe73or9rv21SXa47MTspD9eLddDdc/88hW72M2AEVD cEg1YMMTwpFb7fKn36JTdJCB6COeheL5 -----END CERTIFICATE-----Generated at Sun Jun 8 15:55:35 2025 by rpki-client