$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: dNu7RlrLvCtGjmgsEIrfIrCp4leRLiex6gtRLajtaSE= Subject key identifier: B6:69:2B:B9:14:41:BF:55:9C:BC:34:24:6A:82:4B:3A:D7:DF:08:4B Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 0625 Signing time: Fri 30 May 2025 22:57:22 +0000 Manifest this update: Fri 30 May 2025 22:57:22 +0000 Manifest next update: Fri 06 Jun 2025 22:57:22 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: sdSQPrC0LXUQApSOdwGjnhjE3u4E/gHft2bjq1ESd/c=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: OwzCMKJ00AP/4rlFPssRc/a1t58qHPUtNTvkBc1kXsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: May 30 22:57:22 2025 GMT Not After : Jun 6 22:57:22 2025 GMT Subject: CN=683a37d2-24fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:cf:12:39:e3:e9:5d:0a:a2:bc:72:fd:39: bf:24:78:44:68:ee:cc:fe:93:70:47:03:7b:49:f6: 3e:87:13:97:ae:91:31:1e:06:01:37:06:6c:94:6b: 3f:40:25:cd:de:26:e4:3e:53:54:91:75:fb:f9:07: 9a:04:83:c8:26:4c:26:08:12:fd:3a:08:dd:63:1c: f4:4d:2f:58:e1:17:f4:1c:13:42:cd:8f:61:ea:67: 30:3d:2d:fc:5e:15:3e:0f:b0:08:80:a6:24:a2:e8: f5:19:27:ca:d0:4f:ba:a6:fd:e7:98:13:a7:73:b4: cc:79:84:1c:c4:fe:8b:7f:ee:2d:0f:a9:8c:41:33: 9e:d5:dd:14:8b:bf:1d:62:3a:de:7b:ba:eb:19:b9: d3:ef:d0:a5:64:ed:e8:24:07:73:06:de:f5:c4:aa: cf:b9:76:a6:e0:8d:1a:9d:12:a0:a0:24:94:bf:e0: df:da:f7:14:d2:ec:c5:0b:10:da:da:35:3a:4b:dc: 83:fe:ae:64:ca:64:6c:2a:10:25:6c:5d:1a:55:0b: 1a:17:09:4f:17:ca:64:43:6e:b1:9a:5e:8d:3b:58: 3d:51:1c:c6:5c:5f:ba:ef:0e:fa:ee:df:23:c5:a0: b4:58:68:a9:f4:1c:bc:70:a7:13:12:08:42:9e:f0: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:69:2B:B9:14:41:BF:55:9C:BC:34:24:6A:82:4B:3A:D7:DF:08:4B X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:1e:7a:cc:f5:5f:1d:86:91:89:41:7d:78:23:c3:cb:e1: 17:80:4a:de:02:16:a6:84:2c:a3:db:52:87:ff:c2:90:93:54: 67:c4:74:9d:a3:11:f4:ea:a8:92:86:5c:b3:a9:64:64:f2:ce: 25:4a:3d:c0:df:57:7a:c0:dc:db:65:2d:69:4d:1b:e3:5a:cc: 76:39:c2:c6:9f:c8:3e:22:7f:db:ef:df:e1:81:bd:fd:8d:8e: 30:56:9b:05:10:89:8a:2e:ce:f6:40:75:f8:76:9a:ac:f6:59: cd:89:70:5d:26:44:b5:9e:d3:71:7d:71:73:d3:11:d7:60:0a: c7:bd:14:fa:32:c7:05:16:6d:7f:2e:34:64:c7:25:1f:df:26: 9c:e6:9b:66:67:bb:0a:6a:a2:e7:93:98:b5:77:7e:1e:0f:84: 1c:57:66:89:4f:b8:ff:60:82:dd:d1:4e:60:1e:02:0c:a0:1a: bb:4b:87:b4:78:e4:ff:ba:b2:8d:07:78:ee:93:a6:4f:89:a9: fd:86:31:fe:56:69:b0:fc:00:c3:2f:0d:6a:08:b4:72:ec:f4: dc:1b:93:bc:ad:9e:8c:6f:f3:56:f2:5c:4a:2d:71:91:be:36: 07:62:5a:a7:d2:f7:f6:1f:07:a9:cc:a9:d5:f1:58:77:50:82: 4a:4c:96:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwNTMwMjI1NzIyWhcNMjUwNjA2MjI1NzIyWjAYMRYwFAYD VQQDEw02ODNhMzdkMi0yNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEDPEjnj6V0Korxy/Tm/JHhEaO7M/pNwRwN7SfY+hxOXrpExHgYBNwZslGs/ QCXN3ibkPlNUkXX7+QeaBIPIJkwmCBL9OgjdYxz0TS9Y4Rf0HBNCzY9h6mcwPS38 XhU+D7AIgKYkouj1GSfK0E+6pv3nmBOnc7TMeYQcxP6Lf+4tD6mMQTOe1d0Ui78d Yjree7rrGbnT79ClZO3oJAdzBt71xKrPuXam4I0anRKgoCSUv+Df2vcU0uzFCxDa 2jU6S9yD/q5kymRsKhAlbF0aVQsaFwlPF8pkQ26xml6NO1g9URzGXF+67w767t8j xaC0WGip9By8cKcTEghCnvDtUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZpK7kU Qb9VnLw0JGqCSzrX3whLMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuXR56zPVfHYaRiUF9eCPDy+EXgEreAhamhCyj21KH/8KQk1RnxHSd oxH06qiShlyzqWRk8s4lSj3A31d6wNzbZS1pTRvjWsx2OcLGn8g+In/b79/hgb39 jY4wVpsFEImKLs72QHX4dpqs9lnNiXBdJkS1ntNxfXFz0xHXYArHvRT6MscFFm1/ LjRkxyUf3yac5ptmZ7sKaqLnk5i1d34eD4QcV2aJT7j/YILd0U5gHgIMoBq7S4e0 eOT/urKNB3juk6ZPian9hjH+Vmmw/ADDLw1qCLRy7PTcG5O8rZ6Mb/NW8lxKLXGR vjYHYlqn0vf2HwepzKnV8Vh3UIJKTJZB -----END CERTIFICATE-----Generated at Sat May 31 17:14:36 2025 by rpki-client