$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: 3KpbC9Rjs2jK+/6CD4RJMz8qv9cM9U/iY93k07t47H4= Subject key identifier: 77:49:D7:09:E6:C8:0C:58:8C:CC:98:9E:70:BA:3D:E9:9E:F9:A1:46 Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: 72 Signing time: Sat 31 May 2025 06:23:44 +0000 Manifest this update: Sat 31 May 2025 06:23:44 +0000 Manifest next update: Sat 07 Jun 2025 06:23:44 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: PzXkyZ+F87GBkzjUrOy0y96eojmePpeJj2cD4cqQAwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: May 31 06:23:44 2025 GMT Not After : Jun 7 06:23:44 2025 GMT Subject: CN=683aa070-9d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2f:59:42:37:b3:41:79:50:29:3a:21:5b:2a: c9:d9:b2:33:58:0d:6d:06:20:36:00:b2:62:85:50: 55:c1:9a:d7:eb:ea:74:09:96:63:83:71:7c:21:52: 9a:ab:53:54:d1:fe:62:24:c4:4a:6f:d9:2d:df:80: 72:49:7a:16:f0:15:46:af:9d:4a:2f:5b:4f:63:99: 6e:dc:07:04:7b:88:b7:11:2c:0f:0e:e4:c8:2b:56: aa:f2:78:a3:02:27:a1:99:d4:6b:bd:6b:44:e4:91: 8b:62:cf:e3:0c:ba:fa:3f:85:73:c1:8a:02:27:cc: f4:b4:62:de:f4:a2:d9:81:fb:82:34:a7:95:6d:0d: 95:38:86:90:a8:3a:43:90:0f:c5:79:1a:ba:c5:51: ea:7b:36:3e:b3:bd:89:82:d5:9a:15:f5:56:1e:e2: 94:ed:b1:42:19:68:67:94:03:15:11:15:3b:b8:a6: fe:50:f3:c8:a4:95:f2:94:00:7e:37:dd:74:00:6c: 3d:84:52:df:71:de:6a:d3:21:7e:aa:02:8f:08:0c: 47:41:a6:e0:cb:f7:35:de:75:05:0b:d6:ea:b5:47: 14:49:ee:6e:1d:d6:7c:e1:6f:7a:76:3e:75:69:b7: 46:ee:20:81:c7:b1:d8:c8:05:f4:a1:10:d4:42:87: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:49:D7:09:E6:C8:0C:58:8C:CC:98:9E:70:BA:3D:E9:9E:F9:A1:46 X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8f:30:e7:83:82:b1:c5:c1:eb:80:5b:e8:92:d0:0b:55:cf: 71:5b:33:81:e7:39:f5:11:67:78:ea:e0:22:3c:4b:a0:e5:01: 8b:94:7e:5e:be:03:69:d5:bb:70:14:27:bc:90:6c:89:9d:0c: f1:93:90:04:bc:7d:32:3c:38:df:f9:ef:1f:39:33:ff:5e:13: 73:f5:b9:f9:35:a3:09:bc:9a:a3:6f:28:f9:dc:18:ce:78:fd: 70:a6:ee:8b:22:74:c1:3e:c3:ad:b3:e2:10:d6:37:e1:f8:a4: 02:74:ac:12:f2:08:b8:ef:09:28:d8:6d:6f:03:0d:1d:e0:e6: e7:65:70:aa:77:e5:6e:f7:f0:db:7a:a8:22:00:56:0c:90:26: d7:ce:6b:60:af:1e:f8:b3:64:9f:e0:91:77:bd:0d:73:b1:31: ec:78:23:8e:8e:e6:3b:27:1a:58:3b:df:fb:7e:cc:29:fa:61: 0e:96:07:13:2e:e6:d9:fa:bf:d1:87:ec:98:f8:46:ae:f0:9d: 49:1f:8f:f5:ea:5a:c7:5b:9a:9c:49:02:fa:cc:f2:6b:d5:11: 00:d7:4a:86:fe:90:83:6b:b3:57:53:3f:4a:48:d2:ce:3f:72: 05:3e:c6:01:cf:ff:84:f3:39:59:23:67:27:5c:e4:ac:fe:df: 7b:5e:5c:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoRjUzQkNGQjhDNzJDMUEzQUI2NUUwRUE4OEUzQTFBMjFE MjhDRDE2MTAeFw0yNTA1MzEwNjIzNDRaFw0yNTA2MDcwNjIzNDRaMBgxFjAUBgNV BAMTDTY4M2FhMDcwLTlkMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnL1lCN7NBeVApOiFbKsnZsjNYDW0GIDYAsmKFUFXBmtfr6nQJlmODcXwhUpqr U1TR/mIkxEpv2S3fgHJJehbwFUavnUovW09jmW7cBwR7iLcRLA8O5MgrVqryeKMC J6GZ1Gu9a0TkkYtiz+MMuvo/hXPBigInzPS0Yt70otmB+4I0p5VtDZU4hpCoOkOQ D8V5GrrFUep7Nj6zvYmC1ZoV9VYe4pTtsUIZaGeUAxURFTu4pv5Q88iklfKUAH43 3XQAbD2EUt9x3mrTIX6qAo8IDEdBpuDL9zXedQUL1uq1RxRJ7m4d1nzhb3p2PnVp t0buIIHHsdjIBfShENRCh1KtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd0nXCebI DFiMzJiecLo96Z75oUYwHwYDVR0jBBgwFoAU9TvPuMcsGjq2Xg6ojjoaIdKM0WEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzFFNEYzQTVDOEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVR2UHVNY3NHanEyWGc2b2pqb2FJZEtNMFdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzFFNEYzQTVDOEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2px MlhnNm9qam9hSWRLTTBXRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHiPMOeDgrHFweuAW+iS0AtVz3FbM4HnOfURZ3jq4CI8S6DlAYuUfl6+ A2nVu3AUJ7yQbImdDPGTkAS8fTI8ON/57x85M/9eE3P1ufk1owm8mqNvKPncGM54 /XCm7osidME+w62z4hDWN+H4pAJ0rBLyCLjvCSjYbW8DDR3g5udlcKp35W738Nt6 qCIAVgyQJtfOa2CvHvizZJ/gkXe9DXOxMex4I46O5jsnGlg73/t+zCn6YQ6WBxMu 5tn6v9GH7Jj4Rq7wnUkfj/XqWsdbmpxJAvrM8mvVEQDXSob+kINrs1dTP0pI0s4/ cgU+xgHP/4TzOVkjZydc5Kz+33teXJk= -----END CERTIFICATE-----Generated at Sat May 31 17:28:58 2025 by rpki-client