$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: OrHQLH3eP1LIY1Mx+bJXz/TnSg76JUmQcVYQJ78W1/8= Subject key identifier: 81:58:1B:07:CB:C4:98:BC:0F:63:73:44:E2:55:49:0D:4F:84:15:4B Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 097C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 0976 Signing time: Fri 30 May 2025 20:57:53 +0000 Manifest this update: Fri 30 May 2025 20:57:53 +0000 Manifest next update: Fri 06 Jun 2025 20:57:53 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: MqRDEimM9jB28gtl6edqATkx633b+W2V02uq/kU5bJI=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2428 (0x97c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: May 30 20:57:53 2025 GMT Not After : Jun 6 20:57:53 2025 GMT Subject: CN=683a1bd1-0f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:43:d1:6d:ce:5a:48:c8:06:5a:0b:08:b9: 73:8c:6d:c5:1b:70:c1:2a:db:4f:bf:ca:86:5c:5f: ac:89:5d:b2:64:21:dc:a7:d4:11:a7:90:a6:d9:a0: 22:be:23:04:fa:c0:30:d2:10:89:0e:07:1e:fe:72: a5:ec:7a:f3:77:db:19:49:df:d2:70:56:25:50:a9: 14:85:87:af:ef:4a:31:75:4b:4f:3d:70:f5:f5:4c: dc:f1:d7:50:e8:ec:94:17:fa:3d:2d:b8:74:fc:e3: 37:86:19:ab:09:52:7b:44:b7:03:b5:87:92:d3:2f: d8:d1:ea:31:b2:95:3f:95:50:a9:4c:c9:c3:4f:68: cb:b2:96:d2:c2:e7:49:93:6a:78:72:65:e0:28:a1: eb:17:e2:54:b0:1d:09:c5:0d:71:b0:d9:81:13:09: b9:59:2a:be:4e:dd:0c:3d:cb:da:ac:89:27:2a:9a: b2:bd:ee:bf:22:b9:cd:7d:5e:e6:05:45:32:49:31: 78:f6:35:2e:d8:fd:05:0a:ca:d1:5e:7c:d9:32:f4: bf:07:07:81:f4:3e:ec:cf:bc:77:64:ef:34:8c:9b: 75:d0:42:fa:6f:0f:0d:39:50:73:bb:40:7d:ed:2a: c1:2e:ec:38:03:11:38:e5:a6:5f:94:e2:12:c3:84: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:58:1B:07:CB:C4:98:BC:0F:63:73:44:E2:55:49:0D:4F:84:15:4B X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d2:80:9a:0a:76:17:9f:ff:9d:0d:b4:27:fc:12:07:d8:f9: f9:19:86:41:9c:38:12:12:e2:10:3e:9a:8f:16:59:5c:6b:21: 83:25:62:09:52:50:31:3e:c1:c9:92:9a:99:ff:ee:85:ad:0c: 0d:a8:9f:f4:44:77:26:e9:22:66:fa:8e:4e:46:65:0b:87:55: 85:84:a7:5f:5f:45:c2:06:cf:34:87:a1:05:20:e4:8c:d6:d5: 0a:7d:df:e8:b1:8f:05:2d:a7:6f:47:05:fb:91:ca:f7:de:67: a0:69:96:03:6c:1f:ac:84:30:12:e4:04:47:02:4f:a9:15:c8: 6c:a5:1d:29:bd:36:71:a3:fe:99:bf:42:1c:08:7b:8f:8f:32: 2f:5f:de:19:c7:26:f0:44:ca:40:ef:be:b3:b3:c6:c2:ad:3d: e8:c2:c6:c6:a2:78:4e:cd:8a:9e:f1:46:3b:e0:2b:20:d6:26: 43:a4:dd:72:3d:c2:5e:a9:bf:18:48:90:47:5c:da:92:55:d2: 3c:9f:d9:03:a8:aa:c0:51:99:aa:a6:d0:02:f0:b3:f7:a1:30: f7:5b:e1:5e:18:0c:35:1f:bf:8a:cd:05:95:f8:d9:47:81:3a: dd:00:fe:d6:04:ed:00:02:ef:32:d6:8e:be:6f:15:35:89:e9: b3:9d:6e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwNTMwMjA1NzUzWhcNMjUwNjA2MjA1NzUzWjAYMRYwFAYD VQQDEw02ODNhMWJkMS0wZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXtD0W3OWkjIBloLCLlzjG3FG3DBKttPv8qGXF+siV2yZCHcp9QRp5Cm2aAi viME+sAw0hCJDgce/nKl7Hrzd9sZSd/ScFYlUKkUhYev70oxdUtPPXD19Uzc8ddQ 6OyUF/o9Lbh0/OM3hhmrCVJ7RLcDtYeS0y/Y0eoxspU/lVCpTMnDT2jLspbSwudJ k2p4cmXgKKHrF+JUsB0JxQ1xsNmBEwm5WSq+Tt0MPcvarIknKpqyve6/IrnNfV7m BUUySTF49jUu2P0FCsrRXnzZMvS/BweB9D7sz7x3ZO80jJt10EL6bw8NOVBzu0B9 7SrBLuw4AxE45aZflOISw4Re3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFYGwfL xJi8D2NzROJVSQ1PhBVLMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj0oCaCnYXn/+dDbQn/BIH2Pn5GYZBnDgSEuIQPpqPFllcayGDJWIJ UlAxPsHJkpqZ/+6FrQwNqJ/0RHcm6SJm+o5ORmULh1WFhKdfX0XCBs80h6EFIOSM 1tUKfd/osY8FLadvRwX7kcr33megaZYDbB+shDAS5ARHAk+pFchspR0pvTZxo/6Z v0IcCHuPjzIvX94ZxybwRMpA776zs8bCrT3owsbGonhOzYqe8UY74Csg1iZDpN1y PcJeqb8YSJBHXNqSVdI8n9kDqKrAUZmqptAC8LP3oTD3W+FeGAw1H7+KzQWV+NlH gTrdAP7WBO0AAu8y1o6+bxU1iemznW4Z -----END CERTIFICATE-----Generated at Sat May 31 16:46:47 2025 by rpki-client