$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: AwqKKDsXYo3X0KXCyNz4kWCiRm23PzeNykxqTAFkcGM= Subject key identifier: DE:BE:24:F8:48:F2:DC:99:E8:8B:D0:69:2F:36:79:5C:02:9C:2C:A3 Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 0196 Signing time: Sat 31 May 2025 03:09:39 +0000 Manifest this update: Sat 31 May 2025 03:09:38 +0000 Manifest next update: Sat 07 Jun 2025 03:09:38 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: VJISyB+6biYkkRxzYXAqt9KPXbwbOhRBlhlduFwQzq4=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: May 31 03:09:38 2025 GMT Not After : Jun 7 03:09:38 2025 GMT Subject: CN=683a72f2-e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:4e:cf:b5:56:02:60:a1:77:33:eb:f1:c2: 9a:2f:5f:e7:c4:ce:a0:33:b1:65:43:19:12:94:0c: d5:f5:46:a5:19:2d:04:b9:f2:1d:17:3a:39:74:15: f5:f8:9e:93:a0:1c:a4:13:73:6c:6d:6c:73:59:0e: 20:8d:7a:5b:ac:b0:19:fc:a2:20:6e:72:58:dd:25: 99:35:e8:ad:92:25:17:28:28:92:77:c6:9d:4b:a9: ec:1a:98:5e:7e:38:ee:94:07:23:71:6d:96:3c:8a: 33:af:21:58:ed:a9:30:77:b9:ef:e4:ff:8b:11:5d: fb:14:6b:a1:69:a8:e2:c6:e9:84:0b:2c:c4:a4:3f: 0e:c2:4d:06:0e:2f:a9:55:e8:96:49:6c:af:d1:ad: f6:8a:da:3d:d9:cb:e0:64:b5:06:25:c5:83:1c:a6: 83:23:4a:1d:4a:44:49:fe:6d:40:b9:ee:0d:9d:ca: ec:ad:6d:f1:19:69:51:6c:ec:b5:a3:7b:b9:fa:d5: cf:0f:03:6d:8f:8a:9f:53:e0:29:0a:02:37:4a:d2: 79:c0:f9:95:07:63:5f:d7:f7:10:68:f0:87:51:f4: e7:96:c1:ca:84:63:af:da:43:36:8d:57:61:ed:0b: f4:db:52:48:ed:c4:4d:e8:c2:ab:f8:33:db:f9:5f: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BE:24:F8:48:F2:DC:99:E8:8B:D0:69:2F:36:79:5C:02:9C:2C:A3 X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:bd:b7:68:cc:60:f0:5c:dd:3d:48:3f:99:35:e8:e9:d4:c1: f6:a5:b5:9e:f3:3f:88:1f:9a:d4:2e:b9:a4:ed:fd:13:f5:48: e1:31:46:bd:a2:1c:e5:d8:e4:de:11:7a:37:ba:f9:46:ae:32: a6:3c:90:14:62:87:be:33:6b:4a:2e:f2:94:1f:14:1b:27:d6: 8a:72:88:e4:ec:22:0a:60:36:d2:2f:9a:d4:50:b4:01:0d:89: 82:33:ce:32:e7:17:f7:67:a6:ec:20:9b:85:e7:d8:f7:1d:37: 88:02:17:1e:8e:20:b2:68:0a:0d:d8:0b:24:eb:58:29:7d:63: e4:18:1d:c4:6f:ad:5a:f0:c1:ad:02:42:03:be:8d:83:a4:8a: 6c:51:24:87:21:23:62:93:8a:f8:a1:61:bf:a8:4c:23:80:9c: 20:d9:8d:50:a8:3b:e7:55:b2:b3:49:1d:00:9a:7a:5d:52:64: b6:59:6b:0b:4c:d0:96:28:29:13:9c:df:99:9f:c9:9a:a3:fa: ae:b8:52:56:a0:65:1d:64:d5:b1:1d:68:bf:2b:69:42:f3:fd: 96:a7:a3:5a:87:71:13:e0:36:ca:84:0a:55:3f:5f:5b:45:2e: 82:bd:9d:40:15:b6:4e:e9:9f:a6:63:4e:fc:e8:13:8b:1b:ee: fd:4b:01:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwNTMxMDMwOTM4WhcNMjUwNjA3MDMwOTM4WjAYMRYwFAYD VQQDEw02ODNhNzJmMi1lNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD9Oz7VWAmChdzPr8cKaL1/nxM6gM7FlQxkSlAzV9UalGS0EufIdFzo5dBX1 +J6ToBykE3NsbWxzWQ4gjXpbrLAZ/KIgbnJY3SWZNeitkiUXKCiSd8adS6nsGphe fjjulAcjcW2WPIozryFY7akwd7nv5P+LEV37FGuhaajixumECyzEpD8Owk0GDi+p VeiWSWyv0a32ito92cvgZLUGJcWDHKaDI0odSkRJ/m1Aue4NncrsrW3xGWlRbOy1 o3u5+tXPDwNtj4qfU+ApCgI3StJ5wPmVB2Nf1/cQaPCHUfTnlsHKhGOv2kM2jVdh 7Qv021JI7cRN6MKr+DPb+V9upwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6+JPhI 8tyZ6IvQaS82eVwCnCyjMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChvbdozGDwXN09SD+ZNejp1MH2pbWe8z+IH5rULrmk7f0T9UjhMUa9 ohzl2OTeEXo3uvlGrjKmPJAUYoe+M2tKLvKUHxQbJ9aKcojk7CIKYDbSL5rUULQB DYmCM84y5xf3Z6bsIJuF59j3HTeIAhcejiCyaAoN2Ask61gpfWPkGB3Eb61a8MGt AkIDvo2DpIpsUSSHISNik4r4oWG/qEwjgJwg2Y1QqDvnVbKzSR0AmnpdUmS2WWsL TNCWKCkTnN+Zn8mao/quuFJWoGUdZNWxHWi/K2lC8/2Wp6Nah3ET4DbKhApVP19b RS6CvZ1AFbZO6Z+mY0786BOLG+79SwEt -----END CERTIFICATE-----Generated at Sat May 31 16:59:20 2025 by rpki-client