$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json) Hash identifier: 32LacZtIKZmDl7T98jLy7MmCoXkumFQBZ+RGLk+CAko= Subject key identifier: 29:B6:0C:BF:53:55:37:2A:A3:F5:F1:D8:84:51:0F:AF:A8:66:C0:F9 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft Manifest number: 0A Signing time: Tue 01 Jul 2025 08:56:19 +0000 Manifest this update: Tue 01 Jul 2025 08:56:19 +0000 Manifest next update: Tue 08 Jul 2025 08:56:19 +0000 Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: dqS+t73h6IkQR5pR7DWtcxjVdq787AcTUICCcUOQrYE=) 2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: 4yAYX9W5VLKXpjedVy4WI6T1jB7PFE1AtNymWoFIgLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Jul 1 08:56:19 2025 GMT Not After : Jul 8 08:56:19 2025 GMT Subject: CN=6863a2b3-f8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:1f:12:d1:80:e1:67:c7:5e:b2:6c:20:19: eb:b5:28:80:62:ff:16:17:e6:77:55:41:b9:00:9c: 1e:60:8d:21:80:dd:7b:ed:c6:a6:3a:6b:ea:7d:15: 9c:f1:f8:3b:ec:93:ef:09:6f:db:95:9b:6d:13:03: 00:cc:94:23:cd:ab:7c:03:82:94:91:8c:1e:cf:0c: dd:fe:87:56:d7:0a:16:bf:6a:c6:9d:97:f6:aa:8d: 65:29:d7:72:0d:0b:83:ab:4a:0a:b3:61:0f:c8:4f: de:3d:26:c7:d9:99:17:43:0f:b2:f3:c3:9c:5b:d3: 4e:92:b1:b8:db:9c:67:42:e7:4b:8e:dc:a9:31:78: 7a:8a:b2:83:f7:0b:dc:82:2b:60:09:e9:54:db:5c: bc:0a:f2:bb:04:b8:a8:ec:87:54:9c:f9:56:3b:eb: ee:f3:e3:63:bd:cd:85:cb:c3:8f:fb:d0:47:bf:a0: a1:fb:0d:e5:94:39:c0:59:dd:c4:95:99:4b:e2:86: 56:7e:92:6e:bc:7e:be:ec:64:64:4b:ad:f9:c2:a6: 94:32:36:92:75:48:b9:b8:4b:70:66:ee:68:39:de: e6:3d:34:b3:35:a6:56:83:f2:83:16:c9:e8:92:ac: f1:d7:8e:6b:3a:00:d7:4e:31:10:f8:ff:7c:07:9b: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B6:0C:BF:53:55:37:2A:A3:F5:F1:D8:84:51:0F:AF:A8:66:C0:F9 X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:10:41:e7:8a:af:fa:81:aa:6a:11:a3:1c:93:a3:86:0d:8f: 9a:7e:36:9c:38:4e:98:96:e4:3f:5c:82:73:20:79:6d:7f:37: 4f:4c:a9:87:fc:53:f2:68:cd:bf:22:b1:ad:c7:4f:93:58:d4: ff:ea:67:9e:84:66:15:25:cb:a1:0e:62:3a:ef:83:86:58:a6: 4f:ab:9c:a9:6e:d7:c3:88:54:f9:e5:6d:14:26:37:ac:a0:41: f7:be:4e:41:64:09:d1:b8:29:63:13:fd:24:44:6c:5c:d8:f3: 5a:90:e4:ec:7b:2c:32:53:1f:44:d0:34:d6:d9:08:24:89:fb: e8:e9:f5:f6:76:a7:89:05:5a:da:11:b9:fd:53:fe:fb:eb:fd: e5:9d:ed:3d:89:21:b8:e8:8e:2e:5f:ed:00:4c:17:c2:05:bd: b9:63:62:06:71:d1:2b:70:10:03:75:ac:f8:c3:4d:1a:d1:da: b1:55:48:3a:8c:df:90:4b:1c:2e:74:fc:b4:e8:8d:b1:d9:f4: e2:fb:f0:19:40:c3:d4:fe:d7:ef:fa:fd:ee:49:fd:6f:f2:f9: e4:74:96:a7:5a:6a:a3:25:8f:d3:0e:41:ab:c4:91:6c:9c:fd: 0c:a7:fb:91:c8:21:d5:a2:dc:d4:aa:7e:db:db:e1:5e:12:1a: 00:e1:0a:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTA3MDEwODU2MTlaFw0yNTA3MDgwODU2MTlaMBgxFjAUBgNV BAMTDTY4NjNhMmIzLWY4ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgjx8S0YDhZ8desmwgGeu1KIBi/xYX5ndVQbkAnB5gjSGA3XvtxqY6a+p9FZzx +Dvsk+8Jb9uVm20TAwDMlCPNq3wDgpSRjB7PDN3+h1bXCha/asadl/aqjWUp13IN C4OrSgqzYQ/IT949JsfZmRdDD7Lzw5xb006SsbjbnGdC50uO3KkxeHqKsoP3C9yC K2AJ6VTbXLwK8rsEuKjsh1Sc+VY76+7z42O9zYXLw4/70Ee/oKH7DeWUOcBZ3cSV mUvihlZ+km68fr7sZGRLrfnCppQyNpJ1SLm4S3Bm7mg53uY9NLM1plaD8oMWyeiS rPHXjms6ANdOMRD4/3wHm21FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKbYMv1NV Nyqj9fHYhFEPr6hmwPkwHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 QTI3LzlEQzIyMDU0NEE1ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQ MnFRSWE1ZWV3TXF6dDIzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQQQeeKr/qBqmoRoxyTo4YNj5p+Npw4TpiW5D9cgnMgeW1/N09MqYf8 U/Jozb8isa3HT5NY1P/qZ56EZhUly6EOYjrvg4ZYpk+rnKlu18OIVPnlbRQmN6yg Qfe+TkFkCdG4KWMT/SREbFzY81qQ5Ox7LDJTH0TQNNbZCCSJ++jp9fZ2p4kFWtoR uf1T/vvr/eWd7T2JIbjoji5f7QBMF8IFvbljYgZx0StwEAN1rPjDTRrR2rFVSDqM 35BLHC50/LTojbHZ9OL78BlAw9T+1+/6/e5J/W/y+eR0lqdaaqMlj9MOQavEkWyc /Qyn+5HIIdWi3NSqftvb4V4SGgDhCtI= -----END CERTIFICATE-----Generated at Wed Jul 2 10:25:18 2025 by rpki-client