$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft File: v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json) Hash identifier: t8bd9ryE3e5bx0RM/HipePZYsPiQLbKi6sbwLUauNBA= Subject key identifier: AF:DC:81:8B:F8:7E:40:2F:13:43:6F:7A:15:CE:65:ED:E7:5C:C8:A8 Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B Certificate issuer: /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft Manifest number: 7D Signing time: Sat 31 May 2025 06:15:30 +0000 Manifest this update: Sat 31 May 2025 06:15:29 +0000 Manifest next update: Sat 07 Jun 2025 06:15:29 +0000 Files and hashes: 1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: zHjMrl5JLCOyj+aDpO5msNY76Febo2pFtpT3K8CeP8I=) 2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: 9kYxJpxlD05Jr699vklpYVPr8eXG1mQPz/w/ByRsgR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136302, serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Validity Not Before: May 31 06:15:29 2025 GMT Not After : Jun 7 06:15:29 2025 GMT Subject: CN=683a9e82-a37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:fb:40:c1:3d:2f:4d:36:98:ed:1a:23:1e: 0d:5b:88:ce:fa:5c:1c:76:51:a7:4b:2e:33:09:45: 8c:e9:5e:fa:d1:aa:ba:6e:09:8e:79:8f:e5:55:9d: be:4f:e8:a8:cd:1e:ec:a0:f4:db:55:29:22:f0:6b: 72:97:33:ca:56:db:d7:f2:ac:89:59:ac:64:85:08: a6:d5:24:f9:27:6e:1f:7d:77:9f:3e:f2:7a:43:08: 9d:33:94:a2:5c:03:10:48:56:89:e5:eb:99:66:39: b7:f6:74:bb:c5:5e:b9:e0:b7:02:43:12:0c:17:55: 09:71:1f:78:b7:9b:0c:92:e9:b7:42:dc:66:4b:a8: 04:4d:e9:ea:ad:cb:5d:b5:ed:0a:ce:15:5f:9b:4f: 64:9f:9a:44:53:d0:3a:65:e2:2a:ab:d8:9f:cd:e2: 14:a3:7d:5e:f1:52:27:00:ee:a0:ff:e5:1d:39:cd: fc:8f:94:5d:43:1c:59:35:f6:de:b9:52:d2:c2:14: 0e:ea:26:5e:0e:ed:12:7e:c5:fc:0e:d2:9b:72:ab: 64:d5:bd:6f:b9:d5:6d:df:88:7f:8c:38:b3:8d:9c: 19:f2:ae:d7:4f:17:af:04:e9:a5:4b:fb:8a:be:26: d7:04:2c:9d:dd:4c:33:c4:f8:2c:d5:f9:a2:dc:44: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DC:81:8B:F8:7E:40:2F:13:43:6F:7A:15:CE:65:ED:E7:5C:C8:A8 X509v3 Authority Key Identifier: keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:56:99:4e:18:a6:b4:d2:c9:07:aa:0b:a3:47:32:80:d9:af: 2d:54:ea:8c:08:51:a8:a4:90:e2:01:07:f4:c2:71:68:7c:04: 73:da:43:c9:9b:c1:b0:f2:7e:10:05:d1:b7:ae:3f:73:8f:c0: be:f4:93:9f:01:59:83:52:92:36:06:f7:90:2a:27:d4:bf:9c: 47:61:ef:14:17:70:d0:af:1d:49:b2:57:59:66:9b:4e:ea:7f: 91:14:89:f4:d1:08:e2:13:8c:d3:cc:a7:81:da:d7:c8:ed:9b: 1c:54:13:fc:ed:97:7c:d0:42:57:e2:5a:b0:00:fb:6c:0d:eb: 66:ec:89:52:7b:3c:30:51:02:20:a2:c6:e7:ff:93:cb:38:6b: e0:24:08:1d:23:39:a5:6e:21:bc:6a:b6:a2:c7:c0:62:ee:1d: 7f:2c:33:fc:56:1a:37:0f:de:7f:17:17:e0:1f:dc:01:d1:65: 74:74:73:26:29:5b:e3:fc:79:55:7a:d3:2f:37:cb:e9:b4:9f: 61:d5:a8:66:29:d0:17:41:7e:eb:3c:3e:12:8c:85:4a:4e:a8: 7b:12:bb:84:86:27:34:1f:c1:d6:a6:be:6b:7a:70:cb:7e:ac: 45:44:38:81:22:53:5a:2e:38:49:cd:f7:2f:90:70:5b:f8:63: 55:e8:f8:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjMwMjExMC8GA1UEBRMoQkY3QTdENTRBOUM2QjZDMUI1REQyNTAyNkJGQkJBN0Q3 N0U0NTI3QjAeFw0yNTA1MzEwNjE1MjlaFw0yNTA2MDcwNjE1MjlaMBgxFjAUBgNV BAMTDTY4M2E5ZTgyLWEzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoYvtAwT0vTTaY7RojHg1biM76XBx2UadLLjMJRYzpXvrRqrpuCY55j+VVnb5P 6KjNHuyg9NtVKSLwa3KXM8pW29fyrIlZrGSFCKbVJPknbh99d58+8npDCJ0zlKJc AxBIVonl65lmObf2dLvFXrngtwJDEgwXVQlxH3i3mwyS6bdC3GZLqARN6eqty121 7QrOFV+bT2SfmkRT0Dpl4iqr2J/N4hSjfV7xUicA7qD/5R05zfyPlF1DHFk19t65 UtLCFA7qJl4O7RJ+xfwO0ptyq2TVvW+51W3fiH+MOLONnBnyrtdPF68E6aVL+4q+ JtcELJ3dTDPE+CzV+aLcRCm9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr9yBi/h+ QC8TQ296Fc5l7edcyKgwHwYDVR0jBBgwFoAUv3p9VKnGtsG13SUCa/u6fXfkUnsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzAyLzJGQzRBNzEyODE0 NDExRUY5NUFGQzE0OEM0RjlBRTAyL3YzcDlWS25HdHNHMTNTVUNhX3U2Zlhma1Vu cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjNwOVZLbkd0c0cxM1NVQ2FfdTZmWGZrVW5zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzAyLzJGQzRBNzEyODE0NDExRUY5NUFGQzE0OEM0RjlBRTAyL3YzcDlWS25HdHNH MTNTVUNhX3U2Zlhma1Vucy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALBWmU4YprTSyQeqC6NHMoDZry1U6owIUaikkOIBB/TCcWh8BHPaQ8mb wbDyfhAF0beuP3OPwL70k58BWYNSkjYG95AqJ9S/nEdh7xQXcNCvHUmyV1lmm07q f5EUifTRCOITjNPMp4Ha18jtmxxUE/ztl3zQQlfiWrAA+2wN62bsiVJ7PDBRAiCi xuf/k8s4a+AkCB0jOaVuIbxqtqLHwGLuHX8sM/xWGjcP3n8XF+Af3AHRZXR0cyYp W+P8eVV60y83y+m0n2HVqGYp0BdBfus8PhKMhUpOqHsSu4SGJzQfwdamvmt6cMt+ rEVEOIEiU1ouOEnN9y+QcFv4Y1Xo+Ck= -----END CERTIFICATE-----Generated at Sat May 31 17:20:34 2025 by rpki-client