$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: 0Hqw+LNhdUQOzMJcyFYSeUrMKJb/WbhdmiXIPIgftbg= Subject key identifier: 0D:3C:9A:F1:0B:FF:EF:E5:C2:DF:BC:1A:C0:37:43:F1:34:2B:29:E5 Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: 9A Signing time: Sat 31 May 2025 05:53:16 +0000 Manifest this update: Sat 31 May 2025 05:53:15 +0000 Manifest next update: Sat 07 Jun 2025 05:53:15 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: 0r5O4X4nayU6vz0lhKXNEB7+FR/6IK6UNxGwPPIEGco=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: May 31 05:53:15 2025 GMT Not After : Jun 7 05:53:15 2025 GMT Subject: CN=683a994b-e99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:d5:f4:33:91:ab:df:e2:82:5c:9b:7c:99: 31:ef:ab:7b:67:73:a8:76:68:38:5c:97:9e:5b:7f: a3:ab:7b:5e:4c:ef:89:61:6b:af:b9:44:18:7f:5a: 8c:8f:55:be:54:55:b6:db:8a:0c:e3:cd:b5:f6:0e: 3d:b9:53:7c:c1:1e:63:5a:97:ce:23:43:ec:72:45: a5:4d:1f:52:e4:08:d3:76:19:26:8a:3f:2f:05:59: 4b:11:24:2e:36:e5:5c:28:0d:fe:52:07:5e:86:12: e8:26:a1:80:d4:3e:37:33:81:f5:2e:ab:b3:5e:c5: e3:de:e5:a5:f4:5a:d5:d9:44:42:25:c9:39:3c:b9: c5:ba:59:a7:5c:0b:8b:8b:aa:a3:31:1d:13:f2:da: 34:63:7a:ba:74:47:e1:fe:47:bc:da:d1:6d:d1:40: d1:0c:be:24:f0:06:e5:bc:0b:db:ae:af:5b:0f:05: 02:87:22:ee:d8:6f:f4:0a:4a:49:ac:7e:84:d0:2b: 40:9d:c9:a0:bd:a1:4c:4a:fe:8f:0e:7e:35:e0:76: a9:4e:db:13:1e:be:d4:88:65:a3:2a:cc:2a:87:13: 30:01:1f:0b:45:c7:f2:fd:f4:34:f9:ee:09:9f:6d: 9b:7e:30:85:d7:3c:6d:56:10:94:a6:dc:bb:69:90: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3C:9A:F1:0B:FF:EF:E5:C2:DF:BC:1A:C0:37:43:F1:34:2B:29:E5 X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:76:0a:4b:44:a4:83:cb:3d:4e:27:4f:d9:fd:a1:ae:24:19: 09:91:6f:19:c7:57:d8:34:4e:56:ca:88:cb:00:fa:1b:3d:21: 59:f8:c3:fa:c5:2c:9f:fa:56:a2:67:3e:2d:9f:5a:96:5e:63: e4:41:c3:79:e7:18:1f:57:44:64:03:71:32:00:be:1e:f6:a1: 35:c4:98:bb:f8:48:e9:37:3b:0d:52:09:16:9e:85:35:8a:f5: 51:e0:1b:fc:b3:85:a9:96:c2:fc:65:f3:a3:cd:fa:05:d6:2c: 7b:0f:7b:a6:ef:3b:0f:de:aa:34:8d:00:a1:b6:c8:ea:b5:d8: 2a:e1:6a:9c:7d:79:81:e1:10:5a:7a:a9:9a:d1:dd:7e:a2:9b: b8:d3:d9:bb:89:f2:f7:ac:57:fd:0a:9d:13:62:d6:36:af:c7: 59:53:18:18:df:3b:fe:25:13:ed:96:c6:08:0b:cf:25:22:c1: 95:2b:8d:41:16:68:6d:13:80:db:a8:25:a4:44:44:05:a3:af: 22:24:18:d1:c6:9b:30:0c:a4:b2:8a:d5:09:8b:08:a1:7f:9c: 3d:eb:2c:b6:48:16:84:cb:73:18:29:3c:0d:15:dc:c6:0c:03: f3:23:71:15:78:48:04:3e:26:12:32:fb:e4:4e:34:e0:02:1d: 47:1b:34:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk3NkMxMTAvBgNVBAUTKEY3RUE3MUI2RTZDRDA0QTU1REFFQjBEMTU4RTA0NERF OUExMjIxNkEwHhcNMjUwNTMxMDU1MzE1WhcNMjUwNjA3MDU1MzE1WjAYMRYwFAYD VQQDEw02ODNhOTk0Yi1lOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5jV9DORq9/iglybfJkx76t7Z3Oodmg4XJeeW3+jq3teTO+JYWuvuUQYf1qM j1W+VFW224oM48219g49uVN8wR5jWpfOI0PsckWlTR9S5AjTdhkmij8vBVlLESQu NuVcKA3+UgdehhLoJqGA1D43M4H1LquzXsXj3uWl9FrV2URCJck5PLnFulmnXAuL i6qjMR0T8to0Y3q6dEfh/ke82tFt0UDRDL4k8AblvAvbrq9bDwUChyLu2G/0CkpJ rH6E0CtAncmgvaFMSv6PDn414HapTtsTHr7UiGWjKswqhxMwAR8LRcfy/fQ0+e4J n22bfjCF1zxtVhCUpty7aZBiwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA08mvEL /+/lwt+8GsA3Q/E0KynlMB8GA1UdIwQYMBaAFPfqcbbmzQSlXa6w0VjgRN6aEiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTc2Qy84MzUwRDJCQzU5 NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJLVmRyckRSV09CRTNwb1NJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTc2Qy84MzUwRDJCQzU5NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJL VmRyckRSV09CRTNwb1NJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMdgpLRKSDyz1OJ0/Z/aGuJBkJkW8Zx1fYNE5WyojLAPobPSFZ+MP6 xSyf+laiZz4tn1qWXmPkQcN55xgfV0RkA3EyAL4e9qE1xJi7+EjpNzsNUgkWnoU1 ivVR4Bv8s4WplsL8ZfOjzfoF1ix7D3um7zsP3qo0jQChtsjqtdgq4WqcfXmB4RBa eqma0d1+opu409m7ifL3rFf9Cp0TYtY2r8dZUxgY3zv+JRPtlsYIC88lIsGVK41B FmhtE4DbqCWkREQFo68iJBjRxpswDKSyitUJiwihf5w96yy2SBaEy3MYKTwNFdzG DAPzI3EVeEgEPiYSMvvkTjTgAh1HGzT7 -----END CERTIFICATE-----Generated at Sat May 31 17:28:59 2025 by rpki-client