$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: IrkEVobnbdml+/nXk48xFktOIgFdL8j1jCWLlhHRFdY= Subject key identifier: 07:1B:FB:8D:99:27:2C:FD:68:B5:F3:27:84:59:78:B5:B2:89:59:0B Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: 89 Signing time: Tue 03 Jun 2025 06:20:54 +0000 Manifest this update: Tue 03 Jun 2025 06:20:54 +0000 Manifest next update: Tue 10 Jun 2025 06:20:54 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: pUfrXEXw8GXf1BW1wTYwyaay+bJPaqWht+p+GNC36js=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Jun 3 06:20:54 2025 GMT Not After : Jun 10 06:20:54 2025 GMT Subject: CN=683e9446-b493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:6a:8a:b7:f1:9e:3f:38:81:3a:dd:16:f0: 9d:d1:ae:cd:8f:5d:bb:19:5a:55:14:27:46:4f:0e: 8b:c2:63:7e:28:23:75:5a:e6:ea:35:ec:c5:9b:3e: 94:1a:18:61:64:b3:f0:f7:af:96:0d:06:97:49:59: 6c:8a:16:ea:b1:02:59:10:8e:6c:67:13:2a:c0:48: cd:47:7f:21:ac:2b:74:09:8e:ab:46:5c:1a:f1:b7: 1d:64:16:c5:21:6b:24:df:6c:54:79:c9:19:8e:87: 7f:86:89:7b:ef:e6:39:43:30:82:aa:26:8d:a5:ab: 7e:d1:f9:62:20:b1:6d:7b:de:33:95:c5:b8:fc:fe: 51:41:f7:4c:3b:fe:2d:c3:90:41:ae:5d:43:c8:20: fa:1f:9d:6b:29:a2:ef:51:3a:3b:5f:e3:93:72:a9: 82:1b:ba:20:54:7e:fa:11:0c:f2:bc:ef:29:c3:f6: 87:5b:1b:be:6c:b6:f6:df:5a:7a:28:d4:26:d7:64: 0d:a3:d6:fb:e6:66:ba:23:59:0d:83:a0:12:52:1d: 5d:94:4d:31:fe:b7:db:1c:02:52:81:1f:a9:65:69: 5b:90:6b:22:b9:9e:70:c1:36:a9:b5:26:fd:c8:17: 52:86:aa:af:7a:9b:b6:e6:df:70:93:8b:0d:3c:9d: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1B:FB:8D:99:27:2C:FD:68:B5:F3:27:84:59:78:B5:B2:89:59:0B X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:e6:9e:47:5a:84:ee:6c:8c:38:2f:f2:e7:3d:19:cf:3d:07: 67:d5:6c:1a:46:6e:e0:9b:e6:ab:80:26:d6:17:c6:df:1d:fa: 50:76:88:95:00:28:21:e4:01:cc:bd:32:38:4b:48:1d:92:ee: d2:91:93:cd:56:51:ba:ca:4a:98:c9:82:24:9d:e3:40:2c:6c: bb:56:39:fe:0a:a2:9a:e1:51:f9:a9:02:62:da:c5:65:18:3b: b4:e5:e7:1a:eb:5d:5e:61:f7:a0:70:a5:5b:07:83:f6:ba:42: 06:47:3f:92:c5:6e:be:b0:04:c0:ef:da:83:b7:9d:ae:4b:8b: d6:83:70:6b:29:9e:1b:23:de:7f:b8:6d:f8:23:af:ac:25:46: f0:ea:92:16:c7:b9:d7:9e:3a:31:49:ba:b8:29:f0:c1:ad:f8: d2:97:11:5c:c0:63:11:9f:aa:b5:00:33:01:57:e6:da:05:09: 86:d8:e5:00:62:77:87:93:64:7b:8a:69:a3:46:00:e1:9c:88: 27:b3:a7:01:c4:49:ac:69:3f:e0:b3:ee:5b:95:4e:10:d3:68: 2d:aa:d7:ee:84:ff:79:0d:c8:96:00:b2:bd:33:f5:74:49:4c: 25:c8:aa:00:d7:02:5e:d7:aa:db:cb:dc:3c:59:13:92:4d:44: 66:6f:5d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKEY1NEY4MDgwMTZBQjRCQjA2Rjc5NkE4OTQ2NjdDNzBC REQ0OEZCRjYwHhcNMjUwNjAzMDYyMDU0WhcNMjUwNjEwMDYyMDU0WjAYMRYwFAYD VQQDEw02ODNlOTQ0Ni1iNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv5qirfxnj84gTrdFvCd0a7Nj127GVpVFCdGTw6LwmN+KCN1WubqNezFmz6U GhhhZLPw96+WDQaXSVlsihbqsQJZEI5sZxMqwEjNR38hrCt0CY6rRlwa8bcdZBbF IWsk32xUeckZjod/hol77+Y5QzCCqiaNpat+0fliILFte94zlcW4/P5RQfdMO/4t w5BBrl1DyCD6H51rKaLvUTo7X+OTcqmCG7ogVH76EQzyvO8pw/aHWxu+bLb231p6 KNQm12QNo9b75ma6I1kNg6ASUh1dlE0x/rfbHAJSgR+pZWlbkGsiuZ5wwTaptSb9 yBdShqqvepu25t9wk4sNPJ0bhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcb+42Z Jyz9aLXzJ4RZeLWyiVkLMB8GA1UdIwQYMBaAFPVPgIAWq0uwb3lqiUZnxwvdSPv2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi80N0NBMzVFNDcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3QnZlV3FKUm1mSEM5MUkt X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1fWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi80N0NBMzVFNDcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3 QnZlV3FKUm1mSEM5MUktX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC5p5HWoTubIw4L/LnPRnPPQdn1WwaRm7gm+argCbWF8bfHfpQdoiV ACgh5AHMvTI4S0gdku7SkZPNVlG6ykqYyYIkneNALGy7Vjn+CqKa4VH5qQJi2sVl GDu05eca611eYfegcKVbB4P2ukIGRz+SxW6+sATA79qDt52uS4vWg3BrKZ4bI95/ uG34I6+sJUbw6pIWx7nXnjoxSbq4KfDBrfjSlxFcwGMRn6q1ADMBV+baBQmG2OUA YneHk2R7immjRgDhnIgns6cBxEmsaT/gs+5blU4Q02gtqtfuhP95DciWALK9M/V0 SUwlyKoA1wJe16rby9w8WROSTURmb10G -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:51 2025 by rpki-client