$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: WgHmxdlWdwMGsvY8pG0eQR5xpJaBt9034WXeFFcVhOo= Subject key identifier: 39:EC:E5:7F:00:D3:CC:44:0B:A8:AC:1C:B4:1F:90:37:1C:EA:7B:B6 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0C30 Signing time: Fri 30 May 2025 18:45:35 +0000 Manifest this update: Fri 30 May 2025 18:45:34 +0000 Manifest next update: Fri 06 Jun 2025 18:45:34 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: S2e/NBh8yfbogSh/L4l8VworbTiBAQdGqgERWz6xMu4=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: May 30 18:45:34 2025 GMT Not After : Jun 6 18:45:34 2025 GMT Subject: CN=6839fccf-ff4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:2d:78:7d:21:2b:f5:7b:60:66:bf:42:05: 6a:9b:45:08:95:da:88:33:4d:01:a7:8c:35:73:9a: 82:9e:31:48:47:34:26:bb:a7:cd:10:da:67:8d:8b: fe:29:bc:78:00:44:d6:4a:e1:ec:25:aa:a7:c9:66: 70:90:6e:12:0a:0b:be:f3:be:b2:16:3c:9f:4a:32: d8:e5:38:a6:1d:f3:a5:70:c9:f4:7f:60:9a:a6:66: fe:f9:b3:54:1b:52:b5:a0:65:bf:e4:84:c7:98:48: f5:26:18:9e:4d:e5:96:83:c7:bb:c5:13:ee:3d:a0: 4e:51:b4:9b:85:94:c7:1c:97:45:3b:62:4a:43:40: c9:10:c4:09:bf:7f:cc:ad:75:39:9e:15:83:b8:a2: 5f:14:a7:6c:e9:d1:b1:e0:4c:e2:f2:9c:a6:ce:c5: f8:09:ce:59:bd:d5:8b:58:88:41:e4:04:b3:6b:f5: dd:77:1e:0e:53:f6:6b:eb:2b:e7:6d:e9:ed:79:d1: fe:d3:10:f2:d4:54:fe:4b:21:f1:75:ea:95:46:99: 45:4e:b4:2e:f5:05:70:2c:94:05:19:f8:23:5f:15: 45:75:3b:d4:18:25:75:d9:8c:c1:a0:a6:24:cf:cd: ca:0c:78:d0:98:93:ee:b4:ab:d8:a0:0f:2c:44:29: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:E5:7F:00:D3:CC:44:0B:A8:AC:1C:B4:1F:90:37:1C:EA:7B:B6 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:23:f9:a1:27:9b:1d:97:72:48:21:63:bf:99:bf:e3:a3:9b: 94:f5:61:82:bf:ae:6d:58:e7:26:93:c7:3e:64:e7:80:b5:12: 55:1f:2f:3b:8f:99:4c:5a:24:51:28:63:00:0e:36:eb:45:a1: 26:95:b1:e1:ca:19:96:50:bb:57:26:ae:94:0b:3d:aa:0b:0a: e5:81:1b:92:33:54:ef:a7:42:4e:84:3c:b0:b4:71:e6:2c:60: ce:e5:4f:b1:d4:85:1d:b2:39:57:0e:fb:92:25:25:54:e5:50: 9a:fb:80:c3:61:88:59:39:70:58:af:1e:eb:f2:c3:e3:12:02: 19:3d:57:b1:44:e6:bb:13:68:b7:bd:ed:a3:25:e3:8d:0c:d1: d0:d8:18:31:ab:2f:49:eb:f5:72:9c:f4:6d:7a:eb:89:23:0b: bd:ad:fc:71:47:ee:f9:57:2a:d9:25:81:13:f3:9d:1c:cb:66: f9:02:32:89:05:bb:49:5a:17:57:0d:4c:ed:77:42:6e:f6:54: 0e:68:dc:77:2f:60:03:66:83:b9:b7:f5:c4:62:04:20:77:4d: af:f7:27:0d:ab:a3:91:eb:4b:1f:07:8a:ee:f1:c4:4d:30:7c: b4:7f:0c:d7:1b:46:ac:77:a3:55:c4:0a:5d:56:3a:e4:9e:d0: fc:4a:63:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjUwNTMwMTg0NTM0WhcNMjUwNjA2MTg0NTM0WjAYMRYwFAYD VQQDEw02ODM5ZmNjZi1mZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWoteH0hK/V7YGa/QgVqm0UIldqIM00Bp4w1c5qCnjFIRzQmu6fNENpnjYv+ Kbx4AETWSuHsJaqnyWZwkG4SCgu+876yFjyfSjLY5TimHfOlcMn0f2Capmb++bNU G1K1oGW/5ITHmEj1JhieTeWWg8e7xRPuPaBOUbSbhZTHHJdFO2JKQ0DJEMQJv3/M rXU5nhWDuKJfFKds6dGx4Ezi8pymzsX4Cc5ZvdWLWIhB5ASza/Xddx4OU/Zr6yvn bentedH+0xDy1FT+SyHxdeqVRplFTrQu9QVwLJQFGfgjXxVFdTvUGCV12YzBoKYk z83KDHjQmJPutKvYoA8sRCnH7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDns5X8A 08xEC6isHLQfkDcc6nu2MB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8I/mhJ5sdl3JIIWO/mb/jo5uU9WGCv65tWOcmk8c+ZOeAtRJVHy87 j5lMWiRRKGMADjbrRaEmlbHhyhmWULtXJq6UCz2qCwrlgRuSM1Tvp0JOhDywtHHm LGDO5U+x1IUdsjlXDvuSJSVU5VCa+4DDYYhZOXBYrx7r8sPjEgIZPVexROa7E2i3 ve2jJeONDNHQ2Bgxqy9J6/VynPRteuuJIwu9rfxxR+75VyrZJYET850cy2b5AjKJ BbtJWhdXDUztd0Ju9lQOaNx3L2ADZoO5t/XEYgQgd02v9ycNq6OR60sfB4ru8cRN MHy0fwzXG0asd6NVxApdVjrkntD8SmMT -----END CERTIFICATE-----Generated at Sat May 31 17:47:28 2025 by rpki-client