$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft File: 9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json) Hash identifier: YELZsHKnpDJSgrZmWvv+Q0obakKY3UgCfKxnClauAIg= Subject key identifier: 76:4A:2F:7D:7A:9D:35:BB:E6:7C:DA:82:2C:24:C0:A3:07:6F:D0:81 Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 Certificate issuer: /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Certificate serial: 1824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft Manifest number: 1816 Signing time: Fri 30 May 2025 16:42:54 +0000 Manifest this update: Fri 30 May 2025 16:42:53 +0000 Manifest next update: Fri 06 Jun 2025 16:42:53 +0000 Files and hashes: 1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: tsyJrs1Q5+eg8Jb4+iBdzaOjNUhqWysEwmGNstGcodA=) 2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: 12/YQGKh2uNHDbW3TNnX9cKDq/H76Hjbaf684uCZbYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6180 (0x1824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Validity Not Before: May 30 16:42:53 2025 GMT Not After : Jun 6 16:42:53 2025 GMT Subject: CN=6839e00e-bbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:89:c3:83:ad:7c:75:d0:77:51:51:84:e7: 05:70:8a:ca:4d:be:05:60:1e:e0:74:31:88:20:c7: a6:bd:0d:b5:d9:df:78:f1:cf:b1:96:75:54:a7:2d: 3f:1b:52:54:c4:2a:e6:32:ec:74:82:0f:29:c1:6f: e8:09:a7:3f:5d:49:8d:6f:ef:56:c2:03:23:07:92: ee:d6:57:77:e6:23:bd:87:ca:5e:3a:00:b3:54:1b: 97:b5:ad:6a:81:88:6b:b4:48:9b:d2:59:89:94:75: 30:2a:4a:94:e4:13:0e:85:9d:76:5f:fb:60:76:f1: 21:39:fd:74:47:87:9c:61:39:9b:1b:44:90:a9:9b: 46:73:c6:62:f6:ab:bd:bc:d4:df:07:8d:9a:77:17: 7d:d5:86:fd:ac:87:f6:b5:03:80:9f:b1:9a:a9:f6: 24:a2:a6:24:ef:54:09:45:1c:9e:fa:77:88:91:bc: 4f:b3:78:48:c1:d3:51:6d:90:9a:32:90:a9:4c:f0: 7d:a1:73:12:88:7d:ff:42:28:28:55:22:99:17:c2: be:b6:7d:76:fe:f1:7f:2a:60:d7:25:2f:7b:da:bc: e2:86:c5:16:d8:b0:0e:82:a5:21:7e:18:8d:45:66: c3:93:93:bb:9d:86:9b:b4:a7:a3:47:4e:c8:f4:17: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4A:2F:7D:7A:9D:35:BB:E6:7C:DA:82:2C:24:C0:A3:07:6F:D0:81 X509v3 Authority Key Identifier: keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:48:3a:54:13:c9:c6:cf:8b:97:ad:21:09:6e:59:a4:aa:41: 83:71:72:e1:36:f8:2d:f6:31:61:a0:79:9b:ce:85:a6:91:9b: 25:fd:ee:86:0a:fc:8f:8f:51:a5:f0:d6:d3:c3:03:01:d9:82: e0:7d:9f:b7:6d:54:3f:a2:30:e6:62:98:b5:36:06:b6:19:4b: da:ed:e9:6f:76:1b:ff:e6:70:8b:61:c6:c7:c7:4c:39:87:ff: cf:b5:b0:e5:32:b0:f8:f1:09:b8:e7:e4:59:a1:06:3d:66:c5: dc:cb:71:86:60:dd:03:15:cc:68:b4:7f:d7:04:34:ac:6d:d9: e6:ff:70:e7:94:04:f8:f9:ce:f1:f3:06:02:79:a8:c7:f6:3b: 4b:7c:23:a1:16:73:ad:0c:fb:a5:11:b5:ae:4d:dc:31:b5:a8: 29:a5:4e:6e:ba:3c:c0:de:cf:b3:fe:3d:31:f3:71:5c:f5:f2: 3e:52:83:00:38:70:a8:e1:b8:8a:38:53:de:fc:0f:6b:ff:07: e1:a2:82:e5:48:2e:7d:2e:fe:35:03:6a:cb:d1:6b:20:35:20: 9f:68:13:ef:b5:32:8e:d5:7e:9b:66:cc:3a:bb:6c:18:7d:7d: 3a:24:96:a4:59:ee:87:46:52:2d:4b:cf:20:bd:fc:bf:bb:38: de:27:90:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwMjAxMTAvBgNVBAUTKEY2Njk5MjY0NDE3QzIyOEI1MUZFMTVCM0IxRUNCNzg2 N0YyQTI3NDMwHhcNMjUwNTMwMTY0MjUzWhcNMjUwNjA2MTY0MjUzWjAYMRYwFAYD VQQDEw02ODM5ZTAwZS1iYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0S+Jw4OtfHXQd1FRhOcFcIrKTb4FYB7gdDGIIMemvQ212d948c+xlnVUpy0/ G1JUxCrmMux0gg8pwW/oCac/XUmNb+9WwgMjB5Lu1ld35iO9h8peOgCzVBuXta1q gYhrtEib0lmJlHUwKkqU5BMOhZ12X/tgdvEhOf10R4ecYTmbG0SQqZtGc8Zi9qu9 vNTfB42adxd91Yb9rIf2tQOAn7GaqfYkoqYk71QJRRye+neIkbxPs3hIwdNRbZCa MpCpTPB9oXMSiH3/QigoVSKZF8K+tn12/vF/KmDXJS972rzihsUW2LAOgqUhfhiN RWbDk5O7nYabtKejR07I9Bcs3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZKL316 nTW75nzagiwkwKMHb9CBMB8GA1UdIwQYMBaAFPZpkmRBfCKLUf4Vs7Hst4Z/KidD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDAyMC9BRDFCOERFNEI0 MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElvdFJfaFd6c2V5M2huOHFK ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbVNaRUY4SW90Ul9oV3pzZXkzaG44cUowTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDAyMC9BRDFCOERFNEI0MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElv dFJfaFd6c2V5M2huOHFKME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSDpUE8nGz4uXrSEJblmkqkGDcXLhNvgt9jFhoHmbzoWmkZsl/e6G CvyPj1Gl8NbTwwMB2YLgfZ+3bVQ/ojDmYpi1Nga2GUva7elvdhv/5nCLYcbHx0w5 h//PtbDlMrD48Qm45+RZoQY9ZsXcy3GGYN0DFcxotH/XBDSsbdnm/3DnlAT4+c7x 8wYCeajH9jtLfCOhFnOtDPulEbWuTdwxtagppU5uujzA3s+z/j0x83Fc9fI+UoMA OHCo4biKOFPe/A9r/wfhooLlSC59Lv41A2rL0WsgNSCfaBPvtTKO1X6bZsw6u2wY fX06JJakWe6HRlItS88gvfy/uzjeJ5C0 -----END CERTIFICATE-----Generated at Sat May 31 17:11:23 2025 by rpki-client