$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: dsspL1IhcoWFXsO0TRuMuoAkxjkj/1WgE6l6tgZZKvM= Subject key identifier: 61:80:6E:5F:6F:0D:E4:6B:21:FB:80:3F:7A:36:CB:92:09:77:6D:F5 Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0DD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0DCC Signing time: Fri 30 May 2025 18:04:07 +0000 Manifest this update: Fri 30 May 2025 18:04:06 +0000 Manifest next update: Fri 06 Jun 2025 18:04:06 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: Td8nDs27uqpIR/210YO5iqiOquPbOYsMyQ9Url3BzhI=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3539 (0xdd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: May 30 18:04:06 2025 GMT Not After : Jun 6 18:04:06 2025 GMT Subject: CN=6839f317-bc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:08:69:9f:c7:84:ee:1d:3a:7a:88:12:79: 57:6a:5c:d3:6b:06:ee:05:b9:81:43:85:70:4b:2f: 19:32:5c:09:29:da:dd:ab:3a:e9:df:ee:52:cd:34: a9:74:cc:4e:ff:ea:77:d0:39:19:53:49:a9:fd:83: 58:80:e5:a2:44:13:2a:1f:92:1d:27:f7:33:13:f5: de:78:a2:75:e9:88:5c:23:cd:22:56:7b:83:23:50: f9:84:07:50:47:50:d5:55:12:d8:ea:44:89:e9:c5: 9a:36:1e:e5:d3:f8:d0:a6:b6:1f:5e:6a:c3:0c:60: 61:b7:f7:7f:6b:39:3a:56:ed:cf:9f:b9:73:06:1e: 9a:f7:b2:a5:4d:54:0c:8d:c3:a4:55:c9:55:b7:a2: 85:a8:73:1c:9b:62:76:92:97:a0:c0:9c:7f:27:b0: cf:66:3f:e2:04:07:f3:2d:29:02:1b:0f:40:fe:7c: 2f:8c:28:df:19:01:7e:d3:3f:bf:d7:e8:2c:53:67: 47:41:e2:04:45:c9:f8:41:b0:7c:0e:6a:f1:45:67: 12:83:0c:24:66:65:ab:88:e6:cc:4e:53:a8:85:04: 35:79:2d:12:19:74:3e:72:6b:96:2c:d2:bb:9d:be: ed:f1:d6:db:43:bc:36:84:1f:08:48:77:ea:0d:16: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:80:6E:5F:6F:0D:E4:6B:21:FB:80:3F:7A:36:CB:92:09:77:6D:F5 X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:14:e0:a6:27:f9:0c:39:91:7d:90:c9:97:37:74:75:92:45: 37:f3:5c:c8:ca:fe:91:35:95:ce:96:f6:fd:81:89:41:c7:64: 93:9b:d8:68:99:3d:b1:e6:62:68:d8:66:85:d3:66:48:8f:42: 45:00:9d:61:8b:85:e7:f9:eb:d1:5c:31:8e:9d:ae:21:71:c9: a4:9f:1a:bf:0a:e5:5d:ba:af:9d:87:8f:fc:5a:07:b0:6d:9b: a3:64:51:13:1f:f6:03:89:e2:81:84:dd:3e:77:24:08:03:0a: e0:a6:58:16:96:8c:56:69:53:c9:7f:9a:aa:84:fd:dd:c5:8b: 04:b1:af:f0:5a:da:61:6c:d8:9c:f2:6a:14:26:ed:c0:75:a6: eb:ac:69:ee:3a:00:e8:e7:ef:f9:22:98:59:0e:2c:2b:54:99: c8:1d:6f:2f:48:81:50:d1:f1:89:69:eb:e8:77:15:23:c9:e4: 82:67:d1:21:a6:36:d5:73:ef:c7:a6:2c:ae:11:2e:33:d9:33: 5e:5e:ab:6d:6e:8a:bd:7f:99:84:c4:48:7d:8d:e5:3f:6e:c4: a9:c4:f7:c7:ce:b8:58:d5:34:ad:2b:ab:24:74:43:18:a5:cc: bb:81:8d:01:23:47:b7:9f:34:2a:f9:a3:06:5e:dd:09:33:16: d6:54:38:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUwNTMwMTgwNDA2WhcNMjUwNjA2MTgwNDA2WjAYMRYwFAYD VQQDEw02ODM5ZjMxNy1iYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQoIaZ/HhO4dOnqIEnlXalzTawbuBbmBQ4VwSy8ZMlwJKdrdqzrp3+5SzTSp dMxO/+p30DkZU0mp/YNYgOWiRBMqH5IdJ/czE/XeeKJ16YhcI80iVnuDI1D5hAdQ R1DVVRLY6kSJ6cWaNh7l0/jQprYfXmrDDGBht/d/azk6Vu3Pn7lzBh6a97KlTVQM jcOkVclVt6KFqHMcm2J2kpegwJx/J7DPZj/iBAfzLSkCGw9A/nwvjCjfGQF+0z+/ 1+gsU2dHQeIERcn4QbB8DmrxRWcSgwwkZmWriObMTlOohQQ1eS0SGXQ+cmuWLNK7 nb7t8dbbQ7w2hB8ISHfqDRYyeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGAbl9v DeRrIfuAP3o2y5IJd231MB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9FOCmJ/kMOZF9kMmXN3R1kkU381zIyv6RNZXOlvb9gYlBx2STm9ho mT2x5mJo2GaF02ZIj0JFAJ1hi4Xn+evRXDGOna4hccmknxq/CuVduq+dh4/8Wgew bZujZFETH/YDieKBhN0+dyQIAwrgplgWloxWaVPJf5qqhP3dxYsEsa/wWtphbNic 8moUJu3AdabrrGnuOgDo5+/5IphZDiwrVJnIHW8vSIFQ0fGJaevodxUjyeSCZ9Eh pjbVc+/HpiyuES4z2TNeXqttboq9f5mExEh9jeU/bsSpxPfHzrhY1TStK6skdEMY pcy7gY0BI0e3nzQq+aMGXt0JMxbWVDi+ -----END CERTIFICATE-----Generated at Sat May 31 16:49:07 2025 by rpki-client