$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: YVkX2fBsCndwkmme+/FzqDgok4PoatTVpFQxq5PSfjY= Subject key identifier: 85:C5:5F:AB:7F:1A:E4:08:C8:93:D7:4A:75:12:8B:CF:20:A8:11:D7 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: A2 Signing time: Sat 31 May 2025 05:48:08 +0000 Manifest this update: Sat 31 May 2025 05:48:08 +0000 Manifest next update: Sat 07 Jun 2025 05:48:08 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: 7dZmWltdH14XgDj48ErM+kjRiInMsiHQQDrv2AGkpf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: May 31 05:48:08 2025 GMT Not After : Jun 7 05:48:08 2025 GMT Subject: CN=683a9818-f29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:d6:40:c4:ff:07:ce:37:d9:ed:33:89:23: 1e:bb:d6:ff:06:99:6e:2f:a1:20:ad:0d:f3:16:9b: 5a:53:82:d6:91:c9:41:d6:ae:9e:64:e2:ac:89:b7: 64:5b:33:d1:29:a1:a0:1d:ec:db:bd:20:ac:fa:32: f7:64:c3:12:37:ad:62:30:5a:0e:fe:8c:7a:21:df: 0b:2a:19:1c:e4:43:20:35:f4:a2:bc:92:1e:44:89: 43:09:d5:1c:dc:df:8a:3b:74:61:30:9a:b2:5e:74: 25:5d:8b:2f:99:64:32:29:af:1a:5a:9a:67:23:01: 5e:4c:83:14:94:40:ee:d3:88:b8:65:c7:81:8a:ac: 24:b3:63:22:ab:72:7f:f4:9b:6d:98:5c:95:db:d7: 21:de:62:d9:4f:6c:d4:54:83:f6:a7:0c:87:6e:28: 05:02:58:05:56:11:2a:25:60:14:21:98:42:be:e6: 11:08:b4:4b:04:97:ec:91:57:e8:07:5b:c3:97:90: db:84:c0:c6:05:ae:5c:9c:25:d0:b0:a9:02:3f:b4: 0e:c3:a8:9e:92:af:bd:ee:ee:cd:82:29:1a:46:a6: 05:85:25:fe:2c:bf:ca:b9:9b:60:68:7f:8b:89:f8: 63:96:13:80:22:b6:e8:de:8d:4c:f3:c9:3f:42:66: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C5:5F:AB:7F:1A:E4:08:C8:93:D7:4A:75:12:8B:CF:20:A8:11:D7 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1d:c9:0a:fd:73:34:97:61:43:6a:c0:e0:56:59:56:4b:ab: 34:ad:c2:f3:1b:8c:99:ec:4d:aa:6a:a1:33:8b:cf:e4:a5:85: b2:59:53:7b:e6:ac:10:7e:f2:a4:17:74:c9:1d:4f:7b:0b:b9: 48:e7:79:4e:15:7c:64:69:03:77:d2:0c:9d:32:fb:73:62:8d: 94:b8:6f:f6:84:6a:4b:6c:f4:ee:88:9a:81:dc:ae:89:1f:77: 3d:68:47:a2:a6:58:e0:e4:31:a2:e4:b4:fa:0d:b0:f7:ba:3c: 32:33:5c:89:f8:c7:cb:f5:91:d8:51:b3:ee:6f:06:57:c7:42: e6:15:02:aa:93:88:c2:a3:97:89:51:0a:70:2c:dd:38:f5:d2: 8a:a8:5a:ce:fd:ff:62:a3:14:03:d8:a4:bf:ed:72:44:ed:2a: 43:cd:ee:9e:7c:55:ae:92:fd:36:64:a7:33:25:2a:7e:e9:4c: a8:67:72:38:6b:a0:87:94:50:24:63:10:13:a1:18:d2:86:84: df:32:3b:45:28:09:2a:98:d8:55:c0:85:92:f8:19:07:04:57: bb:7d:67:c4:c9:74:12:0e:54:8e:28:3b:78:ab:e0:b6:d8:d0: d8:10:50:44:ba:08:2f:4f:16:88:30:82:92:54:4d:e6:21:0f: 33:d9:60:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUwNTMxMDU0ODA4WhcNMjUwNjA3MDU0ODA4WjAYMRYwFAYD VQQDEw02ODNhOTgxOC1mMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tvWQMT/B8432e0ziSMeu9b/BpluL6EgrQ3zFptaU4LWkclB1q6eZOKsibdk WzPRKaGgHezbvSCs+jL3ZMMSN61iMFoO/ox6Id8LKhkc5EMgNfSivJIeRIlDCdUc 3N+KO3RhMJqyXnQlXYsvmWQyKa8aWppnIwFeTIMUlEDu04i4ZceBiqwks2Miq3J/ 9JttmFyV29ch3mLZT2zUVIP2pwyHbigFAlgFVhEqJWAUIZhCvuYRCLRLBJfskVfo B1vDl5DbhMDGBa5cnCXQsKkCP7QOw6iekq+97u7NgikaRqYFhSX+LL/KuZtgaH+L ifhjlhOAIrbo3o1M88k/QmZjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXFX6t/ GuQIyJPXSnUSi88gqBHXMB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMHckK/XM0l2FDasDgVllWS6s0rcLzG4yZ7E2qaqEzi8/kpYWyWVN7 5qwQfvKkF3TJHU97C7lI53lOFXxkaQN30gydMvtzYo2UuG/2hGpLbPTuiJqB3K6J H3c9aEeipljg5DGi5LT6DbD3ujwyM1yJ+MfL9ZHYUbPubwZXx0LmFQKqk4jCo5eJ UQpwLN049dKKqFrO/f9ioxQD2KS/7XJE7SpDze6efFWukv02ZKczJSp+6UyoZ3I4 a6CHlFAkYxAToRjShoTfMjtFKAkqmNhVwIWS+BkHBFe7fWfEyXQSDlSOKDt4q+C2 2NDYEFBEuggvTxaIMIKSVE3mIQ8z2WCy -----END CERTIFICATE-----Generated at Sat May 31 17:22:05 2025 by rpki-client