$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: 4UPYsRycrJGcEcENwvK1x/O5pRdruNIl5emy+1b8tmk= Subject key identifier: DC:0B:F0:41:B5:45:C6:3E:F1:AC:F4:27:76:63:2B:3B:DA:CF:2D:37 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: F9 Signing time: Tue 03 Jun 2025 04:57:09 +0000 Manifest this update: Tue 03 Jun 2025 04:57:09 +0000 Manifest next update: Tue 10 Jun 2025 04:57:09 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: JXImx8IZiOrafvfJTR8tdm7bjSewaPE1kEnUd7C6HqY=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Jun 3 04:57:09 2025 GMT Not After : Jun 10 04:57:09 2025 GMT Subject: CN=683e80a5-8237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:a9:3a:79:a7:0f:d0:de:38:22:a8:0b:c9: c0:47:bd:79:3b:84:e1:d9:eb:d3:72:a0:6a:2e:73: 2a:b7:26:14:16:65:34:61:21:71:a6:2b:d5:8f:73: 24:7a:eb:4e:10:bb:fe:74:ba:ed:83:50:81:da:a5: 3f:56:47:13:ea:a6:97:e4:50:3d:eb:49:ac:44:93: 24:c4:3b:52:1a:eb:e8:0d:9f:f7:8e:93:a3:3f:07: d3:8d:dc:90:47:4c:ae:07:75:38:80:b0:6b:51:52: 02:60:48:bb:92:25:68:d0:cc:79:e2:2d:f5:ac:43: 7f:99:fe:9f:c8:af:7e:f2:25:23:ad:d0:79:06:57: 86:ae:cc:5b:ba:c9:ae:fb:86:ea:93:2f:61:16:fd: 2c:d3:8a:c4:0a:91:3b:bc:b6:66:24:a4:65:98:8c: 76:6b:16:55:a7:f2:40:c2:de:cb:70:94:5c:e2:c4: 39:f6:45:88:32:47:c7:cb:62:a4:ea:aa:5c:d8:15: a5:92:24:54:92:90:c4:b8:49:40:f7:1a:43:7c:cb: 2c:85:49:46:bd:ce:08:aa:2e:4b:95:94:7e:f0:20: 62:63:ba:2b:38:93:bb:6d:ec:a6:b2:36:dd:c7:81: d4:42:ca:d0:26:15:c0:a2:3c:87:34:78:17:23:64: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:F0:41:B5:45:C6:3E:F1:AC:F4:27:76:63:2B:3B:DA:CF:2D:37 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4b:62:f2:0a:cf:42:dc:a8:e9:5a:be:0e:5d:d0:e5:06:59: 9f:a2:07:00:07:88:2b:75:45:4a:4a:3a:d7:51:e6:5c:e0:6f: cd:c3:62:46:24:2b:e6:16:46:b2:f0:88:92:a5:34:ec:45:bd: d7:5a:83:4c:69:c6:81:91:fe:11:0a:c6:d9:af:6d:05:24:bc: 36:d5:4f:0f:07:a0:a8:23:18:ab:37:62:f6:4e:74:18:04:38: 2f:62:5e:c0:ca:cd:2e:dc:19:a3:05:1e:ec:e2:61:2d:c1:23: d9:38:f6:d8:4a:48:66:ae:1e:a3:a5:95:a3:ce:25:ec:8d:ae: 2e:b5:a7:8a:65:46:9a:49:5c:a6:06:00:15:96:9d:31:61:ee: b1:8b:a1:6f:66:e0:5f:84:56:71:9d:1d:81:69:e0:c7:d0:7a: ee:91:19:14:6a:c6:0f:1a:12:22:cb:8c:59:b3:08:56:5f:62: 47:1a:60:e4:c6:b1:2a:18:e6:3a:ca:44:c7:3b:b5:2f:f8:7b: 55:6e:f9:50:b2:7c:e1:e9:e2:8c:4f:39:11:e4:7e:8c:37:69: 74:0d:73:f8:19:18:fa:92:b5:fa:eb:7d:3a:15:18:28:8b:c8: e4:d6:65:5b:58:e2:72:55:37:56:80:c3:d6:b7:73:21:d2:07: 82:39:1f:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUwNjAzMDQ1NzA5WhcNMjUwNjEwMDQ1NzA5WjAYMRYwFAYD VQQDEw02ODNlODBhNS04MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPmpOnmnD9DeOCKoC8nAR715O4Th2evTcqBqLnMqtyYUFmU0YSFxpivVj3Mk eutOELv+dLrtg1CB2qU/VkcT6qaX5FA960msRJMkxDtSGuvoDZ/3jpOjPwfTjdyQ R0yuB3U4gLBrUVICYEi7kiVo0Mx54i31rEN/mf6fyK9+8iUjrdB5BleGrsxbusmu +4bqky9hFv0s04rECpE7vLZmJKRlmIx2axZVp/JAwt7LcJRc4sQ59kWIMkfHy2Kk 6qpc2BWlkiRUkpDEuElA9xpDfMsshUlGvc4Iqi5LlZR+8CBiY7orOJO7beymsjbd x4HUQsrQJhXAojyHNHgXI2S8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwL8EG1 RcY+8az0J3ZjKzvazy03MB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9S2LyCs9C3KjpWr4OXdDlBlmfogcAB4grdUVKSjrXUeZc4G/Nw2JG JCvmFkay8IiSpTTsRb3XWoNMacaBkf4RCsbZr20FJLw21U8PB6CoIxirN2L2TnQY BDgvYl7Ays0u3BmjBR7s4mEtwSPZOPbYSkhmrh6jpZWjziXsja4utaeKZUaaSVym BgAVlp0xYe6xi6FvZuBfhFZxnR2BaeDH0HrukRkUasYPGhIiy4xZswhWX2JHGmDk xrEqGOY6ykTHO7Uv+HtVbvlQsnzh6eKMTzkR5H6MN2l0DXP4GRj6krX66306FRgo i8jk1mVbWOJyVTdWgMPWt3Mh0geCOR8z -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:12 2025 by rpki-client