$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: yNm7JxjdlJJBKAtsJ2biEtb+W+fKlJhNSPySoSEyzFo= Subject key identifier: 88:8C:3F:36:76:A8:BF:37:D7:6A:8A:36:EE:85:0F:2E:89:39:C9:41 Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 0159 Signing time: Mon 02 Jun 2025 20:09:27 +0000 Manifest this update: Mon 02 Jun 2025 20:09:26 +0000 Manifest next update: Mon 09 Jun 2025 20:09:26 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: KgK+foJHQd6YfaT0e3NTqRFelpaSXOi2VsgmF7rvCjg=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: iTrEAAlkJw9OclXVQcOsLhF2OGcA/o+GNahTLZ1PRQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Jun 2 20:09:26 2025 GMT Not After : Jun 9 20:09:26 2025 GMT Subject: CN=683e04f7-5320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:24:b2:2d:56:a2:32:58:02:16:60:5f:5a: 80:b0:80:ee:0a:9b:7f:85:7a:82:bd:58:ba:b8:b0: 90:d1:e0:6b:6d:3b:ed:d0:2b:f4:f5:cd:e2:ea:99: d8:46:11:3e:59:ec:b2:b3:b5:36:9e:6b:42:92:70: 78:20:b3:42:76:1c:3e:65:0f:6e:b2:8a:c4:73:79: 35:9c:f9:51:a0:1a:58:19:3c:e6:6b:aa:c9:44:fd: 07:17:cf:18:1b:5c:44:b8:16:50:69:be:3b:8a:24: 1d:12:e8:af:08:c5:3c:7a:21:33:ec:1f:1b:af:26: 54:14:7c:c9:90:53:a6:fa:dc:4d:6d:68:b1:a0:ae: f8:11:21:5b:fb:69:0a:16:3a:23:f4:5d:0c:c7:a0: a2:ed:fd:a2:34:f1:b0:66:5f:cb:03:bf:85:a4:4b: cc:3c:00:1c:38:dc:ad:ab:34:4b:80:ff:6b:2f:4b: 77:92:f5:ce:10:27:46:7b:4d:10:07:bd:36:0d:c2: 2f:1b:95:bf:90:c5:b5:a1:eb:94:f2:60:68:04:8a: 37:50:cf:67:d7:ab:d5:57:4c:23:46:2f:8d:5e:5d: 20:d2:e9:9c:3f:4e:0d:1f:f3:d1:3c:9c:e0:9e:e9: af:6d:8e:90:f4:36:0d:42:9d:90:7a:ea:84:0b:e5: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8C:3F:36:76:A8:BF:37:D7:6A:8A:36:EE:85:0F:2E:89:39:C9:41 X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:01:fe:19:0a:97:d1:65:50:9a:30:4e:b9:20:4b:95:e5:6c: 69:7c:d1:9a:b3:1b:6e:fa:59:ae:fd:b9:4a:74:f2:06:69:0d: 0c:4a:07:b3:c6:f4:fe:72:ac:3d:c3:70:9d:be:1e:e3:75:9a: 27:7e:56:3e:1e:43:a0:f5:ff:be:03:0f:da:45:39:16:29:f9: 93:6f:9e:ed:d5:bc:f3:a5:05:bc:7e:60:b4:5a:22:49:25:9c: 41:53:5f:bd:fa:aa:dc:46:25:ba:47:94:26:33:a6:88:5f:81: 20:56:c5:b4:7f:ed:7f:f5:c0:aa:4e:9b:63:11:8f:75:23:e7: a7:25:53:b5:28:56:05:47:8b:71:94:fb:a0:48:eb:24:64:7d: 9a:98:a4:bf:4b:72:97:54:7f:1b:5e:0d:77:3f:ea:7e:f6:96: 09:c6:e3:4f:2d:09:9e:d0:4a:4d:dd:11:87:59:ab:25:b0:55: 9e:a9:45:45:2a:48:cc:f0:6b:ed:32:73:af:54:c8:51:cd:d2: 85:8b:74:73:fa:1e:62:fc:7c:10:be:09:a1:c5:ee:79:66:c0: ef:cb:85:ab:1f:ea:cf:42:5f:e9:e2:84:3d:c4:41:1c:6d:ad: 92:0e:51:f6:2a:ab:22:68:49:36:db:2a:11:82:0f:b5:bf:b3: 59:18:88:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjUwNjAyMjAwOTI2WhcNMjUwNjA5MjAwOTI2WjAYMRYwFAYD VQQDEw02ODNlMDRmNy01MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Woksi1WojJYAhZgX1qAsIDuCpt/hXqCvVi6uLCQ0eBrbTvt0Cv09c3i6pnY RhE+Weyys7U2nmtCknB4ILNCdhw+ZQ9usorEc3k1nPlRoBpYGTzma6rJRP0HF88Y G1xEuBZQab47iiQdEuivCMU8eiEz7B8bryZUFHzJkFOm+txNbWixoK74ESFb+2kK Fjoj9F0Mx6Ci7f2iNPGwZl/LA7+FpEvMPAAcONytqzRLgP9rL0t3kvXOECdGe00Q B702DcIvG5W/kMW1oeuU8mBoBIo3UM9n16vVV0wjRi+NXl0g0umcP04NH/PRPJzg numvbY6Q9DYNQp2QeuqEC+VvcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiMPzZ2 qL8312qKNu6FDy6JOclBMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrAf4ZCpfRZVCaME65IEuV5WxpfNGasxtu+lmu/blKdPIGaQ0MSgez xvT+cqw9w3Cdvh7jdZonflY+HkOg9f++Aw/aRTkWKfmTb57t1bzzpQW8fmC0WiJJ JZxBU1+9+qrcRiW6R5QmM6aIX4EgVsW0f+1/9cCqTptjEY91I+enJVO1KFYFR4tx lPugSOskZH2amKS/S3KXVH8bXg13P+p+9pYJxuNPLQme0EpN3RGHWaslsFWeqUVF KkjM8GvtMnOvVMhRzdKFi3Rz+h5i/HwQvgmhxe55ZsDvy4WrH+rPQl/p4oQ9xEEc ba2SDlH2KqsiaEk22yoRgg+1v7NZGIi2 -----END CERTIFICATE-----Generated at Wed Jun 4 01:19:40 2025 by rpki-client