$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json) Hash identifier: 1oy0VXrzSYbEf5H9fzGn2uXJLNLKSDvEFMW7QCwIUzg= Subject key identifier: EF:2A:D1:CB:E3:BC:A8:3A:E0:DE:89:8F:30:CA:E1:88:2D:0C:6D:B4 Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft Manifest number: 0133 Signing time: Mon 09 Jun 2025 03:33:24 +0000 Manifest this update: Mon 09 Jun 2025 03:33:24 +0000 Manifest next update: Mon 16 Jun 2025 03:33:24 +0000 Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: Vv/yF6I/OvhhPE6l4BUQ2UBCRUjzCI5XtFqEOn0EDuQ=) 2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: sf8Mnz1qsHdpKeF1ILemxPeqebYjdCIUvrzVLMZpW/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB Validity Not Before: Jun 9 03:33:24 2025 GMT Not After : Jun 16 03:33:24 2025 GMT Subject: CN=68465604-d2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:ba:52:0e:b0:cc:4c:56:82:8e:aa:a6:2a: d3:c9:b3:88:ad:cd:a8:a4:e0:f5:da:07:3f:c2:96: a2:29:2b:15:79:76:d4:9b:86:68:b1:ca:b6:9e:08: 8b:0b:b5:f5:f9:cf:06:10:3f:f2:2f:7c:cd:a0:e1: 8a:c8:b5:34:4d:8c:df:b1:1d:78:49:19:de:6d:19: 9e:b8:ff:7e:9e:fe:f7:d4:4a:87:42:f9:8a:72:62: f1:48:17:2a:d3:78:0d:1b:b3:b7:72:d3:bb:62:bb: 3c:6b:ca:89:a0:73:8b:24:75:a0:fb:29:f4:b6:9e: b3:c1:39:a6:de:dd:09:0b:a0:9d:f2:6d:ea:f9:fb: f6:b5:0e:25:1b:1c:2c:a0:18:b3:bb:7d:85:49:4b: c6:e7:2a:c3:2d:d5:a9:fe:fa:53:c6:f3:7e:48:8a: 46:5d:f0:fe:9b:c6:be:00:16:1d:56:78:0d:92:ff: 65:81:04:4e:17:8c:72:61:a3:29:79:a2:0f:95:4f: ec:bc:a4:3c:36:62:48:89:a2:b3:28:71:fd:5a:11: 70:2a:55:a7:1b:23:4a:86:d5:3f:99:46:76:4d:53: 88:ca:48:6c:9a:bc:50:16:62:ef:a0:f2:98:bc:7b: 84:1e:bb:28:51:a4:cc:b1:39:70:01:5f:7a:ee:0d: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2A:D1:CB:E3:BC:A8:3A:E0:DE:89:8F:30:CA:E1:88:2D:0C:6D:B4 X509v3 Authority Key Identifier: keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7d:26:f1:06:48:89:44:e5:62:75:f7:e6:8b:66:c8:95:2f: 6c:c5:06:28:f2:85:75:ec:40:4d:84:6d:14:bf:ca:2a:bd:cb: cf:b3:e2:9c:bd:7e:0b:23:53:76:42:64:b6:1f:57:08:d9:5b: f5:50:c1:dd:28:fd:2a:2b:04:8c:cb:54:74:02:39:d9:b2:3b: 33:83:b0:ad:2f:62:5f:b5:17:74:72:90:69:e4:e3:62:7a:ba: d2:bd:4b:d1:ac:b3:f4:ec:ef:58:18:04:64:bd:1d:a7:e6:60: 12:6b:78:53:fb:0f:d8:e4:a0:7c:f4:91:77:f4:24:9f:11:ef: ca:ca:f7:86:e7:cc:26:1c:16:f0:a1:ca:f3:7c:19:5f:ea:67: 06:60:41:b1:5f:ec:e4:c8:9a:d3:ae:49:77:2d:3d:cd:ca:b4: d0:89:19:fe:95:0b:4f:5a:bb:8d:be:2e:b8:45:1e:55:7b:8c: 4c:5e:7a:a2:55:89:13:74:21:51:11:a0:cd:9a:5f:10:db:18: ba:d3:72:bf:b6:49:77:1f:76:11:98:73:d9:67:af:5f:6e:69: f0:34:5f:38:07:df:81:68:43:a2:8a:23:d8:8b:b4:97:b1:39: 93:3e:22:a3:ec:1a:73:19:f8:11:77:60:52:3a:0a:f8:11:e5: ef:fc:18:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFCOUYxMTAvBgNVBAUTKEY1M0U1NjQwNzY5OEMxRkFBNzVEMjU3NjU1MTNCNTA3 NjUyQzk3QUIwHhcNMjUwNjA5MDMzMzI0WhcNMjUwNjE2MDMzMzI0WjAYMRYwFAYD VQQDEw02ODQ2NTYwNC1kMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUa6Ug6wzExWgo6qpirTybOIrc2opOD12gc/wpaiKSsVeXbUm4Zoscq2ngiL C7X1+c8GED/yL3zNoOGKyLU0TYzfsR14SRnebRmeuP9+nv731EqHQvmKcmLxSBcq 03gNG7O3ctO7Yrs8a8qJoHOLJHWg+yn0tp6zwTmm3t0JC6Cd8m3q+fv2tQ4lGxws oBizu32FSUvG5yrDLdWp/vpTxvN+SIpGXfD+m8a+ABYdVngNkv9lgQROF4xyYaMp eaIPlU/svKQ8NmJIiaKzKHH9WhFwKlWnGyNKhtU/mUZ2TVOIykhsmrxQFmLvoPKY vHuEHrsoUaTMsTlwAV967g0knwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8q0cvj vKg64N6JjzDK4YgtDG20MB8GA1UdIwQYMBaAFPU+VkB2mMH6p10ldlUTtQdlLJer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUI5Ri81NjkyMjkwMjZF MTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdmcW5YU1YyVlJPMUIyVXNs NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUI5Ri81NjkyMjkwMjZFMTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdm cW5YU1YyVlJPMUIyVXNsNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcfSbxBkiJROVidffmi2bIlS9sxQYo8oV17EBNhG0Uv8oqvcvPs+Kc vX4LI1N2QmS2H1cI2Vv1UMHdKP0qKwSMy1R0AjnZsjszg7CtL2JftRd0cpBp5ONi errSvUvRrLP07O9YGARkvR2n5mASa3hT+w/Y5KB89JF39CSfEe/KyveG58wmHBbw ocrzfBlf6mcGYEGxX+zkyJrTrkl3LT3NyrTQiRn+lQtPWruNvi64RR5Ve4xMXnqi VYkTdCFREaDNml8Q2xi603K/tkl3H3YRmHPZZ69fbmnwNF84B9+BaEOiiiPYi7SX sTmTPiKj7BpzGfgRd2BSOgr4EeXv/BiZ -----END CERTIFICATE-----Generated at Tue Jun 10 15:24:30 2025 by rpki-client