$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: MpMNGPNsl6piff29gkOg7m7u7S5Gk3vGAc8JI9nOPGE= Subject key identifier: 14:4C:3A:3C:BE:A8:FE:6F:22:CB:52:C4:75:81:4C:06:19:58:07:CB Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 062F Signing time: Sat 14 Jun 2025 22:27:05 +0000 Manifest this update: Sat 14 Jun 2025 22:27:04 +0000 Manifest next update: Sat 21 Jun 2025 22:27:04 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: bPPJrCpwbXT24Fjn+aozuHxOJkaM5mR/WAucQvUyadM=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Jun 14 22:27:04 2025 GMT Not After : Jun 21 22:27:04 2025 GMT Subject: CN=684df738-6137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:0a:9d:e5:9d:d7:0c:48:18:66:1f:a6:b7: dc:43:29:33:cd:0c:d1:ab:2d:d3:27:15:77:41:8e: a2:07:70:70:6f:33:e2:2b:9f:05:c4:9d:9f:02:58: 77:b5:e7:97:18:f9:6f:23:bd:35:e9:8c:d6:73:b4: 11:4b:44:50:f1:58:08:3f:45:59:ad:81:8a:18:86: 92:32:5c:53:db:a1:ff:07:45:54:f7:93:11:c7:60: 70:24:52:eb:1b:26:9c:c7:9b:2d:f6:de:ba:c4:58: e1:e8:46:75:00:fd:de:1f:3d:ca:bc:28:88:43:af: 25:cb:ef:eb:e5:42:83:29:9d:e0:76:7f:15:bf:ca: b2:13:74:db:1b:96:55:df:73:7a:a0:b4:90:e9:5b: 82:99:3e:ed:fc:9d:27:15:1b:22:50:c2:32:39:72: 46:e0:b0:1b:b3:5d:19:6f:73:75:8f:63:7a:82:62: b3:9d:aa:b8:87:b3:46:dc:7c:da:93:3b:cb:10:4f: 20:15:4c:f9:af:95:bc:de:d1:47:5b:82:7c:78:5c: 91:45:63:09:30:5a:06:0e:13:89:ea:16:10:ec:7a: 25:a3:5d:f8:95:89:27:42:dd:5c:83:0c:13:0b:52: 02:0d:8c:64:cf:87:de:8b:f1:de:3d:5c:c8:b1:8b: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4C:3A:3C:BE:A8:FE:6F:22:CB:52:C4:75:81:4C:06:19:58:07:CB X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a2:e9:98:d8:77:e5:a0:99:69:0d:25:cc:9c:da:c7:f1:e8: 8e:2a:1d:05:14:bf:e7:fc:25:9a:c4:ac:2f:d7:84:8b:a1:a0: 3f:aa:f5:6a:4d:62:00:0c:a6:82:62:7a:94:c4:bb:de:be:e9: f9:f2:61:f4:66:d2:bf:28:97:1e:92:94:de:cd:2f:58:b8:c7: b6:1d:61:2c:74:a4:c4:17:67:3d:63:d6:98:22:1d:c7:ef:cb: 24:2b:12:f2:71:5e:e5:be:14:d7:b8:f0:78:c4:53:15:33:8b: 4c:ea:76:48:3f:3c:3b:aa:01:7c:89:f3:f6:34:4b:e2:e6:2b: 0b:f8:85:e0:e5:30:53:a8:25:12:5e:2e:20:bd:51:a1:14:66: c5:ec:45:28:d5:f6:ff:91:49:99:c2:21:9c:44:1e:8a:d4:74: 81:c0:83:83:12:2a:60:7e:ea:26:90:1f:08:91:f5:74:fa:d5: 22:0b:e8:a2:ef:89:2b:c3:32:60:0b:69:9c:ac:66:85:d9:57: 57:49:da:1a:23:15:76:db:be:a9:45:f8:12:52:c8:e1:bb:c1: 3b:06:cc:20:9d:6a:71:70:37:25:e3:59:b0:cb:fc:81:66:0c: 06:53:f2:d2:4f:cc:33:93:45:03:ec:e5:a8:53:ab:0c:ee:4f: 40:01:4d:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwNjE0MjIyNzA0WhcNMjUwNjIxMjIyNzA0WjAYMRYwFAYD VQQDEw02ODRkZjczOC02MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygkKneWd1wxIGGYfprfcQykzzQzRqy3TJxV3QY6iB3BwbzPiK58FxJ2fAlh3 teeXGPlvI7016YzWc7QRS0RQ8VgIP0VZrYGKGIaSMlxT26H/B0VU95MRx2BwJFLr Gyacx5st9t66xFjh6EZ1AP3eHz3KvCiIQ68ly+/r5UKDKZ3gdn8Vv8qyE3TbG5ZV 33N6oLSQ6VuCmT7t/J0nFRsiUMIyOXJG4LAbs10Zb3N1j2N6gmKznaq4h7NG3Hza kzvLEE8gFUz5r5W83tFHW4J8eFyRRWMJMFoGDhOJ6hYQ7Holo134lYknQt1cgwwT C1ICDYxkz4fei/HePVzIsYtB4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRMOjy+ qP5vIstSxHWBTAYZWAfLMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjoumY2HfloJlpDSXMnNrH8eiOKh0FFL/n/CWaxKwv14SLoaA/qvVq TWIADKaCYnqUxLvevun58mH0ZtK/KJcekpTezS9YuMe2HWEsdKTEF2c9Y9aYIh3H 78skKxLycV7lvhTXuPB4xFMVM4tM6nZIPzw7qgF8ifP2NEvi5isL+IXg5TBTqCUS Xi4gvVGhFGbF7EUo1fb/kUmZwiGcRB6K1HSBwIODEipgfuomkB8IkfV0+tUiC+ii 74krwzJgC2mcrGaF2VdXSdoaIxV2276pRfgSUsjhu8E7BswgnWpxcDcl41mwy/yB ZgwGU/LST8wzk0UD7OWoU6sM7k9AAU1j -----END CERTIFICATE-----Generated at Sun Jun 15 09:35:47 2025 by rpki-client