$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: NIqAnRUniaHADj7Avj9DBjMATGOfAdxXRiXQy8Lf7Jg= Subject key identifier: D8:5D:AA:A0:EA:70:7F:C2:FC:0F:94:82:71:2A:AA:B5:19:09:E0:B1 Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 0963 Signing time: Thu 24 Apr 2025 20:04:37 +0000 Manifest this update: Thu 24 Apr 2025 20:04:36 +0000 Manifest next update: Thu 01 May 2025 20:04:36 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: QFF2CzEMiVRCm0Pw1L1zz/sbUE3NTocOFsOIb2aK4Rs=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: Apr 24 20:04:36 2025 GMT Not After : May 1 20:04:36 2025 GMT Subject: CN=680a9955-fa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:96:4d:1d:af:51:53:57:b3:0e:1b:d8:e9: 38:c5:e2:97:78:7b:4c:b4:d8:4d:e6:c6:d5:45:8d: 20:c9:f7:ca:a5:20:cd:3b:19:42:63:72:1b:57:01: 3b:20:67:c1:57:63:79:8b:1c:ea:9c:7f:e1:82:41: eb:7e:50:0e:c0:3f:45:a6:b8:f1:56:14:a0:e5:aa: f4:ce:02:b9:ef:f2:a4:99:b7:70:48:5b:92:7a:e9: b4:e3:b6:53:c9:1f:a5:d5:17:74:f6:29:e5:ed:78: ab:7b:3c:41:1c:85:1d:16:84:b5:bf:27:f1:5b:a7: 64:c5:ba:e8:7d:7a:3e:37:78:14:22:1b:5d:8e:64: 07:fa:57:b4:51:f9:70:16:f1:26:f2:20:85:5f:f2: 1d:e5:70:b0:12:0c:47:ca:69:6f:40:b8:96:77:a8: bf:d1:c5:96:d6:1c:6a:5e:c7:00:7a:fe:11:b4:3c: 59:b2:67:28:b8:ed:89:54:b3:c2:73:38:7c:f3:7b: 50:30:b2:2d:9b:3f:f0:16:8d:34:b6:7b:fc:16:16: 3e:d1:5f:bd:f8:91:d8:cd:a6:0e:5c:3f:01:bc:b9: 63:4f:e2:fc:9d:42:99:78:a2:dc:fa:8a:14:87:74: 93:a1:b7:59:18:27:df:2f:38:51:e4:99:75:af:b0: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:AA:A0:EA:70:7F:C2:FC:0F:94:82:71:2A:AA:B5:19:09:E0:B1 X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fd:d1:3b:32:01:e7:8c:a5:ca:bf:cb:88:1d:97:56:a0:80: 0b:0c:71:b3:26:f9:ae:18:41:ce:13:3f:d2:91:fe:3b:81:76: 11:64:c3:3d:43:fe:0d:fd:a6:17:8c:72:47:56:6d:35:90:d6: e3:f8:08:a9:54:0b:75:4f:cd:e7:c0:0c:22:d9:7e:c1:79:0d: ee:e0:ea:2c:08:61:2d:02:fa:ea:46:0f:24:93:a9:83:10:09: 19:79:aa:6f:1e:11:38:d8:2b:d1:d2:53:2b:da:fe:72:2b:b8: 67:ee:c8:c7:5d:7e:22:a3:0c:5e:35:2b:96:4e:4c:d2:4b:cf: ce:9c:6e:a2:c8:ea:4e:19:d3:38:34:c9:d7:b0:08:0c:12:e7: db:87:2b:23:ab:35:bf:fa:d8:df:e4:a7:52:ae:fe:c0:f9:b8: 1e:20:49:33:e6:08:3b:ee:f5:15:ee:45:78:87:09:17:44:fd: 7c:0f:44:54:38:1a:c8:9e:f9:fa:ce:91:8e:ac:e1:17:f7:52: 5d:5d:8a:78:5d:70:b6:b7:ac:70:2c:ab:b8:79:dd:a5:c6:c7: 40:d8:38:de:81:ca:44:b5:8f:f9:d3:9c:75:90:2c:d4:14:06: 71:58:2f:71:37:c7:b5:2c:5e:68:1b:c1:4e:5a:6f:ec:ec:90: a0:66:c2:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwNDI0MjAwNDM2WhcNMjUwNTAxMjAwNDM2WjAYMRYwFAYD VQQDEw02ODBhOTk1NS1mYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wKWTR2vUVNXsw4b2Ok4xeKXeHtMtNhN5sbVRY0gyffKpSDNOxlCY3IbVwE7 IGfBV2N5ixzqnH/hgkHrflAOwD9FprjxVhSg5ar0zgK57/KkmbdwSFuSeum047ZT yR+l1Rd09inl7XirezxBHIUdFoS1vyfxW6dkxbrofXo+N3gUIhtdjmQH+le0Uflw FvEm8iCFX/Id5XCwEgxHymlvQLiWd6i/0cWW1hxqXscAev4RtDxZsmcouO2JVLPC czh883tQMLItmz/wFo00tnv8FhY+0V+9+JHYzaYOXD8BvLljT+L8nUKZeKLc+ooU h3STobdZGCffLzhR5Jl1r7DEkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhdqqDq cH/C/A+UgnEqqrUZCeCxMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe/dE7MgHnjKXKv8uIHZdWoIALDHGzJvmuGEHOEz/Skf47gXYRZMM9 Q/4N/aYXjHJHVm01kNbj+AipVAt1T83nwAwi2X7BeQ3u4OosCGEtAvrqRg8kk6mD EAkZeapvHhE42CvR0lMr2v5yK7hn7sjHXX4iowxeNSuWTkzSS8/OnG6iyOpOGdM4 NMnXsAgMEufbhysjqzW/+tjf5KdSrv7A+bgeIEkz5gg77vUV7kV4hwkXRP18D0RU OBrInvn6zpGOrOEX91JdXYp4XXC2t6xwLKu4ed2lxsdA2DjegcpEtY/505x1kCzU FAZxWC9xN8e1LF5oG8FOWm/s7JCgZsJb -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:44 2025 by rpki-client