$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: PVYXjqxjVEUUYYv8Ey4T4gz5dMJwlu0EEBN46O1TSak= Subject key identifier: 1D:01:09:01:B7:51:C4:4F:AA:4C:77:F9:02:94:99:0B:3F:85:B3:BF Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0172 Signing time: Sun 15 Jun 2025 02:59:42 +0000 Manifest this update: Sun 15 Jun 2025 02:59:42 +0000 Manifest next update: Sun 22 Jun 2025 02:59:42 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: AveOE82nfouygfry2kCW/CuqseFbJCemJW/5hPY8kK8=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Jun 15 02:59:42 2025 GMT Not After : Jun 22 02:59:42 2025 GMT Subject: CN=684e371e-a1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:e3:06:92:fe:63:eb:0a:5e:fa:0b:62:4d: 58:56:07:fe:6a:41:7a:94:02:35:22:52:f5:db:39: 60:cc:59:61:a8:3c:47:63:73:c5:69:10:57:d6:5d: ac:2c:68:d1:38:04:1b:b6:30:a2:d5:3b:7a:66:c4: 00:4a:72:d4:fa:c4:9f:c1:33:44:eb:ab:26:45:eb: 9e:b9:6c:ba:4b:8b:26:c8:cf:52:70:cb:44:02:4b: 44:d7:69:aa:3e:94:98:20:5c:89:bf:fe:bd:20:a4: a2:36:e6:5b:e6:f6:cd:ff:8a:94:a5:8d:a5:53:b0: dc:7c:4a:b5:60:13:ba:ed:07:c3:51:51:d8:7d:43: 7c:bf:80:44:16:54:93:a2:38:a9:24:a7:09:de:da: ec:02:d2:46:89:2f:e8:c2:ff:9d:a4:7e:bf:94:a2: 90:25:d8:d0:d6:f5:e3:6d:4d:f1:4c:f8:b5:48:4e: 0d:eb:ad:3d:fe:f8:7d:4d:a9:a5:fb:41:43:51:ec: 20:1e:fa:8b:49:e3:ca:8e:88:8a:3d:77:31:7c:15: b6:07:bb:91:e2:b2:6d:9f:ef:8b:77:f3:4d:7c:0f: c2:86:f9:31:d6:22:6d:10:f7:cb:68:82:a7:3c:6a: 82:65:df:80:1d:78:a6:bf:89:de:b8:6e:94:56:91: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:01:09:01:B7:51:C4:4F:AA:4C:77:F9:02:94:99:0B:3F:85:B3:BF X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:36:38:aa:36:df:7e:34:a8:2a:04:69:47:94:b5:a4:be:11: 0a:5a:93:c0:01:ec:41:73:6b:6f:79:d7:34:ac:77:76:6a:db: c9:98:b1:35:fa:3e:50:eb:ab:aa:73:35:61:ad:66:82:e5:73: ce:0d:f0:15:3b:57:19:1a:56:c9:a2:dd:96:d7:cf:02:de:63: f9:b9:bd:1d:a6:d0:d3:0e:3b:a4:06:84:36:a4:49:41:4d:08: ce:c9:a2:05:4e:a0:df:fa:48:01:ec:c2:fe:61:f4:6a:47:17: 4b:4c:9f:22:f9:da:4f:b9:c9:e4:f1:89:16:f2:3f:89:12:ae: 73:d2:e8:12:ad:19:8a:ed:cc:53:6f:f0:a5:4e:62:e0:a6:d6: 4c:88:7b:f0:26:7a:52:93:1e:02:12:c5:4b:0f:f3:d0:d5:60: 76:93:3f:7c:d7:dd:e0:6f:88:3f:47:fa:0e:c7:09:44:6c:c0: d1:d9:50:e9:1a:9a:8f:25:6c:78:4c:f1:d8:25:ea:82:ca:7e: aa:e7:a2:b9:e6:db:25:4c:1c:8f:4b:37:7b:8c:14:21:5d:3d: 3a:32:38:61:98:3f:a2:30:5d:83:5e:65:02:48:90:84:a1:cc: 0f:35:d4:7d:fd:de:ed:26:e0:b9:ba:72:69:49:aa:c8:f6:4e: 52:83:04:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwNjE1MDI1OTQyWhcNMjUwNjIyMDI1OTQyWjAYMRYwFAYD VQQDEw02ODRlMzcxZS1hMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38PjBpL+Y+sKXvoLYk1YVgf+akF6lAI1IlL12zlgzFlhqDxHY3PFaRBX1l2s LGjROAQbtjCi1Tt6ZsQASnLU+sSfwTNE66smReueuWy6S4smyM9ScMtEAktE12mq PpSYIFyJv/69IKSiNuZb5vbN/4qUpY2lU7DcfEq1YBO67QfDUVHYfUN8v4BEFlST ojipJKcJ3trsAtJGiS/owv+dpH6/lKKQJdjQ1vXjbU3xTPi1SE4N6609/vh9Taml +0FDUewgHvqLSePKjoiKPXcxfBW2B7uR4rJtn++Ld/NNfA/Chvkx1iJtEPfLaIKn PGqCZd+AHXimv4neuG6UVpF1BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0BCQG3 UcRPqkx3+QKUmQs/hbO/MB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbNjiqNt9+NKgqBGlHlLWkvhEKWpPAAexBc2tvedc0rHd2atvJmLE1 +j5Q66uqczVhrWaC5XPODfAVO1cZGlbJot2W188C3mP5ub0dptDTDjukBoQ2pElB TQjOyaIFTqDf+kgB7ML+YfRqRxdLTJ8i+dpPucnk8YkW8j+JEq5z0ugSrRmK7cxT b/ClTmLgptZMiHvwJnpSkx4CEsVLD/PQ1WB2kz98193gb4g/R/oOxwlEbMDR2VDp GpqPJWx4TPHYJeqCyn6q56K55tslTByPSzd7jBQhXT06MjhhmD+iMF2DXmUCSJCE ocwPNdR9/d7tJuC5unJpSarI9k5SgwRx -----END CERTIFICATE-----Generated at Tue Jun 17 01:32:55 2025 by rpki-client