$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: QXOhv8rT0vxM/osDdpgZZwJ/U4I7vHc3OJCDDoORxGU= Subject key identifier: 24:A2:26:E7:31:27:40:BE:A3:86:25:B7:C6:19:12:8D:E5:35:A5:19 Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 04A3 Signing time: Fri 20 Jun 2025 17:24:13 +0000 Manifest this update: Fri 20 Jun 2025 17:24:12 +0000 Manifest next update: Fri 27 Jun 2025 17:24:12 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: giMcr63vpQZhPyXwKMeUc7khwxG4OiH8OgTR3ZcdpB4=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Jun 20 17:24:12 2025 GMT Not After : Jun 27 17:24:12 2025 GMT Subject: CN=6855993d-2224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:6e:4f:69:00:30:28:8b:e3:1e:01:42:01: c9:40:c9:0e:c7:d0:d9:25:52:3a:04:3c:7e:47:68: 2b:de:fe:2c:30:fd:6b:44:d0:d9:8f:e3:71:bd:5a: 26:16:b1:6c:b3:b3:1d:35:12:44:c9:52:49:5f:ed: 24:13:e8:03:17:1c:f0:91:97:0e:47:9b:16:27:53: da:14:8a:94:dc:0c:9a:7a:4e:b6:2e:70:10:f2:ab: 9f:2c:d5:66:4a:e6:d1:e6:1e:ae:62:b8:5e:2b:16: 1d:a4:2c:1f:b6:fa:09:2a:79:97:5e:b2:51:fb:1d: c0:db:45:30:6d:5e:eb:d7:0a:74:d4:96:03:74:eb: e9:9a:43:93:05:5f:b1:14:59:67:4e:ee:af:8b:c4: 72:5b:e1:de:74:52:d9:99:c7:99:0e:5e:82:60:49: c1:9f:35:b5:a2:01:ee:3d:8a:95:58:2e:dc:f7:f6: b8:c1:e6:d1:56:b1:4c:c8:3f:d3:a0:cd:cc:52:72: 62:2c:50:03:c6:f8:6d:72:5a:4b:06:3a:08:4f:be: ce:06:47:89:14:37:6a:fc:2f:c8:45:9b:3b:dd:77: 9d:65:5f:d2:a3:55:7a:26:a4:c2:6e:86:ce:62:88: 7b:16:02:ac:ea:82:9a:a4:dd:6c:3e:b7:5d:eb:04: 79:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A2:26:E7:31:27:40:BE:A3:86:25:B7:C6:19:12:8D:E5:35:A5:19 X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8e:01:73:09:d6:48:a2:ac:5d:9a:e4:f0:23:b1:8e:cf:49: 26:3c:c0:43:e9:83:ef:6f:37:66:a4:3d:07:84:d9:24:08:7a: 74:ad:7f:cf:d6:41:f2:e0:e5:b9:51:75:a2:9c:0b:75:d4:31: 0f:77:1c:6d:8e:21:95:26:37:68:8e:f5:4f:67:5a:66:0c:eb: 31:36:d7:5f:63:6c:84:89:13:6b:03:45:3b:53:ea:00:57:e8: 82:b6:e9:99:af:51:d2:a3:b6:6f:77:c8:8c:50:15:b5:30:48: 28:12:12:44:97:12:dd:d6:25:84:0f:77:04:3f:07:e5:d9:48: d3:0b:1f:95:e3:4d:5c:09:ec:e7:f4:a9:7a:bb:82:71:33:b7: 81:7e:38:69:47:73:3d:25:65:5e:d0:ac:32:35:2a:ec:b8:0a: 48:45:39:ad:9f:93:65:79:8d:8c:f7:2c:f3:2d:6f:04:e5:be: a8:d2:58:7c:9f:86:5c:ee:32:ea:85:19:d7:bd:c5:64:6c:08: fe:b6:93:12:93:04:4a:03:7d:5f:35:e7:cc:7f:63:91:83:60: ed:48:8f:e5:53:ea:5a:04:cb:63:b1:5d:a3:b6:1d:eb:fb:1d: d6:60:6e:85:fa:15:56:03:77:4f:ac:90:09:64:59:e8:96:c1: ff:ba:f4:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUwNjIwMTcyNDEyWhcNMjUwNjI3MTcyNDEyWjAYMRYwFAYD VQQDEw02ODU1OTkzZC0yMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFhuT2kAMCiL4x4BQgHJQMkOx9DZJVI6BDx+R2gr3v4sMP1rRNDZj+NxvVom FrFss7MdNRJEyVJJX+0kE+gDFxzwkZcOR5sWJ1PaFIqU3Ayaek62LnAQ8qufLNVm SubR5h6uYrheKxYdpCwftvoJKnmXXrJR+x3A20UwbV7r1wp01JYDdOvpmkOTBV+x FFlnTu6vi8RyW+HedFLZmceZDl6CYEnBnzW1ogHuPYqVWC7c9/a4webRVrFMyD/T oM3MUnJiLFADxvhtclpLBjoIT77OBkeJFDdq/C/IRZs73XedZV/So1V6JqTCbobO Yoh7FgKs6oKapN1sPrdd6wR5lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSiJucx J0C+o4Ylt8YZEo3lNaUZMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtjgFzCdZIoqxdmuTwI7GOz0kmPMBD6YPvbzdmpD0HhNkkCHp0rX/P 1kHy4OW5UXWinAt11DEPdxxtjiGVJjdojvVPZ1pmDOsxNtdfY2yEiRNrA0U7U+oA V+iCtumZr1HSo7Zvd8iMUBW1MEgoEhJElxLd1iWED3cEPwfl2UjTCx+V401cCezn 9Kl6u4JxM7eBfjhpR3M9JWVe0KwyNSrsuApIRTmtn5NleY2M9yzzLW8E5b6o0lh8 n4Zc7jLqhRnXvcVkbAj+tpMSkwRKA31fNefMf2ORg2DtSI/lU+paBMtjsV2jth3r +x3WYG6F+hVWA3dPrJAJZFnolsH/uvRt -----END CERTIFICATE-----Generated at Sun Jun 22 02:56:57 2025 by rpki-client