$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json) Hash identifier: PGTtNNDmrh7MOUxWO22k0N/4WHKU7ywS3u3dWPZZg6s= Subject key identifier: 7A:6B:3C:B6:F2:DB:03:E6:14:12:CC:B3:3F:E7:59:CD:31:D8:49:3A Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft Manifest number: 42 Signing time: Fri 13 Jun 2025 06:28:59 +0000 Manifest this update: Fri 13 Jun 2025 06:28:59 +0000 Manifest next update: Fri 20 Jun 2025 06:28:58 +0000 Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: Ik/OHng3S1jughGBcbbKBQpYCcXKlcAz+MwneOTg330=) 2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=) 3: 0173D2DC217311F0BAF2AA30C4F9AE02.roa (hash: nryCYlJbHFwsxOAc1QWOqjcmSxXnzL35lsWmd38XYPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Validity Not Before: Jun 13 06:28:59 2025 GMT Not After : Jun 20 06:28:58 2025 GMT Subject: CN=684bc52b-58ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:9e:72:7a:18:8e:c1:2e:e5:6f:b1:2f:18: 7e:9e:0a:5b:39:3c:fc:ad:11:0b:a6:74:a9:2e:66: 56:2c:f8:38:72:6c:7c:a0:62:24:0e:35:65:7f:27: 0a:ef:aa:24:2b:b4:9d:21:eb:a9:13:65:c6:ab:b6: 4d:5f:6e:08:b1:b8:01:55:a1:db:53:bd:ba:bf:08: f1:41:82:e6:69:17:63:3d:74:cd:a2:4e:32:4f:b9: 81:e0:82:fe:0a:2b:ea:0f:7b:11:dc:d1:a4:08:85: a8:7c:fe:48:ff:62:65:3e:a4:70:9e:7f:a0:85:d2: ff:18:0f:b9:6a:2c:4f:67:45:2a:71:ba:2f:79:94: fc:ea:1a:66:fe:c7:bc:8e:d4:7e:f1:8d:f0:b5:bf: 9f:09:32:81:bf:c9:8e:c1:66:e7:e0:81:35:a6:5c: 98:bd:6f:44:46:91:23:9b:23:54:9b:b6:b4:e3:c5: bf:1b:a4:d1:04:6f:01:85:58:36:5a:ad:73:85:e6: ba:29:c8:3f:f7:d7:a2:33:1e:a9:8d:ae:0d:1d:4c: 7a:e2:4b:ef:b4:33:1d:ca:c4:72:08:d3:dd:94:ae: 45:6a:a1:3f:97:e4:fa:eb:68:bc:6e:d4:66:9b:96: 1b:15:94:36:1f:db:4f:39:d8:dd:51:ba:bf:60:82: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6B:3C:B6:F2:DB:03:E6:14:12:CC:B3:3F:E7:59:CD:31:D8:49:3A X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:5e:44:91:28:72:b7:82:9b:18:a9:98:33:61:83:49:56:96: 1f:50:40:4e:27:a4:24:01:66:f9:e2:74:6f:da:ab:0f:66:4e: 2d:45:86:48:3e:69:62:5f:4b:18:8f:ce:fb:51:86:83:fb:68: 40:18:bc:24:f4:8a:c0:c8:37:dd:ad:8c:3a:84:0f:a8:5e:1f: da:c0:21:8d:23:f7:0e:4d:b5:f6:5d:4a:53:08:89:0f:cf:bf: 1f:83:3e:99:30:22:42:19:d9:06:d0:c0:c4:88:d5:42:5e:98: 6d:aa:61:79:bb:1a:b4:eb:44:cb:d0:65:6d:10:0e:cd:e6:c6: 4a:48:69:65:3e:40:c6:d8:74:3b:ea:92:89:16:60:1e:c0:be: 51:41:fa:7f:e0:2e:06:6e:78:0e:da:f8:57:49:7f:c2:4b:11: ab:f7:9b:80:75:35:89:07:a9:ea:31:6f:5d:b6:b4:df:bb:b1: 23:b6:03:06:5f:15:4a:78:6e:1c:36:40:42:54:e3:b3:68:86: 59:5f:24:67:86:11:17:13:dd:60:d4:fc:36:32:be:cd:0e:1b: 69:1c:d1:e8:26:17:67:72:7b:e7:43:40:b9:0b:f4:85:f2:2b: af:20:c1:a1:e1:ff:85:bb:dd:68:51:4b:35:3e:48:48:27:75: 85:13:a1:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTA2MTMwNjI4NTlaFw0yNTA2MjAwNjI4NThaMBgxFjAUBgNV BAMTDTY4NGJjNTJiLTU4ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC34J5yehiOwS7lb7EvGH6eCls5PPytEQumdKkuZlYs+DhybHygYiQONWV/Jwrv qiQrtJ0h66kTZcartk1fbgixuAFVodtTvbq/CPFBguZpF2M9dM2iTjJPuYHggv4K K+oPexHc0aQIhah8/kj/YmU+pHCef6CF0v8YD7lqLE9nRSpxui95lPzqGmb+x7yO 1H7xjfC1v58JMoG/yY7BZufggTWmXJi9b0RGkSObI1SbtrTjxb8bpNEEbwGFWDZa rXOF5ropyD/316IzHqmNrg0dTHriS++0Mx3KxHII092UrkVqoT+X5PrraLxu1Gab lhsVlDYf20852N1Rur9gguA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUems8tvLb A+YUEsyzP+dZzTHYSTowHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw OTE3L0E1QUY4RTY4RjU2MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0 dk5LWjliMXVFSUpyWmxzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpeRJEocreCmxipmDNhg0lWlh9QQE4npCQBZvnidG/aqw9mTi1Fhkg+ aWJfSxiPzvtRhoP7aEAYvCT0isDIN92tjDqED6heH9rAIY0j9w5NtfZdSlMIiQ/P vx+DPpkwIkIZ2QbQwMSI1UJemG2qYXm7GrTrRMvQZW0QDs3mxkpIaWU+QMbYdDvq kokWYB7AvlFB+n/gLgZueA7a+FdJf8JLEav3m4B1NYkHqeoxb122tN+7sSO2AwZf FUp4bhw2QEJU47NohllfJGeGERcT3WDU/DYyvs0OG2kc0egmF2dye+dDQLkL9IXy K68gwaHh/4W73WhRSzU+SEgndYUToaQ= -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:25 2025 by rpki-client