$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: xTEjmGSoAXJkuVc/ghGQCtDk+WdnaMbw4SvH0Llu4Ig= Subject key identifier: 19:62:43:6F:03:FB:1E:3A:DB:56:B4:82:D4:90:E6:C0:31:56:71:E6 Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: 76 Signing time: Fri 25 Apr 2025 05:47:44 +0000 Manifest this update: Fri 25 Apr 2025 05:47:43 +0000 Manifest next update: Fri 02 May 2025 05:47:43 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: FGg2NA7EETlivVxdpFlHiiiJihl7Z+5HoGFy9ak+UO8=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Apr 25 05:47:43 2025 GMT Not After : May 2 05:47:43 2025 GMT Subject: CN=680b21ff-b06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:22:fb:b7:51:76:09:37:ab:6c:ff:00:9a: 5f:d6:96:69:81:06:18:ca:4a:db:56:46:71:5c:4d: 6d:58:6a:6c:37:77:ed:e1:f3:74:aa:b5:fd:3e:82: 43:93:5b:52:bc:c1:08:af:05:e8:5e:2e:5f:5d:16: 13:a4:f6:86:8b:a7:86:f8:fb:2c:59:fc:c7:91:cb: 8f:b9:99:c2:fa:90:ae:15:11:f7:77:ec:65:8d:45: ea:1e:78:b7:a2:eb:6d:76:72:8f:d8:ba:41:c0:ad: a5:0c:c4:1f:ae:28:45:ce:1d:38:9c:fa:04:c9:a1: b1:d9:ba:87:22:98:46:92:79:75:73:94:81:2d:31: 02:ec:41:1b:00:96:64:1c:96:57:9d:c1:33:74:e5: 13:a5:2a:f4:f6:e9:c1:38:a6:3e:58:93:46:9e:a4: 03:7d:e6:72:f9:ce:76:81:f9:3e:57:66:ad:44:66: f2:97:74:21:7d:ce:96:bf:99:64:e1:56:85:2f:a8: 8a:79:0b:84:14:56:3e:ba:aa:fc:9b:27:a7:88:bb: 71:38:0a:dc:80:99:80:13:e0:0a:14:48:1e:0e:44: 9f:e3:85:e6:e7:68:0f:1c:c8:86:6d:f5:94:37:15: 98:00:d5:a5:56:08:74:51:ea:d1:5c:9f:30:7c:1c: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:62:43:6F:03:FB:1E:3A:DB:56:B4:82:D4:90:E6:C0:31:56:71:E6 X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:56:25:34:0f:34:59:d4:65:e8:7c:52:da:b9:34:18:c4:96: 79:10:5f:59:3d:14:62:be:54:32:ba:18:e1:b6:59:95:fe:44: 20:83:fd:af:7d:e5:05:38:49:32:ea:89:43:cc:9c:ec:9e:9c: 0c:92:a7:2a:6d:0d:0f:c0:da:7f:dd:d1:fd:54:83:13:4e:19: 49:a5:79:d2:a1:38:31:4d:d9:85:da:04:23:93:bb:60:e6:7a: 2d:4c:e6:7f:3c:0c:49:49:f2:cb:1f:34:83:4a:16:66:bd:65: 64:b9:29:11:04:c6:c0:08:49:d1:d3:8e:4f:57:01:df:77:30: 6f:66:f5:6d:17:35:7a:1d:bc:1e:0a:80:f1:d7:db:ad:bd:8e: ed:1d:a8:dd:71:4c:7d:00:73:87:b6:c9:44:bd:b9:99:05:32: 56:30:bd:02:89:09:b3:b5:1d:53:fe:61:5c:29:27:f8:67:a1: d4:93:61:c9:d4:a4:d3:3d:92:22:bf:60:55:9b:23:51:e0:01: c9:5d:c0:22:8a:02:bf:4b:1a:d3:c4:96:dc:1e:eb:ea:91:43: b9:86:0c:20:a0:14:9b:88:85:2b:20:6a:36:cb:1d:3d:de:03: 0c:eb:42:59:6f:5a:64:a4:5a:30:34:35:a0:4d:64:19:b5:9e: 0a:ca:e3:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTkzMjExMC8GA1UEBRMoRjU0RjgwODAxNkFCNEJCMDZGNzk2QTg5NDY2N0M3MEJE RDQ4RkJGNjAeFw0yNTA0MjUwNTQ3NDNaFw0yNTA1MDIwNTQ3NDNaMBgxFjAUBgNV BAMTDTY4MGIyMWZmLWIwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoGyL7t1F2CTerbP8Aml/WlmmBBhjKSttWRnFcTW1Yamw3d+3h83Sqtf0+gkOT W1K8wQivBeheLl9dFhOk9oaLp4b4+yxZ/MeRy4+5mcL6kK4VEfd37GWNReoeeLei 6212co/YukHAraUMxB+uKEXOHTic+gTJobHZuocimEaSeXVzlIEtMQLsQRsAlmQc lledwTN05ROlKvT26cE4pj5Yk0aepAN95nL5znaB+T5XZq1EZvKXdCF9zpa/mWTh VoUvqIp5C4QUVj66qvybJ6eIu3E4CtyAmYAT4AoUSB4ORJ/jhebnaA8cyIZt9ZQ3 FZgA1aVWCHRR6tFcnzB8HPdJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGWJDbwP7 HjrbVrSC1JDmwDFWceYwHwYDVR0jBBgwFoAU9U+AgBarS7BveWqJRmfHC91I+/Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzQ3Q0EzNUU0NzIw NzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1f WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOVUtQWdCYXJTN0J2ZVdxSlJtZkhDOTFJLV9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzQ3Q0EzNUU0NzIwNzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdC dmVXcUpSbWZIQzkxSS1fWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALZWJTQPNFnUZeh8Utq5NBjElnkQX1k9FGK+VDK6GOG2WZX+RCCD/a99 5QU4STLqiUPMnOyenAySpyptDQ/A2n/d0f1UgxNOGUmledKhODFN2YXaBCOTu2Dm ei1M5n88DElJ8ssfNINKFma9ZWS5KREExsAISdHTjk9XAd93MG9m9W0XNXodvB4K gPHX2629ju0dqN1xTH0Ac4e2yUS9uZkFMlYwvQKJCbO1HVP+YVwpJ/hnodSTYcnU pNM9kiK/YFWbI1HgAcldwCKKAr9LGtPEltwe6+qRQ7mGDCCgFJuIhSsgajbLHT3e AwzrQllvWmSkWjA0NaBNZBm1ngrK41s= -----END CERTIFICATE-----Generated at Sun Apr 27 05:23:19 2025 by rpki-client