$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: uSE6pgbZ0psMkIIzLwehmGhV6RBFY0jqFBeWRTkFjYU= Subject key identifier: 16:CE:5A:9A:F6:18:60:EE:CD:CE:D3:07:92:5C:18:46:89:2E:CE:95 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: 9B Signing time: Thu 19 Jun 2025 05:40:01 +0000 Manifest this update: Thu 19 Jun 2025 05:40:00 +0000 Manifest next update: Thu 26 Jun 2025 05:40:00 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: /Fqa0r1YoCmyudWrtkl+E0JlN4DshE2yH9Xk+xbqgTI=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: zTIt7VVx9LOh+fElZbmBDVws/qIJ7/N6iFJRXVOkuO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Jun 19 05:40:00 2025 GMT Not After : Jun 26 05:40:00 2025 GMT Subject: CN=6853a2b1-c90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:b8:9c:53:b4:e5:06:6e:fc:72:55:e2:96: 41:52:68:76:1e:22:7e:e5:8b:31:68:23:02:23:48: e8:ac:ca:ac:f5:95:e1:8e:f1:e1:40:b3:22:46:d7: 8a:08:ad:ad:21:69:8a:ae:f2:4c:3c:b6:4c:aa:fe: d7:92:15:89:3d:b5:1e:32:34:64:6e:a2:f6:f1:95: 3a:2f:41:c0:97:27:e0:25:72:fa:db:e9:23:d8:17: d6:f2:53:49:c9:87:81:88:39:cb:ed:64:17:4e:2e: fd:e5:4d:33:5d:69:65:24:e6:54:f4:2d:a2:49:a9: f5:63:41:66:0e:3d:9e:68:e4:9a:61:28:30:81:fe: 92:79:82:f9:ad:4f:36:6d:cf:54:3a:b0:2a:e3:a7: d0:74:ec:dd:18:fb:64:ab:f7:78:8e:b3:1a:8d:53: aa:cc:7b:8d:e6:bb:29:e6:79:dd:f4:37:ee:a6:74: 6d:7c:f1:a2:33:b9:f6:41:ea:d0:61:59:c9:15:a1: f0:1c:a0:d9:b3:17:64:b6:e8:12:7a:77:71:47:b7: 05:54:c8:c4:67:51:a2:c6:15:ef:e2:34:6e:37:e4: d6:c6:53:b4:26:a1:13:4b:59:43:30:96:50:0d:3f: 1e:be:ec:bd:3a:d1:87:cb:29:e4:7b:64:ad:77:a5: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:5A:9A:F6:18:60:EE:CD:CE:D3:07:92:5C:18:46:89:2E:CE:95 X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ba:e4:44:42:57:72:d9:1e:25:0b:19:89:8c:d9:30:c3:04: 4c:59:95:7e:95:df:cc:f9:04:92:71:ec:96:e9:6e:b1:1f:d3: ee:40:85:85:38:ed:02:26:0b:95:ce:05:01:81:36:8a:8f:60: f4:60:62:13:32:f1:70:b0:ea:60:e3:d0:90:14:5e:81:63:2b: 0c:38:c3:7b:57:84:27:1d:7f:58:33:13:47:9d:5d:c4:09:ad: 27:ed:27:84:7e:50:3b:79:c2:27:54:ec:0a:08:67:fd:3c:da: d5:ff:bf:eb:91:26:09:aa:a8:47:9d:b1:2a:a9:d8:fc:24:91: e6:fa:be:cc:09:ed:53:dc:34:c4:f4:8f:b0:0d:51:f9:e1:14: 4f:34:b4:a6:2a:1b:5c:86:42:f1:5b:d9:05:59:a8:c2:8a:b3: 4a:fc:51:ab:77:94:24:82:98:4d:ff:a6:41:59:43:91:6f:1a: 20:d4:62:69:e7:89:04:24:70:e9:93:49:bf:de:ed:ff:0f:a7: 92:5a:af:97:54:44:92:97:dd:da:73:e2:a8:79:19:47:8d:91: c0:61:ee:2b:78:c9:93:b8:06:9a:6b:30:91:39:a2:4f:e8:fe: 25:45:db:ae:dc:6b:13:89:ba:d3:dd:d1:28:6a:5e:a4:0f:a4: de:69:c9:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwNjE5MDU0MDAwWhcNMjUwNjI2MDU0MDAwWjAYMRYwFAYD VQQDEw02ODUzYTJiMS1jOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsca4nFO05QZu/HJV4pZBUmh2HiJ+5YsxaCMCI0jorMqs9ZXhjvHhQLMiRteK CK2tIWmKrvJMPLZMqv7XkhWJPbUeMjRkbqL28ZU6L0HAlyfgJXL62+kj2BfW8lNJ yYeBiDnL7WQXTi795U0zXWllJOZU9C2iSan1Y0FmDj2eaOSaYSgwgf6SeYL5rU82 bc9UOrAq46fQdOzdGPtkq/d4jrMajVOqzHuN5rsp5nnd9DfupnRtfPGiM7n2QerQ YVnJFaHwHKDZsxdktugSendxR7cFVMjEZ1GixhXv4jRuN+TWxlO0JqETS1lDMJZQ DT8evuy9OtGHyynke2Std6Vq0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbOWpr2 GGDuzc7TB5JcGEaJLs6VMB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPuuREQldy2R4lCxmJjNkwwwRMWZV+ld/M+QSSceyW6W6xH9PuQIWF OO0CJguVzgUBgTaKj2D0YGITMvFwsOpg49CQFF6BYysMOMN7V4QnHX9YMxNHnV3E Ca0n7SeEflA7ecInVOwKCGf9PNrV/7/rkSYJqqhHnbEqqdj8JJHm+r7MCe1T3DTE 9I+wDVH54RRPNLSmKhtchkLxW9kFWajCirNK/FGrd5QkgphN/6ZBWUORbxog1GJp 54kEJHDpk0m/3u3/D6eSWq+XVESSl93ac+KoeRlHjZHAYe4reMmTuAaaazCROaJP 6P4lRduu3GsTibrT3dEoal6kD6TeacmT -----END CERTIFICATE-----Generated at Thu Jun 19 23:26:48 2025 by rpki-client