$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: 3kiolBjOvpVlObzOwNYQVz0RZmFaaTL76SgC43Ww4+I= Subject key identifier: F9:A7:F2:0F:B5:1B:4B:5E:ED:28:A3:83:68:63:7B:E3:77:C6:7B:10 Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0DC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0DBB Signing time: Thu 24 Apr 2025 17:52:38 +0000 Manifest this update: Thu 24 Apr 2025 17:52:37 +0000 Manifest next update: Thu 01 May 2025 17:52:37 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: keTEjmgCbHDMpY0r464pb71idedlUSuQtMGYiiSQXvs=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: NGmhercCoJ9hcEnfypdSk09ukBq8+ACpPHXM0iho7j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3522 (0xdc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226, serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: Apr 24 17:52:37 2025 GMT Not After : May 1 17:52:37 2025 GMT Subject: CN=680a7a65-c4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:c5:e5:5e:25:68:82:52:5d:f7:7b:2b:bb: 1d:df:e8:5f:69:c2:9b:17:42:0d:b5:78:a6:b1:84: 63:8e:35:f3:26:36:c0:88:16:65:52:8b:ba:02:f3: de:e2:8d:76:5f:11:40:7f:df:74:d0:95:46:27:d0: a7:18:29:59:ee:88:8a:db:c8:8c:0f:71:52:51:28: d8:13:25:d9:38:b7:94:e7:f7:36:12:6a:c7:21:f6: 1c:95:f1:16:2d:6b:06:a1:d4:bd:0a:ac:07:49:23: 58:c1:67:a4:ff:08:14:1b:f3:ad:64:84:0b:32:6c: 87:bb:f8:21:8e:34:69:51:ac:e3:58:61:d5:96:f5: 79:ee:11:1a:4e:bc:10:f6:00:d3:be:64:1a:51:c8: ba:91:0e:0c:a4:b3:ea:47:2e:1b:14:28:80:9a:4a: c9:cb:b9:64:cc:a5:11:03:02:03:f9:1e:f0:c9:68: d7:18:c8:eb:d9:d3:91:57:92:00:40:72:d2:6f:4e: 05:66:f7:83:69:6a:f3:ba:6d:69:28:f1:94:93:cd: 3c:51:85:36:4a:ff:b8:ac:e9:48:67:e5:97:2a:62: cd:5c:31:08:b0:0f:10:fc:e8:87:b7:4c:5f:48:44: 50:45:64:40:69:2b:fb:35:c5:18:70:3c:af:a5:a2: ca:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:F2:0F:B5:1B:4B:5E:ED:28:A3:83:68:63:7B:E3:77:C6:7B:10 X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ba:35:8a:b8:8d:81:98:73:96:16:d8:f7:3a:53:fb:56:b6: 47:15:36:57:10:1d:aa:c8:33:ff:f5:27:69:81:f0:2b:90:d0: 9e:60:5c:ef:fc:52:8d:ce:a4:43:a1:4e:71:6f:1f:f4:78:3c: c1:00:02:3b:b2:9f:be:a1:36:44:b6:c7:31:70:48:22:69:f2: c1:b6:ee:03:69:91:0d:00:9d:45:78:c8:a4:a3:75:77:c5:93: b3:6e:a1:89:62:9a:62:4f:33:4f:2d:ba:b8:89:49:0a:66:44: 4a:da:69:68:33:62:5f:57:82:4c:f3:cb:cb:01:fc:e3:53:21: 4d:01:1d:c9:6d:ca:7e:38:79:95:1d:83:35:25:2a:dc:be:28: cc:38:de:6f:5e:4d:bb:d6:e1:de:ba:1b:25:79:39:c2:8f:e6: 1b:a9:79:1a:61:c2:57:4a:0a:9d:f7:ec:1e:35:c7:09:84:bf: ea:c6:e5:63:b9:32:3a:42:1f:fd:37:32:c7:9f:08:46:6a:80: 80:12:9e:35:33:80:66:19:6b:14:dd:64:5b:5c:29:23:b9:27: 64:56:07:7b:c5:ef:a7:89:40:75:f9:4f:e8:ba:66:bd:9a:fc: 65:9c:f0:66:b8:0c:a6:93:d1:f7:3d:f4:c1:d8:fb:8d:18:08: f6:49:cb:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjUwNDI0MTc1MjM3WhcNMjUwNTAxMTc1MjM3WjAYMRYwFAYD VQQDEw02ODBhN2E2NS1jNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusPF5V4laIJSXfd7K7sd3+hfacKbF0INtXimsYRjjjXzJjbAiBZlUou6AvPe 4o12XxFAf9900JVGJ9CnGClZ7oiK28iMD3FSUSjYEyXZOLeU5/c2EmrHIfYclfEW LWsGodS9CqwHSSNYwWek/wgUG/OtZIQLMmyHu/ghjjRpUazjWGHVlvV57hEaTrwQ 9gDTvmQaUci6kQ4MpLPqRy4bFCiAmkrJy7lkzKURAwID+R7wyWjXGMjr2dORV5IA QHLSb04FZveDaWrzum1pKPGUk808UYU2Sv+4rOlIZ+WXKmLNXDEIsA8Q/OiHt0xf SERQRWRAaSv7NcUYcDyvpaLK2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmn8g+1 G0te7Sijg2hje+N3xnsQMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATujWKuI2BmHOWFtj3OlP7VrZHFTZXEB2qyDP/9SdpgfArkNCeYFzv /FKNzqRDoU5xbx/0eDzBAAI7sp++oTZEtscxcEgiafLBtu4DaZENAJ1FeMiko3V3 xZOzbqGJYppiTzNPLbq4iUkKZkRK2mloM2JfV4JM88vLAfzjUyFNAR3Jbcp+OHmV HYM1JSrcvijMON5vXk271uHeuhsleTnCj+YbqXkaYcJXSgqd9+weNccJhL/qxuVj uTI6Qh/9NzLHnwhGaoCAEp41M4BmGWsU3WRbXCkjuSdkVgd7xe+niUB1+U/ouma9 mvxlnPBmuAymk9H3PfTB2PuNGAj2Scux -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:44 2025 by rpki-client