$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json) Hash identifier: SFrPkVDYskwC/RHol4roIjBA/m2/FC+mxy4eEYNRa8k= Subject key identifier: 88:A5:45:42:95:71:C1:FF:23:CD:F7:1D:D1:9B:91:FA:89:D9:1E:5D Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81 Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft Manifest number: 03F8 Signing time: Fri 13 Jun 2025 00:02:20 +0000 Manifest this update: Fri 13 Jun 2025 00:02:19 +0000 Manifest next update: Fri 20 Jun 2025 00:02:19 +0000 Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: t9kqKNHe6c3ZaTXVNrFClcZ84230v/bPRgVXna9SvIc=) 2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681 Validity Not Before: Jun 13 00:02:19 2025 GMT Not After : Jun 20 00:02:19 2025 GMT Subject: CN=684b6a8b-f9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:3f:e5:6a:17:f5:78:6f:bf:92:66:a5:1e: 61:ba:ca:3b:64:81:62:40:bc:8c:74:15:5e:c5:37: 98:f7:4c:e4:00:9f:cd:51:3d:18:28:06:5c:20:89: 9b:32:1a:ef:12:53:44:f4:bd:9e:b0:ce:e0:00:c9: 03:0e:cb:ce:b2:24:69:db:0f:d8:a7:2c:a9:f5:7c: c7:28:77:73:44:13:00:c8:85:df:8e:19:cc:54:84: 37:71:3c:a0:67:7f:dd:61:40:90:f1:ff:53:0b:e8: 73:93:15:45:01:c1:cd:0e:d2:a6:50:39:8f:70:3a: 8b:7b:01:7f:fe:21:4e:da:ed:74:9d:6d:1e:c6:ce: 29:08:d0:05:3b:b7:79:e3:99:f3:87:d5:c1:8c:fc: 3b:b7:32:6d:7a:21:83:03:ac:42:6f:49:5f:b3:9b: 6a:e4:5e:76:da:5c:66:f7:60:5f:86:d9:33:48:9a: 57:3b:76:47:2e:84:76:f1:81:2b:45:36:12:f0:66: 57:19:b1:81:6e:3f:43:e0:05:78:fa:5e:55:23:0c: c9:f7:98:c0:81:ba:ce:9a:24:ce:80:0f:ba:75:73: ff:ee:cf:9e:35:3b:bd:f0:43:d1:74:7a:4c:ea:ba: 29:76:a3:e4:36:8f:5a:ef:33:d4:ba:1b:d2:c7:f9: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A5:45:42:95:71:C1:FF:23:CD:F7:1D:D1:9B:91:FA:89:D9:1E:5D X509v3 Authority Key Identifier: keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ea:1b:4c:46:e3:78:29:15:3a:61:58:48:94:93:32:c7:7b: 87:14:cf:da:92:47:14:6e:16:db:4d:c5:f5:e8:a1:99:7f:0a: c9:10:68:ae:27:a5:52:e4:1a:24:82:3a:bd:cf:7d:9c:a0:86: 06:09:d9:27:25:44:3b:a4:37:88:c1:c1:86:03:ea:04:3b:af: 83:65:0a:b6:32:d4:8a:29:10:4e:a6:a3:ac:33:00:68:e3:1c: 55:ea:7a:f0:cc:f8:aa:7c:24:78:21:90:10:4c:53:06:69:e8: b8:b5:f9:f4:7d:ed:e0:aa:79:40:8e:84:88:1b:0d:15:52:3e: 3c:92:fc:63:83:5d:c6:5c:64:5e:20:db:cc:d8:4e:6c:3f:3a: 64:aa:b0:e2:a9:69:b3:68:b2:15:c7:c7:85:cc:52:80:08:fa: bc:42:de:20:0a:50:94:bf:b8:40:4f:a8:c7:db:c1:08:5a:a1: 85:ce:7d:8f:82:8f:af:c9:ad:e9:85:bc:06:41:f1:69:82:d9: b5:a2:64:e2:83:01:08:d6:fc:50:7f:7b:9d:69:ed:e7:7e:d0: c9:07:28:6e:2f:19:62:9c:dd:c9:de:87:e9:01:4f:8e:de:da: 04:e3:29:f2:41:3a:aa:ac:00:e9:c5:1b:e5:36:99:28:5d:f3: 28:a0:02:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCQ0ExMTAvBgNVBAUTKEY0Q0M0MzA0RTE3OTBFMDhGNUVDOTI5QTg3MzcyMjY5 RDA4RkI2ODEwHhcNMjUwNjEzMDAwMjE5WhcNMjUwNjIwMDAwMjE5WjAYMRYwFAYD VQQDEw02ODRiNmE4Yi1mOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQg/5WoX9Xhvv5JmpR5huso7ZIFiQLyMdBVexTeY90zkAJ/NUT0YKAZcIImb MhrvElNE9L2esM7gAMkDDsvOsiRp2w/Ypyyp9XzHKHdzRBMAyIXfjhnMVIQ3cTyg Z3/dYUCQ8f9TC+hzkxVFAcHNDtKmUDmPcDqLewF//iFO2u10nW0exs4pCNAFO7d5 45nzh9XBjPw7tzJteiGDA6xCb0lfs5tq5F522lxm92BfhtkzSJpXO3ZHLoR28YEr RTYS8GZXGbGBbj9D4AV4+l5VIwzJ95jAgbrOmiTOgA+6dXP/7s+eNTu98EPRdHpM 6ropdqPkNo9a7zPUuhvSx/l8wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIilRUKV ccH/I833HdGbkfqJ2R5dMB8GA1UdIwQYMBaAFPTMQwTheQ4I9eySmoc3ImnQj7aB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0JDQS82MkJDRDVERTdB OUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURnajE3SkthaHpjaWFkQ1B0 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNeERCT0Y1RGdqMTdKS2FoemNpYWRDUHRvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0JDQS82MkJDRDVERTdBOUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURn ajE3SkthaHpjaWFkQ1B0b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl6htMRuN4KRU6YVhIlJMyx3uHFM/akkcUbhbbTcX16KGZfwrJEGiu J6VS5Bokgjq9z32coIYGCdknJUQ7pDeIwcGGA+oEO6+DZQq2MtSKKRBOpqOsMwBo 4xxV6nrwzPiqfCR4IZAQTFMGaei4tfn0fe3gqnlAjoSIGw0VUj48kvxjg13GXGRe INvM2E5sPzpkqrDiqWmzaLIVx8eFzFKACPq8Qt4gClCUv7hAT6jH28EIWqGFzn2P go+vya3phbwGQfFpgtm1omTigwEI1vxQf3udae3nftDJByhuLxlinN3J3ofpAU+O 3toE4ynyQTqqrADpxRvlNpkoXfMooAKw -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:23 2025 by rpki-client