$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: nfJOxSUnjXEdv6syIyLYTI9hYHtLiRF3gIfm/D3khpM= Subject key identifier: C3:43:D9:DE:A9:0A:8B:A6:1D:BF:ED:F1:42:8E:41:DF:35:F5:B1:E5 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 350F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 34C2 Signing time: Sat 14 Jun 2025 14:32:26 +0000 Manifest this update: Sat 14 Jun 2025 14:32:26 +0000 Manifest next update: Sat 21 Jun 2025 14:32:26 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: XQwuvctFZverrwnruz+0quJkB39k1cC/P1Ugf8cSNss=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13583 (0x350f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Jun 14 14:32:26 2025 GMT Not After : Jun 21 14:32:26 2025 GMT Subject: CN=684d87fa-a675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:c7:24:f0:39:da:35:c8:58:6e:a1:8c:25: 9c:bc:7b:ca:4d:b4:fe:d8:cb:82:fc:5e:45:13:85: 6e:c9:24:4c:6d:9d:8a:6e:fe:d3:05:4c:09:2f:31: 26:16:0d:31:22:7f:fd:8c:5b:62:e1:78:a5:15:d3: e8:eb:a1:e6:25:57:4f:5c:3c:db:41:ef:ec:15:fb: bb:f9:ed:a8:71:f9:db:3e:98:5f:b6:c0:8f:83:73: 18:a3:0c:53:12:c5:79:37:20:8e:60:33:b4:ec:06: f2:7b:02:ac:d4:3b:06:03:a5:4c:4e:0f:e7:50:3f: 75:0b:05:ee:85:6f:22:96:b5:f8:b6:ef:00:35:10: a0:82:50:a2:41:f8:13:a5:50:07:61:81:b9:b8:f6: d4:93:9d:cf:91:2f:8b:0e:76:da:95:cd:67:b2:3f: 03:a0:12:d3:3b:3d:b8:f0:b3:12:a0:e1:65:d5:97: d0:ac:fd:66:26:ab:d6:70:ba:ba:73:e9:89:ab:23: bb:f8:51:57:4e:b9:24:1b:7f:56:3f:de:15:d0:8f: 86:6c:6a:01:8a:c7:5a:0b:bf:d8:19:39:59:6e:69: 40:25:ef:6d:cd:fd:b5:6d:a3:31:7e:02:4f:4b:31: 10:ff:83:e9:0b:84:40:f1:fb:9e:08:c3:f4:74:35: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:43:D9:DE:A9:0A:8B:A6:1D:BF:ED:F1:42:8E:41:DF:35:F5:B1:E5 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7d:e3:47:94:3f:8a:c9:95:d1:51:e3:e4:11:db:a3:8c:45: 07:50:c5:36:34:83:d5:8f:d8:85:72:d1:69:76:44:16:ae:5c: c9:fa:6c:46:d0:c0:43:24:9f:64:ae:52:63:10:26:35:27:f8: 68:a0:63:b1:93:22:22:9d:bf:f8:6c:e5:23:b5:e0:a6:03:cf: 06:1a:0e:06:36:4c:ac:2f:17:5d:a3:7b:44:8d:96:3c:b9:68: dc:95:98:fe:7e:05:16:7f:f2:d5:b2:a7:bf:30:6b:47:64:f8: c1:93:04:ab:5a:9c:67:04:8d:81:b8:15:d0:4a:78:6f:e4:4e: dc:83:20:88:66:1a:26:00:3e:21:d8:d9:20:08:a0:64:a9:a5: 18:47:5d:8c:81:d0:03:5d:bf:6c:e0:fb:22:04:f4:33:3d:3f: 43:b7:38:bb:87:08:d4:5e:84:f9:c8:b0:f8:05:6d:01:73:fa: f4:5e:4a:79:f9:06:41:8d:99:17:a8:82:23:36:96:2a:31:07: 0f:03:63:c9:71:29:4b:11:a7:07:2b:1b:f0:30:8e:d5:fb:f4: c4:01:e1:dd:62:11:17:dc:6f:4f:55:b7:82:82:ab:28:02:01: 8d:81:ef:70:70:57:73:d7:7e:20:d4:5e:36:84:ac:75:7d:80: 96:9a:18:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUwNjE0MTQzMjI2WhcNMjUwNjIxMTQzMjI2WjAYMRYwFAYD VQQDEw02ODRkODdmYS1hNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCXHJPA52jXIWG6hjCWcvHvKTbT+2MuC/F5FE4VuySRMbZ2Kbv7TBUwJLzEm Fg0xIn/9jFti4XilFdPo66HmJVdPXDzbQe/sFfu7+e2ocfnbPphftsCPg3MYowxT EsV5NyCOYDO07AbyewKs1DsGA6VMTg/nUD91CwXuhW8ilrX4tu8ANRCgglCiQfgT pVAHYYG5uPbUk53PkS+LDnbalc1nsj8DoBLTOz248LMSoOFl1ZfQrP1mJqvWcLq6 c+mJqyO7+FFXTrkkG39WP94V0I+GbGoBisdaC7/YGTlZbmlAJe9tzf21baMxfgJP SzEQ/4PpC4RA8fueCMP0dDXBZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMND2d6p CoumHb/t8UKOQd819bHlMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+feNHlD+KyZXRUePkEdujjEUHUMU2NIPVj9iFctFpdkQWrlzJ+mxG 0MBDJJ9krlJjECY1J/hooGOxkyIinb/4bOUjteCmA88GGg4GNkysLxddo3tEjZY8 uWjclZj+fgUWf/LVsqe/MGtHZPjBkwSrWpxnBI2BuBXQSnhv5E7cgyCIZhomAD4h 2NkgCKBkqaUYR12MgdADXb9s4PsiBPQzPT9Dtzi7hwjUXoT5yLD4BW0Bc/r0Xkp5 +QZBjZkXqIIjNpYqMQcPA2PJcSlLEacHKxvwMI7V+/TEAeHdYhEX3G9PVbeCgqso AgGNge9wcFdz134g1F42hKx1fYCWmhht -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:46 2025 by rpki-client