$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: qgIGVA1Ahkr+CD6cVaL2/cMRwmJmyshsmRTQQNma3+Y= Subject key identifier: A8:C6:B9:CD:34:50:9F:E8:25:76:B3:6F:60:DF:A3:BA:0E:5A:1F:85 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: AD Signing time: Sat 21 Jun 2025 05:09:56 +0000 Manifest this update: Sat 21 Jun 2025 05:09:55 +0000 Manifest next update: Sat 28 Jun 2025 05:09:55 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: sJ2nQQeQsFDMgzVaQcNBjG87gyFyq1LRZgHKZYXnbO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: Jun 21 05:09:55 2025 GMT Not After : Jun 28 05:09:55 2025 GMT Subject: CN=68563ea3-bd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:d4:2b:46:69:6b:23:7d:7a:c7:fc:a9:b9: df:91:29:0a:24:5d:d7:b5:76:0c:81:91:d0:9e:0c: a5:37:83:9a:8f:9f:4b:74:17:40:5e:97:d9:c2:e1: a2:99:c8:bf:fa:c0:9f:45:66:7f:4e:65:30:6d:03: 60:de:2e:41:f2:c1:8e:74:85:32:2c:80:b6:8f:dc: 23:08:f5:f1:ba:75:2c:5d:29:c0:df:f4:2d:86:70: 8d:0d:a7:0a:ea:5d:3b:d2:47:70:29:31:58:f9:9c: d5:78:02:c1:62:6a:7f:8b:28:18:58:9d:71:e1:03: e5:cd:f9:38:40:e7:c8:dc:e7:bf:bc:60:06:8d:02: 2f:ac:da:c7:a3:7b:71:79:ef:46:36:ee:4f:b7:4d: 3f:f1:6b:6d:4a:a5:9a:05:0c:2f:90:f0:7b:af:09: 66:22:da:6f:a5:7a:f0:d4:6b:1f:04:52:63:19:34: 90:bb:20:42:5e:5e:ef:e2:b3:13:ac:cc:a0:2b:0a: c4:57:64:92:d1:3a:5c:c9:9a:c2:15:6a:e9:62:08: ef:cd:91:8b:69:f3:95:fb:7c:8d:ac:3f:09:eb:88: e6:74:a7:b3:64:c7:ee:06:a1:ce:67:2c:d7:e7:ea: 95:9d:8f:de:80:56:db:26:bc:e5:fb:cc:f8:64:53: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C6:B9:CD:34:50:9F:E8:25:76:B3:6F:60:DF:A3:BA:0E:5A:1F:85 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:f4:77:7f:e4:27:84:bc:e6:10:a9:16:79:c7:a0:e1:4b:c8: 55:f5:33:e9:6b:e5:25:32:90:c1:cd:f7:5a:85:75:85:34:f4: 37:83:43:ff:75:df:a6:0b:e4:13:91:38:fe:4e:0d:e4:6a:44: ab:a8:77:bc:86:bd:5c:99:b1:a2:b1:31:c0:bd:fa:6e:76:49: 63:d1:47:d9:f9:fd:4b:ce:3c:1a:40:49:8d:91:9d:ab:9e:34: 7a:4a:99:04:f1:45:dd:47:71:08:04:38:41:eb:57:e0:3a:73: 13:98:62:1f:a1:92:5e:ac:b1:78:28:4e:bb:d8:c6:be:7a:1b: b2:3f:7f:24:48:ad:e5:c4:e9:be:96:5d:17:00:33:12:d1:af: 94:6f:c1:7f:ce:1d:c7:dd:03:e3:b5:88:10:e0:bc:04:eb:95: ae:c0:0f:dc:10:93:b4:a7:67:9c:cc:86:c7:1e:91:9c:ce:37: 49:0b:cd:dd:60:39:12:29:bf:39:56:6a:ef:e9:8f:17:25:50: 93:96:35:14:03:b6:a5:7d:50:e2:6c:16:40:80:2d:e8:cd:a4: 85:b7:9e:d7:44:f6:e4:31:6c:e8:44:3f:30:25:ed:96:41:19: ff:43:04:4e:ff:56:c1:aa:36:74:67:c5:e0:07:16:62:1e:78: 25:00:60:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUwNjIxMDUwOTU1WhcNMjUwNjI4MDUwOTU1WjAYMRYwFAYD VQQDEw02ODU2M2VhMy1iZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXzUK0ZpayN9esf8qbnfkSkKJF3XtXYMgZHQngylN4Oaj59LdBdAXpfZwuGi mci/+sCfRWZ/TmUwbQNg3i5B8sGOdIUyLIC2j9wjCPXxunUsXSnA3/QthnCNDacK 6l070kdwKTFY+ZzVeALBYmp/iygYWJ1x4QPlzfk4QOfI3Oe/vGAGjQIvrNrHo3tx ee9GNu5Pt00/8WttSqWaBQwvkPB7rwlmItpvpXrw1GsfBFJjGTSQuyBCXl7v4rMT rMygKwrEV2SS0TpcyZrCFWrpYgjvzZGLafOV+3yNrD8J64jmdKezZMfuBqHOZyzX 5+qVnY/egFbbJrzl+8z4ZFO68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjGuc00 UJ/oJXazb2Dfo7oOWh+FMB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG9Hd/5CeEvOYQqRZ5x6DhS8hV9TPpa+UlMpDBzfdahXWFNPQ3g0P/ dd+mC+QTkTj+Tg3kakSrqHe8hr1cmbGisTHAvfpudklj0UfZ+f1LzjwaQEmNkZ2r njR6SpkE8UXdR3EIBDhB61fgOnMTmGIfoZJerLF4KE672Ma+ehuyP38kSK3lxOm+ ll0XADMS0a+Ub8F/zh3H3QPjtYgQ4LwE65WuwA/cEJO0p2eczIbHHpGczjdJC83d YDkSKb85Vmrv6Y8XJVCTljUUA7alfVDibBZAgC3ozaSFt57XRPbkMWzoRD8wJe2W QRn/QwRO/1bBqjZ0Z8XgBxZiHnglAGB0 -----END CERTIFICATE-----Generated at Sat Jun 21 10:56:29 2025 by rpki-client