$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: exRumT+gnUe0bCQG7g4Zz4Hd+tQo889eeCfTezqmanQ= Subject key identifier: AF:22:94:09:83:10:45:10:E6:AE:62:34:DC:EB:BC:94:1F:78:2B:C4 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0129 Signing time: Sun 11 May 2025 03:30:13 +0000 Manifest this update: Sun 11 May 2025 03:30:13 +0000 Manifest next update: Sun 18 May 2025 03:30:13 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: wMzc/w/AqQZRMzPjwVqLj7aS7oe+pwd2ljtjE/S2BXM=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: May 11 03:30:13 2025 GMT Not After : May 18 03:30:13 2025 GMT Subject: CN=682019c5-5a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:c7:f7:49:63:0f:b6:34:3a:14:41:d7:0f: 1a:f7:33:a5:9b:9d:4a:0d:44:16:e8:1b:83:56:ec: 09:fa:a3:fc:f3:03:aa:cf:21:e4:7c:b0:e2:3a:7f: ae:07:3a:9e:4e:23:bf:82:17:b9:5a:05:0a:bc:4f: b8:29:eb:2c:24:8b:b0:17:42:65:03:75:93:b8:14: 25:f2:a2:3c:e7:89:6e:c6:b6:d6:5f:e9:f2:4a:7b: a8:0e:34:8e:e9:b2:e0:1d:00:ce:3f:69:3f:1b:50: 78:3b:d1:23:eb:f6:77:9a:4a:20:63:e3:3d:76:18: 52:76:87:ed:41:23:b7:15:83:fd:09:5c:d9:04:d8: a6:9a:4f:2d:68:d2:a0:9c:70:19:14:1e:f6:3d:9b: ec:f8:62:a6:ad:f5:bf:2b:1a:83:93:52:54:20:7b: d1:b8:66:9a:e2:00:10:1a:b2:c8:62:bd:5f:b0:70: 04:7c:8b:02:eb:39:1d:87:29:53:12:69:67:ce:55: 71:98:74:c1:2b:bc:93:00:23:c7:67:50:9b:c8:e5: ea:3a:19:a6:15:fd:8d:47:4a:4f:96:ba:8d:c4:3a: fd:61:32:7d:64:8b:bf:95:ec:7d:53:f6:86:b1:6c: e5:ec:cd:16:d1:8b:b9:49:09:3f:1d:10:5f:b2:14: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:22:94:09:83:10:45:10:E6:AE:62:34:DC:EB:BC:94:1F:78:2B:C4 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4e:5e:fd:b7:e6:54:76:e4:de:53:97:9d:bd:eb:84:86:9a: c5:85:0f:8f:36:7b:ea:ba:54:03:3a:6c:6e:5c:a3:7e:3e:fe: f6:6c:fc:59:d2:87:4b:93:1e:0b:78:1c:e9:f3:27:bf:f3:46: 4d:a4:16:37:fa:c1:dc:db:68:b4:4b:a0:d1:f2:ed:7c:76:41: 80:c3:63:fe:db:25:90:ef:f1:50:a6:25:79:b1:dc:58:8e:a3: bc:08:33:be:f4:f9:09:e2:b6:11:90:19:21:b4:fe:ab:94:dc: e6:a9:61:8d:59:4d:70:c3:b8:2a:cc:83:42:05:45:a2:b6:ad: 8a:81:89:aa:02:56:33:89:f3:11:6b:4d:90:d1:b0:18:8b:12: 07:cd:19:7f:bb:9d:17:54:f0:34:36:b0:d2:c9:df:c7:cb:35: 9f:81:a5:51:f1:28:88:36:8c:fc:d0:ce:81:73:ee:c9:71:1c: a7:c0:bf:23:7b:ac:6f:c1:f4:f6:d3:b8:2b:25:97:f9:37:65: b3:37:06:80:3d:66:98:92:2f:37:f7:ec:8e:a7:ac:d4:41:46: 2b:ee:6b:53:61:d2:e2:86:b1:b6:92:e2:df:d2:1b:2c:80:7f: ed:25:4e:86:ce:0b:50:9c:46:10:ed:3f:b3:e8:2c:bc:4d:f5: 05:02:3b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUwNTExMDMzMDEzWhcNMjUwNTE4MDMzMDEzWjAYMRYwFAYD VQQDEw02ODIwMTljNS01YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhfH90ljD7Y0OhRB1w8a9zOlm51KDUQW6BuDVuwJ+qP88wOqzyHkfLDiOn+u BzqeTiO/ghe5WgUKvE+4KessJIuwF0JlA3WTuBQl8qI854luxrbWX+nySnuoDjSO 6bLgHQDOP2k/G1B4O9Ej6/Z3mkogY+M9dhhSdoftQSO3FYP9CVzZBNimmk8taNKg nHAZFB72PZvs+GKmrfW/KxqDk1JUIHvRuGaa4gAQGrLIYr1fsHAEfIsC6zkdhylT EmlnzlVxmHTBK7yTACPHZ1CbyOXqOhmmFf2NR0pPlrqNxDr9YTJ9ZIu/lex9U/aG sWzl7M0W0Yu5SQk/HRBfshTE1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8ilAmD EEUQ5q5iNNzrvJQfeCvEMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoTl79t+ZUduTeU5edveuEhprFhQ+PNnvqulQDOmxuXKN+Pv72bPxZ 0odLkx4LeBzp8ye/80ZNpBY3+sHc22i0S6DR8u18dkGAw2P+2yWQ7/FQpiV5sdxY jqO8CDO+9PkJ4rYRkBkhtP6rlNzmqWGNWU1ww7gqzINCBUWitq2KgYmqAlYzifMR a02Q0bAYixIHzRl/u50XVPA0NrDSyd/HyzWfgaVR8SiINoz80M6Bc+7JcRynwL8j e6xvwfT207grJZf5N2WzNwaAPWaYki839+yOp6zUQUYr7mtTYdLihrG2kuLf0hss gH/tJU6GzgtQnEYQ7T+z6Cy8TfUFAjv3 -----END CERTIFICATE-----Generated at Sun May 11 19:08:51 2025 by rpki-client