$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: 3uiZZbQQS8nPZ2vhqqEcGtDH+2wqxUsp5/5CgesVsZ4= Subject key identifier: 08:BD:6F:5C:A5:1B:CE:03:A2:52:B3:6F:63:79:FF:F4:9E:AC:2A:FE Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 0142 Signing time: Tue 01 Jul 2025 04:49:22 +0000 Manifest this update: Tue 01 Jul 2025 04:49:22 +0000 Manifest next update: Tue 08 Jul 2025 04:49:22 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: sp8Fg2+DEyNyPLWqRpC1+s34c7fuNSxchCQqxtyglwI=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Jul 1 04:49:22 2025 GMT Not After : Jul 8 04:49:22 2025 GMT Subject: CN=686368d2-e58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:63:da:ae:9f:5b:24:d7:90:9f:1c:05:4a: b5:09:cc:d6:fb:78:af:fe:6f:4b:57:c0:37:e8:c2: f3:32:92:c9:54:19:a4:72:ec:03:d1:f3:4f:aa:09: b4:6c:8a:2b:19:c0:06:0b:a9:fa:1c:38:79:c5:75: b2:e9:9a:e4:8f:7a:ef:3b:77:28:72:62:7b:1a:20: f0:67:a2:5c:0b:0d:ab:f9:8b:5a:f7:fd:b6:86:cb: b5:54:6c:6d:e8:fa:83:91:2b:ae:dc:9c:df:e3:e0: e2:4e:5b:56:3e:79:21:f6:3d:65:db:75:fa:37:dc: 53:89:36:75:50:51:e5:e1:b1:80:07:d4:fc:86:9b: 28:44:f2:ee:91:e4:8c:90:06:8f:63:98:51:80:d6: 3a:22:9c:bd:d9:96:5e:65:94:9f:60:a2:e8:b0:d6: 9b:02:4a:be:89:45:41:d5:27:c8:65:80:a0:fd:61: c2:9f:a3:e7:7b:57:94:38:67:62:8e:db:02:11:4e: db:9d:91:d2:26:47:65:27:02:70:21:55:07:cb:89: d3:3d:26:63:73:e7:12:6b:56:1e:b4:91:e1:c3:43: e0:89:d7:22:cd:4e:5e:83:46:ef:d0:03:55:6e:e9: 3c:90:81:03:99:d4:72:dd:79:de:4c:18:f7:ea:15: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:6F:5C:A5:1B:CE:03:A2:52:B3:6F:63:79:FF:F4:9E:AC:2A:FE X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9f:79:ed:85:61:0c:f7:68:68:ac:44:55:d5:82:01:6a:a3: 4b:18:4f:4c:5f:47:f8:6e:0d:42:a1:e5:6c:90:48:c7:f9:83: ce:60:77:ec:ec:72:fe:ab:e3:0d:2c:20:5d:8d:11:9e:6d:3a: de:c7:b6:05:ae:f1:aa:c9:ac:37:79:41:5b:10:9b:24:e5:01: 08:c7:38:85:55:0a:57:37:fd:d5:4c:45:50:27:ca:ff:be:0e: af:19:6c:b5:a0:f9:9b:76:b5:76:2f:3f:a3:6e:5e:02:f0:9c: 94:2f:76:27:32:8a:ab:a5:b4:d5:1f:9c:19:f7:fb:0c:4c:72: e0:91:d7:05:af:f0:36:07:32:32:ea:a4:e2:49:78:e1:5a:6f: 18:ca:23:7f:0a:cd:19:47:c0:75:4b:38:df:40:7d:c8:78:ab: 1f:0e:9b:7c:60:00:48:e0:c9:40:c1:79:a7:b5:5a:3f:db:5c: f2:7c:bc:d2:ab:c9:c3:f0:dc:45:14:a0:76:bb:ef:9c:66:c3: 52:41:06:e1:2d:64:03:58:66:ab:72:01:45:da:b6:84:37:ab: ef:27:3c:e4:b8:d0:71:f6:63:87:ee:4f:95:35:3e:d5:ec:f4: 96:58:6d:ef:88:59:26:a2:22:80:31:7b:ba:a8:8a:4a:bb:84: 29:70:24:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUwNzAxMDQ0OTIyWhcNMjUwNzA4MDQ0OTIyWjAYMRYwFAYD VQQDEw02ODYzNjhkMi1lNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+5j2q6fWyTXkJ8cBUq1CczW+3iv/m9LV8A36MLzMpLJVBmkcuwD0fNPqgm0 bIorGcAGC6n6HDh5xXWy6Zrkj3rvO3cocmJ7GiDwZ6JcCw2r+Yta9/22hsu1VGxt 6PqDkSuu3Jzf4+DiTltWPnkh9j1l23X6N9xTiTZ1UFHl4bGAB9T8hpsoRPLukeSM kAaPY5hRgNY6Ipy92ZZeZZSfYKLosNabAkq+iUVB1SfIZYCg/WHCn6Pne1eUOGdi jtsCEU7bnZHSJkdlJwJwIVUHy4nTPSZjc+cSa1YetJHhw0PgidcizU5eg0bv0ANV buk8kIEDmdRy3XneTBj36hUdIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi9b1yl G84DolKzb2N5//SerCr+MB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0n3nthWEM92horERV1YIBaqNLGE9MX0f4bg1CoeVskEjH+YPOYHfs 7HL+q+MNLCBdjRGebTrex7YFrvGqyaw3eUFbEJsk5QEIxziFVQpXN/3VTEVQJ8r/ vg6vGWy1oPmbdrV2Lz+jbl4C8JyUL3YnMoqrpbTVH5wZ9/sMTHLgkdcFr/A2BzIy 6qTiSXjhWm8YyiN/Cs0ZR8B1SzjfQH3IeKsfDpt8YABI4MlAwXmntVo/21zyfLzS q8nD8NxFFKB2u++cZsNSQQbhLWQDWGarcgFF2raEN6vvJzzkuNBx9mOH7k+VNT7V 7PSWWG3viFkmoiKAMXu6qIpKu4QpcCQ+ -----END CERTIFICATE-----Generated at Wed Jul 2 15:22:19 2025 by rpki-client