$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: xS0w2PuH9A0nfkY1uYaYYrMD6WyxJHhFrGAP5PpKFS8= Subject key identifier: 35:A2:7F:FA:77:58:6A:53:0E:F1:DC:9E:19:A9:33:00:E3:7D:4E:34 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 016D Signing time: Tue 01 Jul 2025 04:19:09 +0000 Manifest this update: Tue 01 Jul 2025 04:19:08 +0000 Manifest next update: Tue 08 Jul 2025 04:19:08 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: S6W2kRDnJV9GUF8alorO+f9p4aiFcOlSnjDvr2S+mdw=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Jul 1 04:19:08 2025 GMT Not After : Jul 8 04:19:08 2025 GMT Subject: CN=686361bd-8bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:dc:ab:af:71:c4:0e:f4:9b:8e:b5:15:e4: a0:4c:bd:45:0d:82:ba:b0:72:f0:d9:a9:17:c1:95: 08:23:37:2c:c0:73:69:97:74:8c:a7:ca:71:2f:c2: cb:e4:80:28:fb:7b:69:3c:ab:74:fa:fb:44:ec:c6: 08:2e:92:82:38:cc:fa:2e:29:58:fa:da:9b:b8:77: 4a:20:08:63:7b:92:c0:6d:98:dc:7a:48:86:7b:07: 7f:78:0d:96:77:14:01:49:95:81:15:77:4d:59:af: 6d:f4:b1:45:e2:a3:0f:1b:1e:b5:46:ca:61:c4:d4: 74:35:6e:b3:9e:ee:01:37:5e:0f:88:ee:99:11:39: 83:67:fe:ab:b1:c4:30:ca:b0:68:cb:e7:04:b8:e1: 54:f0:12:bc:ee:ea:8e:8e:ae:92:3e:c4:34:e3:87: 90:11:57:60:0a:9d:78:64:42:f4:72:88:12:bf:24: 5a:00:b5:55:a5:f8:cf:93:90:38:f2:04:20:37:3a: 49:78:db:28:ac:77:5b:9d:48:e2:20:e2:5d:ff:94: c8:00:a4:8e:98:8c:03:77:fb:42:7f:0f:58:42:1c: 93:93:ed:ee:99:11:57:6f:a1:3c:a7:35:b4:e1:32: 7c:a6:8d:1a:b0:de:d0:6d:2c:b0:d5:d7:43:8f:b8: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:7F:FA:77:58:6A:53:0E:F1:DC:9E:19:A9:33:00:E3:7D:4E:34 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:68:a2:5c:52:7b:87:b7:d2:85:44:74:8e:08:83:34:2b: 54:9c:20:6a:1d:b0:7f:62:58:7c:8e:01:40:6c:c8:f0:c6:27: df:d1:e7:69:2e:33:bb:05:de:56:bf:34:23:fc:d4:82:cd:9c: fd:90:64:57:3d:b4:1f:19:16:49:d3:e6:9a:2f:24:22:6b:73: 88:e9:94:d6:dd:7c:d7:cf:1b:e7:9f:7e:b3:ed:69:33:19:7a: c6:d3:16:02:b0:e7:37:c3:05:a2:ee:ec:d8:1e:8c:bb:9d:ae: a0:96:a8:a1:fd:50:b7:8c:cd:bb:6d:33:c4:8e:51:d1:79:99: 8f:63:b3:3f:73:46:59:e4:a3:bb:e4:31:de:4d:9f:26:f7:4d: 7a:90:24:27:37:a1:3b:8a:60:ca:9b:5c:65:7a:76:e5:ee:c4: d9:23:2d:53:f3:be:31:cc:e6:ca:d8:c8:6d:c1:4e:a9:5a:58: e2:c6:3b:c6:a8:a4:df:20:4d:06:88:cb:cb:a2:a1:b7:24:e7: bf:c9:aa:aa:96:c9:9b:37:00:9c:44:0a:d5:6c:58:e6:66:3c: 21:6c:76:7a:49:6f:f7:f8:14:2e:7f:42:f9:99:27:07:28:56: dd:49:a2:a1:89:29:87:25:65:a5:89:db:25:96:b2:c4:b3:81: 12:cf:85:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUwNzAxMDQxOTA4WhcNMjUwNzA4MDQxOTA4WjAYMRYwFAYD VQQDEw02ODYzNjFiZC04YmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjDcq69xxA70m461FeSgTL1FDYK6sHLw2akXwZUIIzcswHNpl3SMp8pxL8LL 5IAo+3tpPKt0+vtE7MYILpKCOMz6LilY+tqbuHdKIAhje5LAbZjcekiGewd/eA2W dxQBSZWBFXdNWa9t9LFF4qMPGx61RsphxNR0NW6znu4BN14PiO6ZETmDZ/6rscQw yrBoy+cEuOFU8BK87uqOjq6SPsQ044eQEVdgCp14ZEL0cogSvyRaALVVpfjPk5A4 8gQgNzpJeNsorHdbnUjiIOJd/5TIAKSOmIwDd/tCfw9YQhyTk+3umRFXb6E8pzW0 4TJ8po0asN7QbSyw1ddDj7gatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWif/p3 WGpTDvHcnhmpMwDjfU40MB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw12iiXFJ7h7fShUR0jgiDNCtUnCBqHbB/Ylh8jgFAbMjwxiff0edp LjO7Bd5WvzQj/NSCzZz9kGRXPbQfGRZJ0+aaLyQia3OI6ZTW3XzXzxvnn36z7Wkz GXrG0xYCsOc3wwWi7uzYHoy7na6glqih/VC3jM27bTPEjlHReZmPY7M/c0ZZ5KO7 5DHeTZ8m9016kCQnN6E7imDKm1xlenbl7sTZIy1T874xzObK2MhtwU6pWljixjvG qKTfIE0GiMvLoqG3JOe/yaqqlsmbNwCcRArVbFjmZjwhbHZ6SW/3+BQuf0L5mScH KFbdSaKhiSmHJWWlidsllrLEs4ESz4Xe -----END CERTIFICATE-----Generated at Wed Jul 2 06:18:52 2025 by rpki-client