$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: 5JdJOh4QlbPF3GUvk7ZSYDMtQjsa8NPSMPVFclEE4ms= Subject key identifier: 58:12:35:D7:A1:B3:1F:B7:DA:30:4C:52:90:0A:E6:E6:50:4A:00:1F Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 0638 Signing time: Wed 02 Jul 2025 22:59:53 +0000 Manifest this update: Wed 02 Jul 2025 22:59:52 +0000 Manifest next update: Wed 09 Jul 2025 22:59:52 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: qdmaVYeA9tFdwWf0d81RwGd6qCMvBJGxNEanTgyA5mA=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Jul 2 22:59:52 2025 GMT Not After : Jul 9 22:59:52 2025 GMT Subject: CN=6865b9e9-edeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:cd:f8:d2:a8:36:a6:54:a1:76:f5:6e:2d: e8:c0:b3:27:61:94:c7:d3:9b:d6:f3:1e:8b:5d:d1: 7a:c5:6a:fa:1f:43:ca:e8:99:62:e3:21:d6:2a:3b: ca:dc:3f:ec:09:fe:03:69:c4:e4:54:ad:b9:ca:44: b4:7a:26:c1:18:c4:02:67:64:45:50:34:d3:60:06: 6a:ce:8e:8e:4b:ca:71:1a:ca:1e:a8:5f:d8:2d:a9: fc:0f:9c:fa:3b:cc:9b:06:3c:8d:61:81:f7:f1:ef: 96:33:85:3e:ac:f8:0e:4e:f4:92:29:74:cd:4d:a2: a6:f2:0c:42:39:0b:d1:1f:69:7a:3c:e8:d1:ee:9a: 28:30:af:d4:68:84:ff:65:da:43:76:9a:3a:e4:ab: 39:e3:89:ba:58:1c:4e:c8:ff:52:da:07:9b:58:ac: 5b:30:63:a3:62:77:d0:2f:ae:90:02:d2:f4:34:ce: b4:16:31:77:d6:b7:e6:3d:fc:4d:31:f9:93:d0:b1: d3:54:74:c4:e4:3e:ed:42:09:f9:c0:54:fd:de:5a: 82:82:01:86:f7:20:97:7d:a3:14:a8:bc:f6:d4:d8: c3:72:64:8a:97:be:4d:8e:3c:40:a0:f7:22:1a:19: 40:f7:54:a9:9c:35:ee:ea:81:8a:c5:fb:ee:c5:e5: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:35:D7:A1:B3:1F:B7:DA:30:4C:52:90:0A:E6:E6:50:4A:00:1F X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:23:c0:da:54:f7:10:91:8b:36:27:f1:76:b4:af:a8:3c:88: 39:b5:7f:e2:be:1e:91:f7:4f:30:af:45:aa:bb:5f:9e:08:af: 64:c5:c1:47:53:4a:e1:1e:0b:c1:c9:5b:2e:f7:69:35:81:f3: ce:7c:cb:6e:60:e9:cb:26:73:fe:32:c4:53:41:cf:f0:2f:5e: 73:29:04:fc:96:59:a1:87:d6:03:b9:5f:33:67:80:36:ed:84: eb:b4:92:30:88:23:a4:fd:32:65:34:a1:c9:48:eb:46:70:2b: 7f:85:75:db:83:5c:ee:0b:d3:3d:43:a6:5b:10:9e:c6:b1:57: a2:03:a5:bb:e9:47:35:6a:89:5f:8a:77:95:ab:2e:d6:e8:81: c1:57:53:d1:7c:eb:3e:dd:e0:92:43:f2:46:6f:0b:f3:d6:c9: 6f:e8:60:ca:84:78:be:75:cb:20:31:cb:51:00:c0:f1:8f:00: 9c:84:fb:1d:6c:de:0d:65:2e:5c:d8:80:a0:42:b1:0c:7b:24: e9:b1:9e:09:5b:27:e7:2c:0d:19:d9:ac:78:5e:fc:93:d0:1d: ac:31:5d:19:8e:1e:09:85:b8:e2:c9:14:44:a9:b6:8b:9a:cf: 0b:d8:b3:50:dd:94:ad:16:23:09:5e:27:fb:c9:a0:ee:fb:13: d4:2f:5f:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwNzAyMjI1OTUyWhcNMjUwNzA5MjI1OTUyWjAYMRYwFAYD VQQDEw02ODY1YjllOS1lZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAbN+NKoNqZUoXb1bi3owLMnYZTH05vW8x6LXdF6xWr6H0PK6Jli4yHWKjvK 3D/sCf4DacTkVK25ykS0eibBGMQCZ2RFUDTTYAZqzo6OS8pxGsoeqF/YLan8D5z6 O8ybBjyNYYH38e+WM4U+rPgOTvSSKXTNTaKm8gxCOQvRH2l6POjR7pooMK/UaIT/ ZdpDdpo65Ks544m6WBxOyP9S2gebWKxbMGOjYnfQL66QAtL0NM60FjF31rfmPfxN MfmT0LHTVHTE5D7tQgn5wFT93lqCggGG9yCXfaMUqLz21NjDcmSKl75NjjxAoPci GhlA91SpnDXu6oGKxfvuxeVjfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgSNdeh sx+32jBMUpAK5uZQSgAfMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArI8DaVPcQkYs2J/F2tK+oPIg5tX/ivh6R908wr0Wqu1+eCK9kxcFH U0rhHgvByVsu92k1gfPOfMtuYOnLJnP+MsRTQc/wL15zKQT8llmhh9YDuV8zZ4A2 7YTrtJIwiCOk/TJlNKHJSOtGcCt/hXXbg1zuC9M9Q6ZbEJ7GsVeiA6W76Uc1aolf ineVqy7W6IHBV1PRfOs+3eCSQ/JGbwvz1slv6GDKhHi+dcsgMctRAMDxjwCchPsd bN4NZS5c2ICgQrEMeyTpsZ4JWyfnLA0Z2ax4XvyT0B2sMV0Zjh4JhbjiyRREqbaL ms8L2LNQ3ZStFiMJXif7yaDu+xPUL19x -----END CERTIFICATE-----Generated at Thu Jul 3 05:03:40 2025 by rpki-client