$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: BqUD8liiSql5OTGxmVvkWnxVfjS1Acxl1xx/x42A+Do= Subject key identifier: 10:57:95:B8:51:82:DB:0D:0C:5A:2C:97:6D:B1:D9:C0:63:93:29:2C Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: 6A Signing time: Tue 13 May 2025 06:07:27 +0000 Manifest this update: Tue 13 May 2025 06:07:27 +0000 Manifest next update: Tue 20 May 2025 06:07:27 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: fQEN6DORzChksOjZlBur6FIT12HxBiIGbHRjxwqlFic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: May 13 06:07:27 2025 GMT Not After : May 20 06:07:27 2025 GMT Subject: CN=6822e19f-a4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:58:9c:d2:4f:a9:10:7c:84:88:fb:84:34: 91:da:95:2a:14:e3:bd:41:82:25:8e:86:b7:59:79: fd:bf:d3:96:3b:17:3f:1d:3c:76:d7:32:03:6e:66: d1:63:fe:82:9f:04:ab:01:15:3f:27:1e:ba:af:9c: f8:5e:c1:81:8e:9b:39:96:6d:86:0a:5b:05:35:80: c4:d5:ae:36:cd:9a:01:d9:61:ad:2e:a0:d1:c9:34: 85:c8:b5:49:12:1c:3b:71:be:38:28:61:77:b0:9d: b9:01:4e:b6:04:d0:58:00:15:9c:5f:03:81:e9:7c: b1:e2:f7:e1:09:f6:f7:b9:c0:60:ff:9b:bc:e1:9e: b5:23:36:7a:86:41:ad:58:e5:ab:e3:61:73:d3:d8: 23:07:0e:7b:e8:bd:19:81:c6:e8:c2:5a:57:c8:73: 5d:67:30:fd:1a:2a:0b:01:e0:ba:e7:b4:36:22:8f: 77:99:a3:0b:80:ac:c8:77:28:cb:3e:d6:d1:ea:2f: 98:d3:4d:65:f2:36:42:e0:ed:2e:96:3a:f0:5a:98: 3a:ec:f6:f4:d4:8d:6f:af:b8:e6:24:ea:2f:5a:4b: 4c:db:c3:38:84:b1:c1:90:3e:03:85:08:65:35:bc: d2:26:f7:35:c0:fd:ba:55:67:10:05:4b:ae:9f:f2: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:57:95:B8:51:82:DB:0D:0C:5A:2C:97:6D:B1:D9:C0:63:93:29:2C X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:3a:b1:23:fe:62:ea:d0:c7:23:75:93:67:40:f9:75:6d: 24:07:58:dc:09:9d:f4:a4:c6:92:0b:d9:99:f7:40:17:bf:10: 6e:26:a7:01:89:8e:5b:ad:af:3c:65:5a:cb:07:3b:ff:c6:69: 97:4b:e9:1e:87:3f:7b:a6:14:ab:04:fa:eb:f8:db:8b:45:31: 24:f7:ab:76:02:b5:40:4f:b6:42:8c:68:fe:86:9a:52:20:d8: 7e:99:89:98:ff:b4:9e:a0:e8:9d:83:1f:fa:c5:7b:56:1f:d7: db:eb:93:fd:f0:54:bb:a1:42:85:ff:18:3a:78:0f:e9:1f:6c: 3e:a5:c0:14:84:37:3f:f4:c8:68:e6:c1:83:03:37:77:b8:cb: 6d:e3:48:f8:b8:71:2d:b4:26:e0:b1:77:83:c1:1b:a2:c7:47: 8f:27:ab:50:d8:24:e2:86:ed:38:5f:df:f3:db:57:79:88:1e: b6:01:21:b1:aa:7f:29:91:d9:2e:a4:99:e4:9b:11:79:a7:3b: 89:17:1a:cb:14:08:cc:9f:49:46:74:75:73:70:79:f4:0f:41: 78:6c:98:00:b8:62:38:66:59:96:d1:1b:de:8c:5d:0e:d1:bb: a7:19:de:48:d5:82:13:53:9c:8f:51:68:96:5f:2e:30:28:65: 0a:9c:08:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoRjUzQkNGQjhDNzJDMUEzQUI2NUUwRUE4OEUzQTFBMjFE MjhDRDE2MTAeFw0yNTA1MTMwNjA3MjdaFw0yNTA1MjAwNjA3MjdaMBgxFjAUBgNV BAMTDTY4MjJlMTlmLWE0Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW8lic0k+pEHyEiPuENJHalSoU471BgiWOhrdZef2/05Y7Fz8dPHbXMgNuZtFj /oKfBKsBFT8nHrqvnPhewYGOmzmWbYYKWwU1gMTVrjbNmgHZYa0uoNHJNIXItUkS HDtxvjgoYXewnbkBTrYE0FgAFZxfA4HpfLHi9+EJ9ve5wGD/m7zhnrUjNnqGQa1Y 5avjYXPT2CMHDnvovRmBxujCWlfIc11nMP0aKgsB4LrntDYij3eZowuArMh3KMs+ 1tHqL5jTTWXyNkLg7S6WOvBamDrs9vTUjW+vuOYk6i9aS0zbwziEscGQPgOFCGU1 vNIm9zXA/bpVZxAFS66f8jOtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEFeVuFGC 2w0MWiyXbbHZwGOTKSwwHwYDVR0jBBgwFoAU9TvPuMcsGjq2Xg6ojjoaIdKM0WEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzFFNEYzQTVDOEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVR2UHVNY3NHanEyWGc2b2pqb2FJZEtNMFdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzFFNEYzQTVDOEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2px MlhnNm9qam9hSWRLTTBXRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFthOrEj/mLq0McjdZNnQPl1bSQHWNwJnfSkxpIL2Zn3QBe/EG4mpwGJ jlutrzxlWssHO//GaZdL6R6HP3umFKsE+uv424tFMST3q3YCtUBPtkKMaP6GmlIg 2H6ZiZj/tJ6g6J2DH/rFe1Yf19vrk/3wVLuhQoX/GDp4D+kfbD6lwBSENz/0yGjm wYMDN3e4y23jSPi4cS20JuCxd4PBG6LHR48nq1DYJOKG7Thf3/PbV3mIHrYBIbGq fymR2S6kmeSbEXmnO4kXGssUCMyfSUZ0dXNwefQPQXhsmAC4YjhmWZbRG96MXQ7R u6cZ3kjVghNTnI9RaJZfLjAoZQqcCAA= -----END CERTIFICATE-----Generated at Wed May 14 21:09:53 2025 by rpki-client