$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: i/4xyNM+2i9rNz/ZL+zVJH2LwCbs4cYvzqTCSjqIc0Y= Subject key identifier: 29:2B:71:6B:2E:95:04:00:80:1F:F3:AC:2B:EA:27:3D:F5:7F:8D:B8 Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 0986 Signing time: Mon 30 Jun 2025 20:17:08 +0000 Manifest this update: Mon 30 Jun 2025 20:17:08 +0000 Manifest next update: Mon 07 Jul 2025 20:17:08 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: +bJ8pgz3z13s3Fd1IY3+8mKMxl5q9KE+9Nx+rWbIU9g=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: Jun 30 20:17:08 2025 GMT Not After : Jul 7 20:17:08 2025 GMT Subject: CN=6862f0c4-1298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:23:0f:10:4f:45:5e:e9:ef:4c:d6:60:97: 86:04:fa:03:09:2c:9b:4d:0b:67:8a:57:39:1d:c3: 6d:65:fd:ca:16:ee:0d:ce:83:96:b1:9d:47:0f:93: 21:72:7e:1c:81:ba:6d:7f:e3:6b:c9:ca:5b:af:2e: 95:3d:69:73:db:8d:40:a0:eb:34:c8:ad:4b:1f:08: 2f:49:33:a1:e8:bc:bf:f3:08:e1:e8:c0:d0:41:96: f1:25:65:e9:be:15:b8:54:ed:27:25:9d:d3:19:ad: c9:41:1d:71:d7:ae:fd:dc:39:d3:3b:61:14:a8:5b: ba:64:cc:74:a1:d9:31:d1:6e:7b:5c:58:3e:01:a5: 8f:73:95:b0:78:9d:0b:93:ea:f2:72:ea:b0:16:ec: 78:63:5c:c2:e5:f4:8f:a4:c0:00:79:b8:9c:0f:88: dc:82:3b:bf:61:79:09:52:11:c9:05:22:e3:c8:b4: 8e:66:31:ca:77:19:10:13:95:33:94:f7:a4:5b:67: 90:b8:ab:39:87:cd:53:29:90:a6:a5:b4:74:9a:32: de:20:d4:74:a3:88:74:50:d3:2a:2d:4e:00:40:6e: a1:86:68:91:8a:b2:06:5e:44:79:08:e8:c9:58:80: f9:00:41:09:37:86:72:66:ca:6c:61:2b:1a:fc:86: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:71:6B:2E:95:04:00:80:1F:F3:AC:2B:EA:27:3D:F5:7F:8D:B8 X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e7:97:2c:81:a4:18:e8:58:86:b9:9e:2a:6a:e3:1b:5a:0f: 4e:c5:b9:85:11:54:3e:60:d8:09:45:31:78:d4:2b:9a:50:e0: e9:44:16:17:cb:8f:bc:c4:c2:77:6b:3e:4e:c0:4b:f0:71:72: 6a:1f:b1:3e:77:f9:83:21:59:7a:de:84:e4:72:e2:5c:47:a3: f7:43:47:51:0a:af:8a:f1:42:48:2a:45:ed:6e:71:9b:40:bb: 7f:d1:6b:88:b7:29:af:c9:e9:74:b7:ff:29:48:bc:4b:da:0f: 0f:54:9e:d4:5a:36:c0:b2:9e:4f:e8:18:2a:22:4a:00:9b:c7: 9c:f2:ae:49:23:7f:c9:48:86:06:c8:4e:b2:bb:58:79:69:7c: 3b:b5:ac:a8:e7:86:4e:38:f5:ba:9d:35:f4:fd:cb:29:1b:fc: f4:13:ee:d5:b9:b0:cf:1e:bb:bb:e9:ea:7c:68:a0:b1:5b:c2: b4:f3:33:38:c9:c1:17:9a:42:51:08:9e:18:4f:ca:12:58:95: 6a:18:27:5f:c2:4d:0c:86:af:b1:aa:63:ad:5d:74:87:bb:13: 1b:ef:02:6e:ab:41:f8:ac:cf:fe:28:e4:24:34:63:95:82:d4: bb:99:99:4f:5c:8f:76:64:79:3a:dc:b9:16:a0:cc:f4:06:45: 3d:c9:09:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjUwNjMwMjAxNzA4WhcNMjUwNzA3MjAxNzA4WjAYMRYwFAYD VQQDEw02ODYyZjBjNC0xMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7ojDxBPRV7p70zWYJeGBPoDCSybTQtnilc5HcNtZf3KFu4NzoOWsZ1HD5Mh cn4cgbptf+Nrycpbry6VPWlz241AoOs0yK1LHwgvSTOh6Ly/8wjh6MDQQZbxJWXp vhW4VO0nJZ3TGa3JQR1x16793DnTO2EUqFu6ZMx0odkx0W57XFg+AaWPc5WweJ0L k+rycuqwFux4Y1zC5fSPpMAAebicD4jcgju/YXkJUhHJBSLjyLSOZjHKdxkQE5Uz lPekW2eQuKs5h81TKZCmpbR0mjLeINR0o4h0UNMqLU4AQG6hhmiRirIGXkR5COjJ WID5AEEJN4ZyZspsYSsa/IbwTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkrcWsu lQQAgB/zrCvqJz31f424MB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ55csgaQY6FiGuZ4qauMbWg9OxbmFEVQ+YNgJRTF41CuaUODpRBYX y4+8xMJ3az5OwEvwcXJqH7E+d/mDIVl63oTkcuJcR6P3Q0dRCq+K8UJIKkXtbnGb QLt/0WuItymvyel0t/8pSLxL2g8PVJ7UWjbAsp5P6BgqIkoAm8ec8q5JI3/JSIYG yE6yu1h5aXw7tayo54ZOOPW6nTX0/cspG/z0E+7VubDPHru76ep8aKCxW8K08zM4 ycEXmkJRCJ4YT8oSWJVqGCdfwk0Mhq+xqmOtXXSHuxMb7wJuq0H4rM/+KOQkNGOV gtS7mZlPXI92ZHk63LkWoMz0BkU9yQlD -----END CERTIFICATE-----Generated at Wed Jul 2 03:34:38 2025 by rpki-client