$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: H5sEbhZQmeoOwTTwTx0gMSfPTocno8Ji09PcUky5IDQ= Subject key identifier: 54:39:FC:65:BC:6C:90:7D:C5:D1:B5:C7:9B:E1:14:85:D9:E9:D1:52 Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 018E Signing time: Tue 13 May 2025 02:48:17 +0000 Manifest this update: Tue 13 May 2025 02:48:16 +0000 Manifest next update: Tue 20 May 2025 02:48:16 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: RTw1CuhZuWjCFVjVFDchkvXyC9NqQx6fCzJhoAYfZqE=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: May 13 02:48:16 2025 GMT Not After : May 20 02:48:16 2025 GMT Subject: CN=6822b2f1-f09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:fd:da:5f:44:ea:0b:66:8c:70:8b:ae:7c: 4c:91:b3:ed:6e:63:29:ab:b0:04:38:38:8f:e1:85: 36:83:6b:1c:19:82:1e:a6:70:2c:3b:c3:bd:a2:05: 1e:12:70:ab:23:6d:42:62:fc:76:c1:f1:e2:bf:3b: fe:ec:8a:52:71:f9:18:2b:4d:64:0b:7c:ce:65:e6: c0:83:1b:b3:78:29:37:3e:8b:99:62:6a:5a:ab:90: ba:87:54:90:72:35:e7:cf:7a:a4:d4:2d:c2:5a:90: 9e:b5:7e:3d:93:7e:2f:70:2b:41:5c:7a:d0:70:5a: de:4e:b1:2b:35:6c:45:06:46:77:ba:95:ac:e4:3f: 6e:bd:13:7f:f3:40:a7:81:1b:a2:4f:58:1b:aa:49: 50:81:02:37:b4:27:69:f0:ad:3d:2a:b2:0c:b1:86: 50:1d:3f:14:00:9b:0d:b2:68:df:32:ff:64:7b:d1: d9:22:60:44:ba:12:d2:b8:8f:69:ed:c2:4b:86:22: 78:9a:cd:08:03:c9:9f:f5:2c:d9:2d:52:4d:0b:cb: 0a:c1:94:f6:98:6a:42:9e:49:de:53:44:10:11:fa: df:9a:e4:19:56:46:37:07:77:71:49:3b:2a:2d:2c: b9:5a:08:b2:0a:ad:66:da:9a:59:67:4b:74:ce:d4: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:FC:65:BC:6C:90:7D:C5:D1:B5:C7:9B:E1:14:85:D9:E9:D1:52 X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:39:f2:f8:b9:20:1e:3e:fc:d8:dc:08:ea:24:68:32:65:0e: 89:39:84:02:13:78:1b:5a:ff:2c:fe:12:2b:fe:f6:22:2c:4b: 5e:ab:af:5c:c7:b5:2a:d2:4c:6c:f1:f2:cf:83:21:06:5e:df: eb:5f:76:8f:91:07:37:7f:85:dd:9a:25:85:b4:9e:1c:eb:bb: c0:a2:0c:f2:f4:70:c5:6d:f2:df:2e:46:fc:b6:96:62:9e:e6: 0d:d0:a6:4b:c7:59:e5:f9:ef:64:14:23:94:f5:eb:43:ca:68: b2:cf:33:be:09:3c:85:21:9c:b6:1a:01:34:f3:56:76:c7:0b: 48:be:04:1c:0b:b6:d3:92:1e:1d:b7:77:c6:26:f2:22:5b:7f: 55:40:1f:06:24:b1:d8:7a:6d:4f:02:78:0c:43:bc:f8:d2:ea: b9:54:c0:3f:6b:2d:62:12:cb:8a:d6:e7:06:a2:c1:a6:0c:66: bc:5f:34:8f:b1:65:31:7a:6e:41:c2:af:bf:3c:6c:c4:e8:41: 6e:e0:1b:9d:0b:45:39:5c:da:50:f8:23:93:47:5d:2a:b1:f8: 03:d2:72:62:7b:df:80:30:a9:df:0e:39:b1:64:e7:8c:38:51: 48:5e:a2:4e:11:f0:48:cf:d4:6f:23:d2:61:43:4d:3b:cd:c3: 91:86:cc:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwNTEzMDI0ODE2WhcNMjUwNTIwMDI0ODE2WjAYMRYwFAYD VQQDEw02ODIyYjJmMS1mMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTv92l9E6gtmjHCLrnxMkbPtbmMpq7AEODiP4YU2g2scGYIepnAsO8O9ogUe EnCrI21CYvx2wfHivzv+7IpScfkYK01kC3zOZebAgxuzeCk3PouZYmpaq5C6h1SQ cjXnz3qk1C3CWpCetX49k34vcCtBXHrQcFreTrErNWxFBkZ3upWs5D9uvRN/80Cn gRuiT1gbqklQgQI3tCdp8K09KrIMsYZQHT8UAJsNsmjfMv9ke9HZImBEuhLSuI9p 7cJLhiJ4ms0IA8mf9SzZLVJNC8sKwZT2mGpCnkneU0QQEfrfmuQZVkY3B3dxSTsq LSy5WgiyCq1m2ppZZ0t0ztR8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ5/GW8 bJB9xdG1x5vhFIXZ6dFSMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpOfL4uSAePvzY3AjqJGgyZQ6JOYQCE3gbWv8s/hIr/vYiLEteq69c x7Uq0kxs8fLPgyEGXt/rX3aPkQc3f4XdmiWFtJ4c67vAogzy9HDFbfLfLkb8tpZi nuYN0KZLx1nl+e9kFCOU9etDymiyzzO+CTyFIZy2GgE081Z2xwtIvgQcC7bTkh4d t3fGJvIiW39VQB8GJLHYem1PAngMQ7z40uq5VMA/ay1iEsuK1ucGosGmDGa8XzSP sWUxem5Bwq+/PGzE6EFu4BudC0U5XNpQ+COTR10qsfgD0nJie9+AMKnfDjmxZOeM OFFIXqJOEfBIz9RvI9JhQ007zcORhszc -----END CERTIFICATE-----Generated at Tue May 13 07:55:45 2025 by rpki-client