$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: isx3ATyymBVgTn3B5W5jieJVRkUgSvpLKmbTKuAMR/o= Subject key identifier: 78:85:F0:92:9B:0C:2C:19:1A:CB:AA:ED:43:BA:28:3C:A7:64:79:F0 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0C41 Signing time: Wed 02 Jul 2025 18:46:28 +0000 Manifest this update: Wed 02 Jul 2025 18:46:27 +0000 Manifest next update: Wed 09 Jul 2025 18:46:27 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: 3+OJXyMB2SznJ6hLmI72Kg6U0MlEu/XqzrY2Gh56Yaw=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Jul 2 18:46:27 2025 GMT Not After : Jul 9 18:46:27 2025 GMT Subject: CN=68657e84-6b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:96:9f:f1:24:41:14:9d:72:56:3a:c6:b1: 59:60:1a:14:72:5c:a8:91:cf:4a:3e:0a:4e:3a:0c: ae:71:05:c2:5b:02:87:f7:ec:75:68:f6:ee:85:6f: 00:51:b4:ae:7b:bc:ed:59:5f:16:cd:59:60:44:a6: fd:d4:f5:8e:8b:c1:1a:93:95:25:65:ff:b9:d3:f5: 0b:76:f9:17:76:e2:71:2d:c3:9e:a7:3c:55:61:73: 53:a5:aa:82:cc:50:3c:0f:9b:3a:d8:c3:e9:81:41: ec:1c:67:df:cc:5b:c2:da:fc:c7:52:e6:01:c6:1e: 52:d1:04:1f:46:e2:e7:2e:73:17:6e:18:45:2d:0c: 04:7c:fa:9e:0a:43:13:1d:72:43:77:55:b5:23:b0: 1d:0b:26:a8:ba:b2:c7:83:ee:18:ed:50:5a:9b:2d: 2d:02:0e:24:52:a9:12:fe:8c:7d:99:1e:50:fe:5d: 11:4a:b1:d1:bc:c1:ba:2c:d7:ca:89:4d:c4:c3:bd: 47:0f:7f:c3:e7:4e:2c:88:20:e6:42:c9:90:54:4c: cc:51:51:55:d7:55:89:f9:78:aa:05:78:a2:62:6d: 80:db:2c:89:b1:fe:a5:3b:58:9f:8d:a6:21:fc:0b: da:b6:5c:a3:9e:f1:e7:f8:24:3b:69:e5:5d:bc:94: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:F0:92:9B:0C:2C:19:1A:CB:AA:ED:43:BA:28:3C:A7:64:79:F0 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:2e:6f:98:03:76:f0:9e:d7:5d:c7:bf:19:3b:eb:dd:3d: 97:ca:8f:62:2f:00:07:46:ce:02:18:33:41:20:bf:1c:45:c8: 01:c4:8b:70:7c:7e:d4:5c:be:fd:a9:2a:62:b9:6f:3f:22:48: 80:83:e8:6c:36:c0:71:5c:f2:97:e6:5a:47:f1:02:f3:9a:70: e3:23:91:9c:c2:6e:64:4b:ac:6d:8e:45:43:c7:8a:57:55:8e: 1d:a4:ac:8d:e6:a5:8a:93:bf:d8:6d:10:1d:86:9f:5b:7c:69: 5b:82:27:bc:b9:00:61:89:b3:6d:8b:0e:bc:e1:23:f4:70:1e: c7:34:fc:4e:42:c4:bc:b4:1e:39:bf:ac:29:99:91:36:1a:04: d4:62:c5:6e:ba:e6:80:12:39:16:c9:82:9f:dd:08:64:4e:52: fa:ea:58:f1:ea:62:12:30:40:94:2c:f7:1e:f7:ce:4c:a9:56: 18:ad:cb:65:10:33:4b:cc:52:38:aa:73:35:ba:59:86:41:8c: 7a:48:e5:fb:b0:8b:d4:d8:ff:be:2c:4c:55:a8:d6:dc:71:f9: d7:a0:e7:e1:e8:68:7e:c3:7e:29:ac:47:f4:a7:7a:ca:ec:9f: 96:7f:12:6f:5c:02:f3:e1:78:17:96:5e:8e:fe:56:a2:5f:62: ca:2b:ab:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjUwNzAyMTg0NjI3WhcNMjUwNzA5MTg0NjI3WjAYMRYwFAYD VQQDEw02ODY1N2U4NC02YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva2Wn/EkQRSdclY6xrFZYBoUclyokc9KPgpOOgyucQXCWwKH9+x1aPbuhW8A UbSue7ztWV8WzVlgRKb91PWOi8Eak5UlZf+50/ULdvkXduJxLcOepzxVYXNTpaqC zFA8D5s62MPpgUHsHGffzFvC2vzHUuYBxh5S0QQfRuLnLnMXbhhFLQwEfPqeCkMT HXJDd1W1I7AdCyaourLHg+4Y7VBamy0tAg4kUqkS/ox9mR5Q/l0RSrHRvMG6LNfK iU3Ew71HD3/D504siCDmQsmQVEzMUVFV11WJ+XiqBXiiYm2A2yyJsf6lO1ifjaYh /AvatlyjnvHn+CQ7aeVdvJR1bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiF8JKb DCwZGsuq7UO6KDynZHnwMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Ei5vmAN28J7XXce/GTvr3T2Xyo9iLwAHRs4CGDNBIL8cRcgBxItw fH7UXL79qSpiuW8/IkiAg+hsNsBxXPKX5lpH8QLzmnDjI5Gcwm5kS6xtjkVDx4pX VY4dpKyN5qWKk7/YbRAdhp9bfGlbgie8uQBhibNtiw684SP0cB7HNPxOQsS8tB45 v6wpmZE2GgTUYsVuuuaAEjkWyYKf3QhkTlL66ljx6mISMECULPce985MqVYYrctl EDNLzFI4qnM1ulmGQYx6SOX7sIvU2P++LExVqNbccfnXoOfh6Gh+w34prEf0p3rK 7J+WfxJvXALz4XgXll6O/laiX2LKK6s3 -----END CERTIFICATE-----Generated at Thu Jul 3 09:37:05 2025 by rpki-client