$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft File: 9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json) Hash identifier: UztcgfKy1cYaulY9nYAe1sK4mHRBm0iUIbgqHKEuieQ= Subject key identifier: 6B:DF:CA:FF:20:28:BC:45:2B:AE:0C:B2:A4:9B:D9:36:35:AD:86:23 Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 Certificate issuer: /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Certificate serial: 1835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft Manifest number: 1827 Signing time: Wed 02 Jul 2025 16:38:59 +0000 Manifest this update: Wed 02 Jul 2025 16:38:58 +0000 Manifest next update: Wed 09 Jul 2025 16:38:58 +0000 Files and hashes: 1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: 6R0k1MxmH259cPYFf6I1pByfSPAY9svTQpAQcrz97Ug=) 2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: 12/YQGKh2uNHDbW3TNnX9cKDq/H76Hjbaf684uCZbYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6197 (0x1835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Validity Not Before: Jul 2 16:38:58 2025 GMT Not After : Jul 9 16:38:58 2025 GMT Subject: CN=686560a3-8bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:1e:0e:7b:f6:22:39:98:98:18:6b:33:cb: 1e:07:3f:99:ee:ef:61:8f:d0:27:5d:70:e1:96:2d: 4c:f5:f7:e9:3a:8f:52:73:dc:26:f0:15:9c:35:bc: 05:f5:55:70:4b:7c:f5:eb:d8:ea:c0:66:9b:7a:82: 61:d9:6a:73:d0:cb:b7:13:d5:b5:8c:91:c0:b5:3d: 18:b9:3c:4f:97:c7:7f:e5:f0:41:5f:3a:62:66:14: 9e:3f:3b:59:93:38:46:c0:5f:02:59:e4:96:b9:fd: fb:b2:ef:05:21:05:a8:27:f7:09:fc:0b:a2:df:ca: 5f:83:20:5f:5a:ef:82:c9:49:e4:da:17:55:06:8c: e7:41:82:79:d1:77:06:1c:89:44:0b:f3:cc:dd:9b: ee:05:1e:86:74:96:ca:0d:47:e1:5e:f7:e0:50:4f: c8:63:0b:ed:19:ea:a0:9f:7e:ea:b1:10:e8:9b:2f: 40:95:5c:88:ef:90:81:7c:e2:31:d3:1a:ec:de:2d: 69:6d:97:f6:61:19:24:90:89:be:c3:28:30:4f:a8: 30:30:32:e3:4c:cc:2f:fd:84:f2:d5:b3:7e:25:a5: ab:4b:81:48:07:e4:0a:85:96:bf:bd:79:48:bd:fe: 32:e4:c6:f9:9b:ee:f0:b3:86:00:b6:80:c5:b8:18: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DF:CA:FF:20:28:BC:45:2B:AE:0C:B2:A4:9B:D9:36:35:AD:86:23 X509v3 Authority Key Identifier: keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:34:06:02:cb:c5:d0:23:dd:ca:11:9a:78:f5:02:a8:1b:2b: d0:24:6a:f1:29:0b:b9:42:c3:45:3a:29:58:1c:25:e7:65:86: 5c:39:7c:47:77:44:5e:e2:b4:08:9a:59:a1:15:d3:98:52:a2: 97:bf:ed:8c:17:be:3e:a3:f2:5e:0c:f0:67:38:f0:d5:b8:a9: e2:44:2e:ad:67:b6:d9:fd:5b:3e:ad:08:f4:51:82:9d:76:81: ee:7a:82:02:9e:3b:dc:5f:00:09:fe:10:05:32:91:bc:84:22: c9:30:c1:4e:70:b5:48:c7:44:6c:ac:e4:de:a2:4d:b7:1e:1d: 9f:a3:63:ec:f4:58:b8:63:68:e6:2a:9e:52:0e:b1:0c:71:d5: 30:f8:32:0e:1b:0c:7d:82:13:fa:6f:8b:2a:78:f1:15:68:de: 61:42:a8:b4:ab:42:f2:32:f6:4b:61:14:ec:67:62:2a:bf:73: 1a:93:1d:15:ba:32:53:ba:17:1c:7d:f3:7e:b6:9c:c4:40:88: e9:ad:91:26:b2:ee:1e:9e:d4:7d:b4:fb:4e:ba:a5:ce:44:47: 77:36:d2:59:e6:55:19:6b:69:87:44:58:5d:9a:e5:9a:8c:f4: 3f:9d:97:bc:b8:8c:73:da:59:a1:76:64:f5:08:c5:ff:16:e3: ff:7d:45:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwMjAxMTAvBgNVBAUTKEY2Njk5MjY0NDE3QzIyOEI1MUZFMTVCM0IxRUNCNzg2 N0YyQTI3NDMwHhcNMjUwNzAyMTYzODU4WhcNMjUwNzA5MTYzODU4WjAYMRYwFAYD VQQDEw02ODY1NjBhMy04YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHoeDnv2IjmYmBhrM8seBz+Z7u9hj9AnXXDhli1M9ffpOo9Sc9wm8BWcNbwF 9VVwS3z169jqwGabeoJh2Wpz0Mu3E9W1jJHAtT0YuTxPl8d/5fBBXzpiZhSePztZ kzhGwF8CWeSWuf37su8FIQWoJ/cJ/Aui38pfgyBfWu+CyUnk2hdVBoznQYJ50XcG HIlEC/PM3ZvuBR6GdJbKDUfhXvfgUE/IYwvtGeqgn37qsRDomy9AlVyI75CBfOIx 0xrs3i1pbZf2YRkkkIm+wygwT6gwMDLjTMwv/YTy1bN+JaWrS4FIB+QKhZa/vXlI vf4y5Mb5m+7ws4YAtoDFuBhAhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvfyv8g KLxFK64MsqSb2TY1rYYjMB8GA1UdIwQYMBaAFPZpkmRBfCKLUf4Vs7Hst4Z/KidD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDAyMC9BRDFCOERFNEI0 MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElvdFJfaFd6c2V5M2huOHFK ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbVNaRUY4SW90Ul9oV3pzZXkzaG44cUowTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDAyMC9BRDFCOERFNEI0MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElv dFJfaFd6c2V5M2huOHFKME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFNAYCy8XQI93KEZp49QKoGyvQJGrxKQu5QsNFOilYHCXnZYZcOXxH d0Re4rQImlmhFdOYUqKXv+2MF74+o/JeDPBnOPDVuKniRC6tZ7bZ/Vs+rQj0UYKd doHueoICnjvcXwAJ/hAFMpG8hCLJMMFOcLVIx0RsrOTeok23Hh2fo2Ps9Fi4Y2jm Kp5SDrEMcdUw+DIOGwx9ghP6b4sqePEVaN5hQqi0q0LyMvZLYRTsZ2Iqv3Makx0V ujJTuhccffN+tpzEQIjprZEmsu4entR9tPtOuqXOREd3NtJZ5lUZa2mHRFhdmuWa jPQ/nZe8uIxz2lmhdmT1CMX/FuP/fUWp -----END CERTIFICATE-----Generated at Wed Jul 2 22:33:06 2025 by rpki-client