$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: WUYy+sgKfeWarS0cPyYNc6Nv0M6mZZRhCU/QbR95nCo= Subject key identifier: 1F:42:86:68:98:DB:08:38:DA:5B:48:D5:D9:0C:90:98:F3:A8:13:B1 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: 9A Signing time: Tue 13 May 2025 05:30:43 +0000 Manifest this update: Tue 13 May 2025 05:30:42 +0000 Manifest next update: Tue 20 May 2025 05:30:42 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: LYhUUq2HrGRJbneB0CMoSG1qPdHIDTluNBBCa0jM+q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: May 13 05:30:42 2025 GMT Not After : May 20 05:30:42 2025 GMT Subject: CN=6822d903-f97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:6f:29:5e:4b:27:8b:8c:10:85:d9:c2:bd: 9a:f6:a4:ea:fd:c3:6f:ff:5a:61:18:92:44:1e:bc: 08:a1:d7:bd:01:ab:73:8a:80:c6:3f:97:ba:e9:e3: 16:dd:12:93:57:58:67:9a:a9:d0:8f:35:16:69:f0: 87:46:fd:12:53:a9:1c:84:a3:02:13:0b:02:46:c9: 11:f3:90:8c:a3:c0:f1:a7:6d:04:9d:1a:23:61:72: 8f:a1:89:e3:04:fd:9a:52:50:50:ec:a1:6c:7a:83: 1e:02:c3:88:bd:cd:55:47:31:78:76:31:72:13:01: 66:fe:83:bc:c9:08:4f:5b:f8:b0:f7:01:68:f3:9d: ec:d5:07:89:f1:d0:27:d5:1f:d5:c8:c3:92:3c:2e: 8f:af:64:fc:74:89:cf:77:85:2e:d7:0a:c5:72:00: ac:f4:95:de:bf:d0:f9:c0:f7:b8:36:d8:c2:ba:08: ae:76:42:d7:ce:50:20:14:a9:3c:57:59:86:00:90: a9:e8:3c:4f:63:95:ec:08:f3:cc:ce:40:fa:22:c3: b9:98:19:2a:60:fc:e5:c6:61:7e:fd:36:25:3e:59: de:00:25:08:33:37:34:61:8c:da:b3:9b:ef:e3:1a: ef:3d:56:e5:73:67:0a:5c:cd:d4:b2:45:47:6a:44: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:42:86:68:98:DB:08:38:DA:5B:48:D5:D9:0C:90:98:F3:A8:13:B1 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2c:51:59:aa:aa:ec:6e:b8:bf:e1:f8:7d:df:2b:89:63:ff: 71:12:24:3d:ee:67:85:56:6b:98:a8:49:98:e0:a7:29:3b:49: 22:1b:db:81:0c:28:2f:a9:ec:aa:4d:6b:9d:db:22:bf:c3:64: 5c:e2:ca:bc:a8:24:b3:bf:75:26:36:e9:96:2a:4e:72:cb:ca: cb:87:25:73:c0:95:25:60:a6:4d:28:86:ae:46:0a:21:f4:04: 67:bd:20:c6:30:e5:dc:f5:d9:f4:aa:67:92:46:d2:bb:78:ab: 23:94:60:44:62:96:46:43:45:4e:ee:47:5d:7a:b0:01:e1:ed: a2:eb:e8:be:17:d1:28:94:dd:01:60:21:57:76:b9:51:09:3a: fb:db:9d:13:32:cf:d0:00:a6:4b:d7:62:7b:68:2c:ff:0f:ae: 8a:91:5d:dc:85:30:b3:cb:5e:6b:c6:8c:e5:da:13:0e:c1:98: c4:d0:dc:c2:7f:2e:c3:31:5a:e2:09:c0:b8:75:b9:cc:ab:70: e5:6d:91:b1:8c:23:0c:fa:ac:ec:5a:e5:51:35:45:2f:4a:31: 84:57:75:1c:9c:ed:5a:24:7b:3d:31:69:48:c0:24:4f:e7:d9: 1a:be:6c:09:1f:74:04:6b:4c:b7:3d:a5:06:09:e8:a0:12:d5: 59:69:79:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDRGRDExRTJDQ0NENTE0MTk1MzBBQzA0QTE0MjU4RjEx QTg1NzdFQUQwHhcNMjUwNTEzMDUzMDQyWhcNMjUwNTIwMDUzMDQyWjAYMRYwFAYD VQQDEw02ODIyZDkwMy1mOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS5vKV5LJ4uMEIXZwr2a9qTq/cNv/1phGJJEHrwIode9AatzioDGP5e66eMW 3RKTV1hnmqnQjzUWafCHRv0SU6kchKMCEwsCRskR85CMo8Dxp20EnRojYXKPoYnj BP2aUlBQ7KFseoMeAsOIvc1VRzF4djFyEwFm/oO8yQhPW/iw9wFo853s1QeJ8dAn 1R/VyMOSPC6Pr2T8dInPd4Uu1wrFcgCs9JXev9D5wPe4NtjCugiudkLXzlAgFKk8 V1mGAJCp6DxPY5XsCPPMzkD6IsO5mBkqYPzlxmF+/TYlPlneACUIMzc0YYzas5vv 4xrvPVblc2cKXM3UskVHakS3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9ChmiY 2wg42ltI1dkMkJjzqBOxMB8GA1UdIwQYMBaAFE/RHizM1RQZUwrAShQljxGoV36t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wOTg1MEI4MjQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZCbFRDc0JLRkNXUEVhaFhm cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wOTg1MEI4MjQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9UOUVlTE16VkZC bFRDc0JLRkNXUEVhaFhmcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8LFFZqqrsbri/4fh93yuJY/9xEiQ97meFVmuYqEmY4KcpO0kiG9uB DCgvqeyqTWud2yK/w2Rc4sq8qCSzv3UmNumWKk5yy8rLhyVzwJUlYKZNKIauRgoh 9ARnvSDGMOXc9dn0qmeSRtK7eKsjlGBEYpZGQ0VO7kdderAB4e2i6+i+F9EolN0B YCFXdrlRCTr7250TMs/QAKZL12J7aCz/D66KkV3chTCzy15rxozl2hMOwZjE0NzC fy7DMVriCcC4dbnMq3DlbZGxjCMM+qzsWuVRNUUvSjGEV3UcnO1aJHs9MWlIwCRP 59kavmwJH3QEa0y3PaUGCeigEtVZaXkq -----END CERTIFICATE-----Generated at Wed May 14 11:31:48 2025 by rpki-client