$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: C+N81Iq+v/Wur6QqhcRiz5b6BGpl2co483GgS0P8pEw= Subject key identifier: 63:1A:C1:CD:45:D6:DD:19:FD:47:CA:20:13:8D:12:78:87:94:F8:B0 Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 0168 Signing time: Wed 02 Jul 2025 20:11:40 +0000 Manifest this update: Wed 02 Jul 2025 20:11:40 +0000 Manifest next update: Wed 09 Jul 2025 20:11:40 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: fY5uIsH7eHdonSt4xduFPTF/rqfkZKvPhvLtj9c/Gj8=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: iTrEAAlkJw9OclXVQcOsLhF2OGcA/o+GNahTLZ1PRQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Jul 2 20:11:40 2025 GMT Not After : Jul 9 20:11:40 2025 GMT Subject: CN=6865927c-fc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:2d:1c:f1:85:26:71:c3:14:6f:91:9a:4b: 48:ff:c6:33:eb:92:ce:15:f3:48:ea:1e:90:d7:9c: 89:97:ae:ae:7a:a9:8c:08:e9:fc:36:02:f7:4c:ef: 4c:7e:61:e7:4d:b9:1f:c8:bc:17:8f:9b:fe:7b:51: cf:ab:f8:26:f4:f3:03:c8:e4:43:73:b8:a2:43:36: 70:3c:5e:98:0b:3b:c8:6c:e5:98:1f:b5:55:aa:36: d7:01:b2:72:e2:8e:df:9f:64:04:8f:e4:5f:ad:ba: bd:45:d0:93:bc:a6:64:f4:50:12:e7:df:90:28:a3: 62:6b:37:d5:10:4a:0e:cd:18:a8:47:92:ec:0e:6e: 4e:68:41:b6:0f:c9:c1:0a:23:3b:21:bd:69:5a:8f: 65:7f:66:cb:c5:10:cd:b1:fa:fc:a6:46:e0:f9:e2: 9e:2d:06:02:36:2c:90:cb:2f:32:0a:a3:c8:98:5e: 6a:a9:36:a7:89:f0:18:69:13:0e:48:6e:a5:de:75: 49:07:7b:1c:2d:b5:55:2c:ec:e2:47:85:34:d6:e7: fc:82:20:95:4b:c3:e5:af:7a:7e:7d:2f:dd:61:0a: fa:72:47:fa:7d:a3:2e:74:29:b9:71:df:db:b4:2a: ed:7c:8d:37:f8:59:c6:ee:cb:d2:6e:d0:02:d9:99: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1A:C1:CD:45:D6:DD:19:FD:47:CA:20:13:8D:12:78:87:94:F8:B0 X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0e:62:5d:16:3e:f9:6a:77:22:49:c4:12:74:91:f7:91:48: fa:43:e8:c6:a5:5d:4f:38:bf:c9:d9:d8:70:bb:b2:70:20:2e: 57:d0:ab:bc:f4:4e:78:5c:15:ad:a2:47:fd:d6:4b:bf:f2:fb: d3:8d:50:19:7e:1b:f4:6e:a1:95:d6:14:af:22:3d:ec:2a:e4: a5:39:62:b1:7a:23:40:8b:1f:cf:7f:54:47:f8:92:c5:ed:33: e3:9f:68:96:71:6f:20:68:35:8e:de:4b:1f:f1:50:cf:13:08: 08:38:d5:0b:07:f0:72:ef:7a:c3:bd:68:77:aa:78:86:6f:96: c3:e9:1e:5a:51:e1:85:a2:34:3d:78:a5:4a:51:b5:9f:d6:99: b6:c2:46:6c:d4:16:66:97:21:59:2b:01:04:c5:54:2b:23:87: 7c:7e:8f:85:85:59:da:7e:27:91:7e:69:ba:90:0a:a6:29:80: 36:cd:08:b8:3d:0c:42:53:46:7c:63:fe:40:db:c1:2a:12:dc: 30:d2:a7:7b:cd:01:e6:af:bc:60:a0:72:25:ec:2b:21:a5:3f: 7b:ba:c9:6a:31:8c:ce:56:54:ce:1f:22:13:9b:d9:73:27:ce: a7:59:5d:60:ab:33:28:94:26:70:a1:3b:77:b2:0b:c2:c5:ec: 4d:f0:fa:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjUwNzAyMjAxMTQwWhcNMjUwNzA5MjAxMTQwWjAYMRYwFAYD VQQDEw02ODY1OTI3Yy1mYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy58tHPGFJnHDFG+RmktI/8Yz65LOFfNI6h6Q15yJl66ueqmMCOn8NgL3TO9M fmHnTbkfyLwXj5v+e1HPq/gm9PMDyORDc7iiQzZwPF6YCzvIbOWYH7VVqjbXAbJy 4o7fn2QEj+Rfrbq9RdCTvKZk9FAS59+QKKNiazfVEEoOzRioR5LsDm5OaEG2D8nB CiM7Ib1pWo9lf2bLxRDNsfr8pkbg+eKeLQYCNiyQyy8yCqPImF5qqTanifAYaRMO SG6l3nVJB3scLbVVLOziR4U01uf8giCVS8Plr3p+fS/dYQr6ckf6faMudCm5cd/b tCrtfI03+FnG7svSbtAC2Zm5MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMawc1F 1t0Z/UfKIBONEniHlPiwMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqDmJdFj75anciScQSdJH3kUj6Q+jGpV1POL/J2dhwu7JwIC5X0Ku8 9E54XBWtokf91ku/8vvTjVAZfhv0bqGV1hSvIj3sKuSlOWKxeiNAix/Pf1RH+JLF 7TPjn2iWcW8gaDWO3ksf8VDPEwgIONULB/By73rDvWh3qniGb5bD6R5aUeGFojQ9 eKVKUbWf1pm2wkZs1BZmlyFZKwEExVQrI4d8fo+FhVnafieRfmm6kAqmKYA2zQi4 PQxCU0Z8Y/5A28EqEtww0qd7zQHmr7xgoHIl7CshpT97uslqMYzOVlTOHyITm9lz J86nWV1gqzMolCZwoTt3sgvCxexN8PpX -----END CERTIFICATE-----Generated at Fri Jul 4 04:40:15 2025 by rpki-client