$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: fvqn1Vt1j3NYfxSBee4xDySj6Z46dQrQMepJrqTXQgs= Subject key identifier: E9:BA:84:60:FC:07:14:BD:26:E7:01:1B:C5:E2:92:11:3A:B0:E8:ED Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 0192 Signing time: Sun 11 May 2025 02:28:27 +0000 Manifest this update: Sun 11 May 2025 02:28:26 +0000 Manifest next update: Sun 18 May 2025 02:28:26 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: ncbcLm+60O5Z0ag/EaOx6FBOCp1glNRK45LnFPUTpOk=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: 3Eo9M+6uF1PrL4pGQbaO7H9tA5QUvhxpxJznY/pRFpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: May 11 02:28:26 2025 GMT Not After : May 18 02:28:26 2025 GMT Subject: CN=68200b4b-9ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:23:57:96:34:b8:b6:02:87:5f:16:e7:94: 8c:63:71:50:65:a5:24:75:cf:bd:ff:90:18:99:d4: 53:2e:31:d2:51:19:12:f2:3c:53:9c:98:30:cc:d0: a3:6a:76:20:e6:59:f3:db:a7:bd:e0:eb:6e:bf:bc: 65:91:9b:77:ba:36:fb:06:5a:4a:52:30:f8:89:d2: ab:5e:2f:de:de:e9:8a:7c:46:8b:08:a4:04:15:cd: a7:93:77:c0:6e:cc:77:3b:fb:32:15:6a:39:8e:44: df:c1:1c:0f:f8:bf:65:b8:84:c9:99:cf:ab:c3:a5: 57:d5:87:b8:90:91:e0:2c:df:19:2f:4d:4e:24:e2: 15:17:7a:65:a2:38:5d:71:d2:3a:39:d5:aa:41:68: 4d:cf:aa:aa:a6:51:66:8e:47:52:fd:c1:1e:af:b3: cb:61:79:00:91:36:dd:54:76:88:1d:04:d7:f7:b4: d2:1e:67:5e:ff:bb:06:7a:23:5c:32:b7:12:d2:26: 40:c3:85:b2:ad:e9:5d:5b:58:b2:5c:ec:c3:35:95: 72:43:ac:b0:9f:87:92:2f:bc:b0:ce:44:ed:b7:4f: 49:74:14:81:72:c2:58:d4:7d:43:1a:c9:23:55:91: 2c:13:67:59:e6:f2:ef:87:02:d9:0c:97:9a:b7:17: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:84:60:FC:07:14:BD:26:E7:01:1B:C5:E2:92:11:3A:B0:E8:ED X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d3:8b:8f:0a:67:0a:bc:6d:20:37:19:e4:24:ec:e6:59:54: 1f:10:4c:c6:14:9b:cb:9a:3a:8b:04:ca:04:51:80:e4:99:e9: 4d:34:f9:22:e7:e5:22:99:83:8c:b2:5f:bb:20:25:93:4a:a3: 8a:96:ac:b5:77:82:8c:78:97:4c:f5:bc:57:e6:4b:6d:d0:12: b0:bf:b5:9f:36:90:c7:df:af:bd:50:e1:0a:21:a7:36:b6:17: 95:2e:75:61:6b:2d:54:e4:70:d2:bd:28:03:37:12:58:65:f3: 1c:19:3c:e6:29:79:e4:51:d8:4e:be:ee:87:cf:1e:93:7e:ea: ef:65:c3:12:aa:a2:1b:36:87:5f:70:17:a1:10:3e:d5:a8:11: d4:12:3c:cf:55:d7:01:d8:e5:59:2e:50:26:52:66:5b:c7:4e: 0f:42:c1:e1:a4:f2:b5:99:fa:4a:9b:37:0b:b1:86:32:f0:4d: 34:ad:5b:03:bb:6a:0d:a2:e7:57:bb:f0:d4:99:41:5a:9b:f9: f7:09:bc:05:a7:34:89:2d:48:0d:ae:bb:4c:7a:20:eb:51:17: 6e:79:e7:8a:94:e9:61:47:e7:a6:f4:ac:73:5f:3a:8a:c0:cb: f1:8f:20:aa:12:9a:59:a2:10:8b:7a:81:b4:ce:09:2e:74:a1: df:fd:e9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwNTExMDIyODI2WhcNMjUwNTE4MDIyODI2WjAYMRYwFAYD VQQDEw02ODIwMGI0Yi05Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq4jV5Y0uLYCh18W55SMY3FQZaUkdc+9/5AYmdRTLjHSURkS8jxTnJgwzNCj anYg5lnz26e94Otuv7xlkZt3ujb7BlpKUjD4idKrXi/e3umKfEaLCKQEFc2nk3fA bsx3O/syFWo5jkTfwRwP+L9luITJmc+rw6VX1Ye4kJHgLN8ZL01OJOIVF3plojhd cdI6OdWqQWhNz6qqplFmjkdS/cEer7PLYXkAkTbdVHaIHQTX97TSHmde/7sGeiNc MrcS0iZAw4WyreldW1iyXOzDNZVyQ6ywn4eSL7ywzkTtt09JdBSBcsJY1H1DGskj VZEsE2dZ5vLvhwLZDJeatxdnRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm6hGD8 BxS9JucBG8XikhE6sOjtMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB904uPCmcKvG0gNxnkJOzmWVQfEEzGFJvLmjqLBMoEUYDkmelNNPki 5+UimYOMsl+7ICWTSqOKlqy1d4KMeJdM9bxX5ktt0BKwv7WfNpDH36+9UOEKIac2 theVLnVhay1U5HDSvSgDNxJYZfMcGTzmKXnkUdhOvu6Hzx6TfurvZcMSqqIbNodf cBehED7VqBHUEjzPVdcB2OVZLlAmUmZbx04PQsHhpPK1mfpKmzcLsYYy8E00rVsD u2oNoudXu/DUmUFam/n3CbwFpzSJLUgNrrtMeiDrURdueeeKlOlhR+em9KxzXzqK wMvxjyCqEppZohCLeoG0zgkudKHf/emF -----END CERTIFICATE-----Generated at Sun May 11 16:00:07 2025 by rpki-client