$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: jSb+lwLhTRelIUeF9o7qNseATKwEvqgrY4+Ygo5/96Y= Subject key identifier: 6B:AD:1E:A8:33:D5:7F:43:8F:C3:8E:BC:76:F4:84:CA:AC:2A:B0:DA Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0CAD Signing time: Wed 02 Jul 2025 18:25:27 +0000 Manifest this update: Wed 02 Jul 2025 18:25:27 +0000 Manifest next update: Wed 09 Jul 2025 18:25:27 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: ZMUnMnJqBJXjjI8Wy+I+w2htmDtn7wTP+Yoxpx7waxw=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Jul 2 18:25:27 2025 GMT Not After : Jul 9 18:25:27 2025 GMT Subject: CN=68657997-d51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:46:ed:6b:f5:59:c6:4f:f5:35:08:6e:76: 21:da:a5:59:84:a0:d9:b2:af:45:4e:98:35:88:01: 23:55:90:15:4d:34:75:7e:fc:f7:57:6a:05:d6:0b: bc:ce:92:94:95:21:2b:b1:a0:d2:64:aa:69:0d:72: 72:d4:65:c6:b4:dc:72:5c:cc:12:09:73:00:f6:46: 08:77:e2:83:40:4c:f6:60:6e:9b:81:14:a9:4d:ae: 58:d7:74:3b:99:cf:40:6b:1e:a5:66:82:fd:ff:8a: 41:7d:c0:52:9e:6c:dc:9a:59:17:23:c6:7c:9c:12: 96:87:90:03:38:da:aa:58:9a:e5:a5:53:ca:e1:6f: b1:b1:f7:3d:32:aa:a2:77:56:d9:0a:74:59:7f:16: 9d:de:c5:3f:9e:dc:4f:4c:eb:24:59:97:ee:62:19: 5b:07:9f:ba:e0:62:2c:a4:3a:33:63:ad:bb:7c:53: fb:83:a2:08:ee:c1:f5:7e:7e:02:f0:f3:76:ba:0a: 4b:55:0d:5c:d1:33:3c:40:42:cc:9e:30:e8:58:a1: 23:65:9a:56:b8:e4:af:75:a0:8c:0c:71:2d:27:cc: 46:c5:a7:b2:43:27:3a:10:ca:d1:de:4e:b6:15:cc: 4d:b6:6e:58:3e:b1:37:f3:63:9a:d8:cb:ff:fd:ce: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:1E:A8:33:D5:7F:43:8F:C3:8E:BC:76:F4:84:CA:AC:2A:B0:DA X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:94:78:d8:86:85:e4:ce:36:52:d7:86:12:e3:3f:e4:8c:d7: db:c3:9a:77:39:c8:82:eb:bf:77:7a:32:f4:39:9e:6f:da:37: 55:b2:a6:9a:ad:32:df:fb:16:7f:90:ae:8f:5e:d6:f0:54:17: f7:69:94:06:5b:bd:d1:d1:86:1a:57:1b:c8:62:da:a8:7c:c8: 40:5e:08:a1:dd:0e:ce:69:f8:fd:90:9f:77:0d:0b:ab:6e:19: 9a:00:fa:2c:e5:aa:72:5f:d9:a9:28:52:22:e4:4f:f6:72:1a: 5d:1e:ef:20:fd:e0:92:ad:80:fb:7a:99:e3:55:fd:77:f5:f2: 82:1a:29:a6:c1:8c:02:a6:3d:4a:80:76:73:8d:b0:b2:26:14: 6a:37:90:04:70:06:82:19:f3:e7:43:8a:fa:f0:64:db:9c:45: c0:ae:70:9c:41:20:82:75:58:98:ab:f2:29:ed:25:87:8b:40: 38:3f:af:05:29:09:b8:a7:55:9f:27:0f:0d:bc:4d:c2:10:14: 73:ac:1c:dd:e0:19:9d:a7:5f:29:33:b2:a7:ec:cf:59:dc:5a: 62:eb:2c:6e:e1:e6:f6:b3:01:56:23:89:0d:6a:83:7c:83:03: a3:0f:bb:ec:dd:19:e4:20:2b:aa:6a:0f:ca:f6:84:af:f7:1a: 9f:16:cd:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNzAyMTgyNTI3WhcNMjUwNzA5MTgyNTI3WjAYMRYwFAYD VQQDEw02ODY1Nzk5Ny1kNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nlG7Wv1WcZP9TUIbnYh2qVZhKDZsq9FTpg1iAEjVZAVTTR1fvz3V2oF1gu8 zpKUlSErsaDSZKppDXJy1GXGtNxyXMwSCXMA9kYId+KDQEz2YG6bgRSpTa5Y13Q7 mc9Aax6lZoL9/4pBfcBSnmzcmlkXI8Z8nBKWh5ADONqqWJrlpVPK4W+xsfc9Mqqi d1bZCnRZfxad3sU/ntxPTOskWZfuYhlbB5+64GIspDozY627fFP7g6II7sH1fn4C 8PN2ugpLVQ1c0TM8QELMnjDoWKEjZZpWuOSvdaCMDHEtJ8xGxaeyQyc6EMrR3k62 FcxNtm5YPrE382Oa2Mv//c5NxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGutHqgz 1X9Dj8OOvHb0hMqsKrDaMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAlHjYhoXkzjZS14YS4z/kjNfbw5p3OciC6793ejL0OZ5v2jdVsqaa rTLf+xZ/kK6PXtbwVBf3aZQGW73R0YYaVxvIYtqofMhAXgih3Q7Oafj9kJ93DQur bhmaAPos5apyX9mpKFIi5E/2chpdHu8g/eCSrYD7epnjVf139fKCGimmwYwCpj1K gHZzjbCyJhRqN5AEcAaCGfPnQ4r68GTbnEXArnCcQSCCdViYq/Ip7SWHi0A4P68F KQm4p1WfJw8NvE3CEBRzrBzd4Bmdp18pM7Kn7M9Z3Fpi6yxu4eb2swFWI4kNaoN8 gwOjD7vs3RnkICuqag/K9oSv9xqfFs20 -----END CERTIFICATE-----Generated at Thu Jul 3 10:39:29 2025 by rpki-client