$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: IVL2abDpmFsSKLWvfF71K8mwDTiCJ8RkNNnFOU8sI/Q= Subject key identifier: 9D:FB:D1:F1:A5:B6:50:D0:C3:26:6F:FD:3A:85:9D:5C:FF:54:68:A7 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0C93 Signing time: Mon 12 May 2025 18:06:24 +0000 Manifest this update: Mon 12 May 2025 18:06:24 +0000 Manifest next update: Mon 19 May 2025 18:06:24 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: 8gLJ56fN9oBQyXROhZ7D5+OPNGune0ng34rR0vQwYLs=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: May 12 18:06:24 2025 GMT Not After : May 19 18:06:24 2025 GMT Subject: CN=682238a0-83b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:e9:19:78:3c:32:b5:cd:a9:ff:eb:79:e6: 58:5f:2e:6f:48:f5:1c:21:19:05:39:b4:ed:d2:6b: 5b:42:56:50:b9:4d:fa:62:19:2d:04:1a:25:15:34: 4c:49:0c:7b:f3:7b:9a:ec:9f:98:1a:60:b1:80:a3: 1c:9a:ba:3a:e6:1a:8d:ca:ca:81:ba:e7:77:7e:b3: 23:39:c7:4c:32:3f:07:ab:30:a4:87:41:f1:c8:7d: 5d:f4:f1:ea:dd:c2:1e:2b:5a:45:08:fc:f7:5e:d2: a3:31:8c:af:33:ed:a8:75:48:85:f2:be:b4:7b:dd: c7:8b:5a:cd:49:aa:53:61:2b:1f:90:33:f3:64:66: 50:af:4a:80:1c:78:c7:71:4d:97:cb:f6:91:34:22: e7:5c:ad:8d:98:c7:0b:4e:e3:35:12:62:b9:a6:a3: bc:39:31:5d:2b:a0:23:b4:09:cc:df:30:a1:f6:75: 67:c2:18:8b:a7:bb:31:50:27:ec:d3:2a:19:a4:5a: 05:b8:c5:ef:7f:5f:1f:35:2c:d0:1d:6c:50:e8:56: db:23:17:0b:1d:26:86:ef:3e:68:c5:f3:3c:1a:83: 97:ac:08:12:ee:cc:3e:52:a0:d4:9c:ff:2e:c6:a3: 7c:85:83:e2:66:e0:76:b1:0e:98:50:7b:23:f8:a7: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FB:D1:F1:A5:B6:50:D0:C3:26:6F:FD:3A:85:9D:5C:FF:54:68:A7 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7a:52:05:1d:91:cd:1f:9a:a2:fc:50:65:6b:02:d2:96:c1: db:be:c2:95:c9:9d:7f:ab:7c:a6:97:4c:40:78:39:c1:f5:05: 43:df:8e:ff:cb:7b:7d:b9:8d:05:f4:62:39:2b:23:79:5f:d7: f1:5b:10:80:a6:d4:9f:7b:10:73:93:f5:dc:79:f8:b7:bb:f9: 94:26:d2:c6:fa:8a:41:49:60:03:28:59:89:57:ad:40:3f:5b: 02:2a:33:8c:ba:b4:02:b6:c3:bb:1e:18:9d:e1:8c:6e:ff:21: a1:26:15:a2:e1:a5:18:f0:db:c8:bf:0b:52:b3:64:1f:55:18: 57:34:66:01:45:01:ec:b2:77:96:c5:6a:cf:0b:a5:0d:b2:ac: 51:0f:7f:42:50:3c:fb:d6:42:c0:2e:16:90:9c:87:64:19:2a: ed:23:32:06:f2:4c:0b:23:e1:2b:75:32:00:0a:fb:53:68:29: 42:18:fd:cd:4e:d8:b3:b5:10:2f:4a:5c:14:bc:d8:4f:ef:1a: ef:9d:e3:b5:bb:88:db:3d:56:eb:78:73:39:47:d7:55:b3:94: 91:12:73:27:68:49:0b:43:cf:2d:09:99:b7:47:59:02:1e:0d: a7:ce:7c:67:b5:6c:eb:b9:22:70:42:42:80:b0:02:bb:2e:bb: ae:05:c2:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNTEyMTgwNjI0WhcNMjUwNTE5MTgwNjI0WjAYMRYwFAYD VQQDEw02ODIyMzhhMC04M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5jpGXg8MrXNqf/reeZYXy5vSPUcIRkFObTt0mtbQlZQuU36YhktBBolFTRM SQx783ua7J+YGmCxgKMcmro65hqNysqBuud3frMjOcdMMj8HqzCkh0HxyH1d9PHq 3cIeK1pFCPz3XtKjMYyvM+2odUiF8r60e93Hi1rNSapTYSsfkDPzZGZQr0qAHHjH cU2Xy/aRNCLnXK2NmMcLTuM1EmK5pqO8OTFdK6AjtAnM3zCh9nVnwhiLp7sxUCfs 0yoZpFoFuMXvf18fNSzQHWxQ6FbbIxcLHSaG7z5oxfM8GoOXrAgS7sw+UqDUnP8u xqN8hYPiZuB2sQ6YUHsj+Kf15QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ370fGl tlDQwyZv/TqFnVz/VGinMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1elIFHZHNH5qi/FBlawLSlsHbvsKVyZ1/q3yml0xAeDnB9QVD347/ y3t9uY0F9GI5KyN5X9fxWxCAptSfexBzk/Xcefi3u/mUJtLG+opBSWADKFmJV61A P1sCKjOMurQCtsO7Hhid4Yxu/yGhJhWi4aUY8NvIvwtSs2QfVRhXNGYBRQHssneW xWrPC6UNsqxRD39CUDz71kLALhaQnIdkGSrtIzIG8kwLI+ErdTIACvtTaClCGP3N TtiztRAvSlwUvNhP7xrvneO1u4jbPVbreHM5R9dVs5SREnMnaEkLQ88tCZm3R1kC Hg2nznxntWzruSJwQkKAsAK7LruuBcIO -----END CERTIFICATE-----Generated at Wed May 14 16:29:46 2025 by rpki-client