$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: Mv01pSxvptgYNkPsk1F24JHHDpr1mUaQ6pNWGmvokG8= Subject key identifier: DE:90:F6:A2:0A:E5:9A:F0:0B:A5:EA:A2:59:AA:41:B9:9C:DC:1E:8D Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 017D Signing time: Thu 03 Apr 2025 03:01:55 +0000 Manifest this update: Thu 03 Apr 2025 03:01:54 +0000 Manifest next update: Thu 10 Apr 2025 03:01:54 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: o8zO/lW3gRDrfPoWZP5MUURZRMKUIEZHBWGylnL0Fnk=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: n6K4D2BF6Z/jg8pmMgx23T1tIpkzmfvCsXfhNFPSXIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0 Validity Not Before: Apr 3 03:01:54 2025 GMT Not After : Apr 10 03:01:54 2025 GMT Subject: CN=67edfa22-0d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:62:d6:26:3a:f9:40:33:35:a6:c1:20:f6: bd:f4:dc:07:8e:fa:41:a1:0b:cd:62:2d:fe:bb:11: 95:df:ea:d9:c7:54:49:9d:29:87:f4:bb:1e:85:89: 6a:b3:8f:70:c2:a9:2e:ef:61:a6:84:7b:c0:80:dd: 26:b0:b2:24:e2:ef:a7:5b:b0:e1:23:d6:7b:9a:67: de:21:65:3b:7c:c2:c5:c1:e4:6c:a9:b4:cf:51:9e: 94:57:19:a9:d3:d8:d3:95:94:e2:2c:54:fa:a2:e8: 8c:1c:a3:8c:0b:6a:c1:2d:75:7c:35:8b:22:95:3c: 1e:fa:d8:c3:b4:8d:8d:ae:bf:47:d4:9d:57:23:62: 39:8f:aa:1e:c2:e5:a2:a0:3b:3c:e8:14:3c:96:4b: 1e:48:b1:91:f8:13:25:5e:8a:d8:94:d4:81:68:f0: 6d:18:e4:e7:d5:fa:6c:a1:80:3d:e5:3b:34:44:8f: f8:9e:0d:59:97:3e:06:14:78:ac:2e:da:71:81:5f: b9:e5:9b:4c:1a:b9:ee:8f:ae:e4:7d:ea:39:50:48: 2b:10:12:cf:96:f6:02:7f:d5:79:cc:80:69:25:d1: e8:51:5b:f6:0d:39:b3:91:5a:de:c6:0f:78:52:5e: 43:54:2c:eb:44:be:19:61:84:b5:da:1d:9c:1f:50: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:F6:A2:0A:E5:9A:F0:0B:A5:EA:A2:59:AA:41:B9:9C:DC:1E:8D X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d4:b0:3d:c6:eb:18:d4:00:d2:20:34:88:6c:5e:e4:55:28: 82:a7:fa:2a:a8:9f:ae:8d:5b:88:6e:15:26:09:5b:69:d4:4f: 5b:d1:52:2d:04:f3:cb:4d:ae:41:5a:6b:28:49:e4:c5:43:95: ff:97:99:ce:cd:47:ad:dc:4d:dc:87:22:07:ba:50:24:99:72: 96:51:c0:5b:ad:07:a5:ad:75:bc:66:14:45:a5:42:d1:14:8e: 35:6f:7b:82:3a:17:97:bc:3b:35:8f:ba:f5:38:e7:03:b6:88: 48:a6:be:94:c7:bb:86:06:f8:2a:c8:36:c8:31:3d:3e:5b:7a: 62:48:98:3e:83:7a:28:b0:0d:a7:71:c7:fe:9f:1b:b6:6a:e0: 01:da:89:6e:e8:29:f4:6f:44:52:a3:05:64:0d:eb:69:48:f2: b9:27:82:8f:3b:95:07:24:d3:80:aa:b4:d0:a3:40:94:0d:f2: 2c:f5:4c:02:01:97:ae:a8:a5:f7:55:f1:55:23:53:a3:2d:2d: bc:4a:93:19:36:7f:9b:a5:82:14:30:e1:e8:69:01:23:13:d7: ba:c2:ea:7a:cc:de:00:eb:ff:fd:92:9d:68:ab:d8:a0:fc:87: 46:31:19:df:2e:a3:19:4a:09:8f:5e:09:dc:0b:0c:61:67:cd: c4:26:ba:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwNDAzMDMwMTU0WhcNMjUwNDEwMDMwMTU0WjAYMRYwFAYD VQQDEw02N2VkZmEyMi0wZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTFi1iY6+UAzNabBIPa99NwHjvpBoQvNYi3+uxGV3+rZx1RJnSmH9LsehYlq s49wwqku72GmhHvAgN0msLIk4u+nW7DhI9Z7mmfeIWU7fMLFweRsqbTPUZ6UVxmp 09jTlZTiLFT6ouiMHKOMC2rBLXV8NYsilTwe+tjDtI2Nrr9H1J1XI2I5j6oewuWi oDs86BQ8lkseSLGR+BMlXorYlNSBaPBtGOTn1fpsoYA95Ts0RI/4ng1Zlz4GFHis LtpxgV+55ZtMGrnuj67kfeo5UEgrEBLPlvYCf9V5zIBpJdHoUVv2DTmzkVrexg94 Ul5DVCzrRL4ZYYS12h2cH1CesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6Q9qIK 5ZrwC6XqolmqQbmc3B6NMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ1LA9xusY1ADSIDSIbF7kVSiCp/oqqJ+ujVuIbhUmCVtp1E9b0VIt BPPLTa5BWmsoSeTFQ5X/l5nOzUet3E3chyIHulAkmXKWUcBbrQelrXW8ZhRFpULR FI41b3uCOheXvDs1j7r1OOcDtohIpr6Ux7uGBvgqyDbIMT0+W3piSJg+g3oosA2n ccf+nxu2auAB2olu6Cn0b0RSowVkDetpSPK5J4KPO5UHJNOAqrTQo0CUDfIs9UwC AZeuqKX3VfFVI1OjLS28SpMZNn+bpYIUMOHoaQEjE9e6wup6zN4A6//9kp1oq9ig /IdGMRnfLqMZSgmPXgncCwxhZ83EJroI -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:49 2025 by rpki-client