$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: a5l4o/AJqMiDr95g3UZ42JVeKUddIOEzmGIEnshdGz4= Subject key identifier: BA:0F:D5:B6:F7:40:B3:01:57:41:C6:1D:C4:3F:AC:9A:31:C7:41:B2 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0C7E Signing time: Fri 04 Apr 2025 18:22:23 +0000 Manifest this update: Fri 04 Apr 2025 18:22:22 +0000 Manifest next update: Fri 11 Apr 2025 18:22:22 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: +eXjwPyxVqH6kRwMIE7OY6uaod/talnUxzqxqPevImk=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: XBCRIujbmqCZAO+evWS2z7S/+660XMC7RMeYNEWozlk=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: EHmZXLxVsief8zLb3cKkbfGcRs3h6H923HKwEbsQt7I=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: GO1uvSUSs2KlKPAfKRLY58uFyr43GGZE9D5pAlewhKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06 Validity Not Before: Apr 4 18:22:22 2025 GMT Not After : Apr 11 18:22:22 2025 GMT Subject: CN=67f0235f-54af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:ba:f5:9d:43:45:8e:e8:01:36:0f:1d:51: b2:3b:22:9a:e8:e9:d3:59:aa:9e:da:7d:ac:e6:5b: 06:dd:8d:82:4c:7e:3e:76:66:29:c2:82:ff:b9:e5: 0a:4c:06:96:e4:30:2c:98:ff:24:7f:7e:d4:a6:0a: 3c:4e:18:c0:92:51:a3:54:c2:bf:ce:49:94:55:0c: 1f:2b:93:db:27:db:28:1a:51:7c:c5:d6:46:da:28: 81:5f:f6:cd:18:a8:ca:d4:19:38:b0:ba:83:97:82: be:dc:9b:96:6a:55:04:11:f9:af:bc:49:21:29:49: 8f:55:48:e5:bf:a8:ed:44:de:86:9f:ef:af:5e:17: 0d:67:dd:6a:ed:51:24:13:39:4f:3b:02:6e:42:57: 94:ac:05:be:7d:6f:ed:57:3f:7d:2a:8f:5e:dd:92: 3a:74:c7:5e:c6:ef:39:5f:08:de:9c:eb:02:cd:ba: e8:bd:51:0b:77:d7:74:cb:3d:6c:44:fa:3b:de:f2: 08:e8:0c:53:8b:8d:00:56:45:70:3c:bc:38:2a:97: 86:53:68:28:d8:2a:51:dc:35:a7:05:0c:ba:3a:f1: b3:04:4f:7c:19:f6:9c:da:1c:5b:9b:76:cf:13:cf: 85:e3:fc:07:1a:70:40:4e:8f:c0:99:32:c9:2f:11: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0F:D5:B6:F7:40:B3:01:57:41:C6:1D:C4:3F:AC:9A:31:C7:41:B2 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:36:17:8e:a4:53:a9:b3:9a:5b:f9:fe:0f:f6:7f:19:ff:fd: 5d:1b:6b:9b:b4:ab:69:93:3d:de:5f:cf:f1:70:a9:94:61:44: 35:2b:18:68:a0:be:f6:8f:ce:33:d6:99:6b:09:2f:ee:e1:60: 5b:78:09:68:f1:7a:09:08:bf:40:e6:c1:f7:06:87:7d:77:a3: ad:6d:bf:63:b5:98:bb:58:69:05:98:9c:58:85:30:ff:fb:8d: 5f:30:ad:3b:d1:b0:55:a7:05:64:fc:18:b3:99:43:c4:b2:4b: 05:2b:4b:25:a7:34:4a:19:f5:3d:f9:ec:a2:e5:23:51:c0:88: 90:88:53:d3:4a:41:55:f4:91:e8:30:e6:82:0a:3b:79:f6:82: 2f:26:9e:6c:ec:d5:29:19:73:f4:d8:6c:2e:5a:0c:76:a9:13: 1a:76:7f:14:dc:a9:89:7c:9d:f5:c9:2e:d1:4d:99:85:5f:bc: ed:97:a6:c4:94:0f:1a:6b:28:f6:2c:30:e6:a4:f4:c1:99:d5: fa:90:b5:40:04:db:94:29:34:a8:00:46:d2:8c:7c:e3:8a:36: 6f:1e:5e:50:ae:b2:bc:30:02:fe:aa:b4:25:e4:a8:34:2b:f3: 1a:1e:da:56:63:ed:a9:52:f4:76:d4:cb:5d:e2:2b:a9:bf:7b: bb:93:17:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNDA0MTgyMjIyWhcNMjUwNDExMTgyMjIyWjAYMRYwFAYD VQQDEw02N2YwMjM1Zi01NGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyi69Z1DRY7oATYPHVGyOyKa6OnTWaqe2n2s5lsG3Y2CTH4+dmYpwoL/ueUK TAaW5DAsmP8kf37Upgo8ThjAklGjVMK/zkmUVQwfK5PbJ9soGlF8xdZG2iiBX/bN GKjK1Bk4sLqDl4K+3JuWalUEEfmvvEkhKUmPVUjlv6jtRN6Gn++vXhcNZ91q7VEk EzlPOwJuQleUrAW+fW/tVz99Ko9e3ZI6dMdexu85XwjenOsCzbrovVELd9d0yz1s RPo73vII6AxTi40AVkVwPLw4KpeGU2go2CpR3DWnBQy6OvGzBE98Gfac2hxbm3bP E8+F4/wHGnBATo/AmTLJLxESmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoP1bb3 QLMBV0HGHcQ/rJoxx0GyMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArNheOpFOps5pb+f4P9n8Z//1dG2ubtKtpkz3eX8/xcKmUYUQ1Kxho oL72j84z1plrCS/u4WBbeAlo8XoJCL9A5sH3Bod9d6Otbb9jtZi7WGkFmJxYhTD/ +41fMK070bBVpwVk/BizmUPEsksFK0slpzRKGfU9+eyi5SNRwIiQiFPTSkFV9JHo MOaCCjt59oIvJp5s7NUpGXP02GwuWgx2qRMadn8U3KmJfJ31yS7RTZmFX7ztl6bE lA8aayj2LDDmpPTBmdX6kLVABNuUKTSoAEbSjHzjijZvHl5QrrK8MAL+qrQl5Kg0 K/MaHtpWY+2pUvR21Mtd4iupv3u7kxdz -----END CERTIFICATE-----Generated at Sun Apr 6 01:27:04 2025 by rpki-client