$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json) Hash identifier: 0A0zzBsH8tpF6rLU2jzmgAypRpfZ5LdVuHcGiEMMM/I= Subject key identifier: C3:9D:23:2E:9C:B6:52:FA:9F:2A:EA:26:6A:8D:CC:B3:15:10:F5:13 Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft Manifest number: 08EE Signing time: Fri 30 May 2025 20:37:08 +0000 Manifest this update: Fri 30 May 2025 20:37:07 +0000 Manifest next update: Fri 06 Jun 2025 20:37:07 +0000 Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: WCnic4nL6DOeaK6OryCh1s9U6v1kdwBbgxXun8Mc6L4=) 2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: SDDF+daD6uA45d2pVbzA/cw/2JyMm9s9TzTDlHyfXN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Validity Not Before: May 30 20:37:07 2025 GMT Not After : Jun 6 20:37:07 2025 GMT Subject: CN=683a16f3-1ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:fe:7f:d2:7e:84:c1:85:28:4e:d6:52:8a: 88:c7:f2:b9:bc:2b:4b:5c:8d:18:d1:0c:13:d3:89: 3e:64:9f:47:e6:7c:97:09:cf:4e:e7:2c:af:55:bc: 34:42:f8:30:a1:5c:12:94:90:75:4f:c0:69:1b:9b: cb:bf:54:11:9e:03:15:24:dd:c7:2c:00:7a:11:8d: 44:ec:58:43:c4:87:09:84:bd:30:12:83:70:54:d6: 48:22:f5:7c:2e:26:77:e2:9a:16:a1:b5:0f:bf:d5: 35:ee:8a:56:03:87:4e:1b:50:1e:5d:23:15:f7:14: 3f:93:37:08:09:e2:72:bb:b2:6a:e2:ed:8d:67:53: d6:1d:a7:77:28:f0:23:99:b7:20:a0:cd:1b:75:40: ed:df:94:11:9a:68:1c:5b:ce:db:ff:4c:31:e6:42: e7:c5:57:64:7b:d4:a1:24:5c:c6:65:0f:53:07:52: 18:7b:43:10:1e:6c:ca:0c:bd:d3:5f:b1:94:5b:14: 75:15:1d:fb:10:e0:fb:0e:5f:80:dd:2f:e0:c7:a3: 5e:14:e2:39:c6:b2:f4:a0:bb:e1:53:ac:76:c5:52: f9:0d:17:0d:60:a1:90:5f:65:33:25:c9:60:fe:e9: c9:be:ec:75:08:fd:3a:a8:24:4f:a5:1f:2e:06:d5: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:23:2E:9C:B6:52:FA:9F:2A:EA:26:6A:8D:CC:B3:15:10:F5:13 X509v3 Authority Key Identifier: keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7d:f0:dd:27:1a:a8:ad:1a:91:df:52:d9:5d:56:2a:5c:76: d5:2d:b2:9d:e2:59:e6:b8:d1:85:82:00:cb:98:c7:c7:02:95: 08:34:da:28:8c:da:8b:fa:a4:1f:e1:1a:c6:83:6d:8a:1f:56: 6c:b2:05:34:3e:a7:5c:07:37:3c:c8:9c:2d:b7:3c:06:87:f8: 88:95:c1:4e:8a:67:86:ce:26:5d:a0:4d:de:6c:42:66:aa:83: 90:47:83:49:18:cd:6c:e3:f9:11:b2:7a:ac:89:16:9d:04:b0: 03:82:84:93:fd:fa:93:1c:4c:e4:d2:6d:93:5d:6e:1e:65:82: 84:84:a1:ff:70:8d:a1:37:89:d5:0c:f0:6e:00:b3:bc:14:1e: 1c:37:2b:46:a7:5f:1d:81:62:7d:64:c2:79:81:7c:84:b1:dd: fc:9d:1f:5f:19:0a:70:f5:8d:77:93:d4:f1:bd:cd:7a:86:ba: 1d:46:cd:f5:69:7d:7d:8e:cb:dd:35:1d:d5:7d:a9:f1:37:20: 13:ec:6e:4a:7a:ac:e9:1e:c9:1c:0b:39:47:cc:53:55:c7:4b: ac:1a:e8:05:1d:a9:33:40:4f:4e:f6:44:7c:57:df:5d:58:d1: d8:6c:b6:8f:df:d6:b7:dd:6d:6c:aa:1f:48:c6:41:b3:3e:e9: 99:59:8a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw MzIxNTc1QzcwHhcNMjUwNTMwMjAzNzA3WhcNMjUwNjA2MjAzNzA3WjAYMRYwFAYD VQQDEw02ODNhMTZmMy0xYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykD+f9J+hMGFKE7WUoqIx/K5vCtLXI0Y0QwT04k+ZJ9H5nyXCc9O5yyvVbw0 QvgwoVwSlJB1T8BpG5vLv1QRngMVJN3HLAB6EY1E7FhDxIcJhL0wEoNwVNZIIvV8 LiZ34poWobUPv9U17opWA4dOG1AeXSMV9xQ/kzcICeJyu7Jq4u2NZ1PWHad3KPAj mbcgoM0bdUDt35QRmmgcW87b/0wx5kLnxVdke9ShJFzGZQ9TB1IYe0MQHmzKDL3T X7GUWxR1FR37EOD7Dl+A3S/gx6NeFOI5xrL0oLvhU6x2xVL5DRcNYKGQX2UzJclg /unJvux1CP06qCRPpR8uBtXf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOdIy6c tlL6nyrqJmqNzLMVEPUTMB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4 X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaffDdJxqorRqR31LZXVYqXHbVLbKd4lnmuNGFggDLmMfHApUINNoo jNqL+qQf4RrGg22KH1ZssgU0PqdcBzc8yJwttzwGh/iIlcFOimeGziZdoE3ebEJm qoOQR4NJGM1s4/kRsnqsiRadBLADgoST/fqTHEzk0m2TXW4eZYKEhKH/cI2hN4nV DPBuALO8FB4cNytGp18dgWJ9ZMJ5gXyEsd38nR9fGQpw9Y13k9Txvc16hrodRs31 aX19jsvdNR3VfanxNyAT7G5KeqzpHskcCzlHzFNVx0usGugFHakzQE9O9kR8V99d WNHYbLaP39a33W1sqh9IxkGzPumZWYra -----END CERTIFICATE-----Generated at Sat May 31 16:47:48 2025 by rpki-client