$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: I8uEntawnW1xdg1td+E6aA33JQMBevIUJX0vqYbfcVs= Subject key identifier: A4:DA:A0:F9:78:93:28:16:79:61:15:8D:B0:3D:9F:95:E1:87:FE:CA Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 019B Signing time: Sat 31 May 2025 03:07:25 +0000 Manifest this update: Sat 31 May 2025 03:07:24 +0000 Manifest next update: Sat 07 Jun 2025 03:07:24 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: cXyPvwRDxijml8s5FIRbOMdMRL9umFqJRgWCfYKNX7Y=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: 3Eo9M+6uF1PrL4pGQbaO7H9tA5QUvhxpxJznY/pRFpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: May 31 03:07:24 2025 GMT Not After : Jun 7 03:07:24 2025 GMT Subject: CN=683a726d-ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:4f:f2:aa:6b:e9:8e:65:b5:57:ff:2c:d6: d4:50:75:e3:14:02:4f:cc:57:a3:ec:9c:46:b1:79: ef:0f:8b:e6:b8:eb:08:a1:98:a4:46:7c:d6:45:85: 35:18:b5:a5:de:5e:c4:6f:4d:49:33:3f:e8:8d:d2: f3:6b:90:70:b4:05:f8:0b:2d:3c:4a:44:b6:9b:b3: 58:b2:9c:c3:93:74:2c:31:80:fa:b8:ec:61:55:7f: 77:d0:dd:8e:7a:6a:6f:37:5a:76:6d:fb:51:e5:82: d9:b8:ba:0c:90:8a:79:1c:8a:08:b1:29:8d:a1:b3: 4f:4e:90:fc:99:37:58:f7:83:72:b5:e5:81:18:17: 2f:96:41:be:dd:36:68:2a:9e:aa:dc:cc:8f:5c:9e: ea:80:53:49:44:f1:f5:38:2b:f2:e9:bd:89:34:4b: 44:55:f5:ed:e0:7c:e2:e1:f6:8a:25:2d:e4:6c:23: 34:03:79:cb:c7:11:9b:a2:dc:6b:ef:0a:24:42:bb: fb:17:4e:ae:6e:b9:fc:16:4a:aa:e3:37:fb:4f:09: 51:25:77:cf:b1:b9:f8:f5:d9:42:e6:63:ab:10:7d: ae:d3:2d:7a:5e:ea:1f:21:49:f7:fa:1f:57:2b:46: 8d:4d:e3:37:96:7a:72:c6:74:d4:a9:47:67:89:47: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DA:A0:F9:78:93:28:16:79:61:15:8D:B0:3D:9F:95:E1:87:FE:CA X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6c:f7:71:f9:9f:f9:7e:54:ad:fe:92:69:cf:10:02:6d:02: 3e:de:ab:ad:c0:3c:fc:a3:91:8a:51:b9:4a:05:12:63:52:0a: d6:87:59:24:87:14:2b:23:50:45:ee:f7:e4:e2:dd:1c:f1:f1: f2:2c:18:a2:6a:96:ea:fb:21:d0:c3:32:c6:3f:93:18:c7:06: 25:d3:44:4c:14:17:93:c3:bd:51:27:dd:66:5d:db:1e:ff:9d: 6b:2d:8e:79:29:79:1e:dc:fd:5f:ef:0c:41:19:61:79:a9:b2: 78:59:1e:88:d9:a8:21:a6:45:b7:56:f1:74:ef:3a:96:73:da: c7:db:56:2f:c4:4e:f8:eb:7b:c9:70:9f:c4:f1:45:b9:d3:64: 40:f0:da:cd:c8:98:b4:95:f7:6c:0b:49:39:33:87:08:18:50: 25:ce:76:7b:f7:b9:82:de:82:c8:24:46:16:06:31:bb:b5:b3: 97:c4:60:ba:0f:56:7c:8d:8a:74:a3:47:e8:73:df:33:d3:83: bd:6f:4f:86:7d:6b:c1:d2:b0:94:68:d4:bd:15:f9:93:68:6f: 43:1a:fe:48:92:70:e3:11:17:3d:7b:1c:9a:0d:94:81:0e:c3: 50:1a:45:ad:10:64:bf:69:24:7f:f3:4b:1c:52:ab:9b:44:8f: 02:cf:5b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwNTMxMDMwNzI0WhcNMjUwNjA3MDMwNzI0WjAYMRYwFAYD VQQDEw02ODNhNzI2ZC1hZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAhP8qpr6Y5ltVf/LNbUUHXjFAJPzFej7JxGsXnvD4vmuOsIoZikRnzWRYU1 GLWl3l7Eb01JMz/ojdLza5BwtAX4Cy08SkS2m7NYspzDk3QsMYD6uOxhVX930N2O empvN1p2bftR5YLZuLoMkIp5HIoIsSmNobNPTpD8mTdY94NyteWBGBcvlkG+3TZo Kp6q3MyPXJ7qgFNJRPH1OCvy6b2JNEtEVfXt4Hzi4faKJS3kbCM0A3nLxxGbotxr 7wokQrv7F06ubrn8Fkqq4zf7TwlRJXfPsbn49dlC5mOrEH2u0y16XuofIUn3+h9X K0aNTeM3lnpyxnTUqUdniUcqkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTaoPl4 kygWeWEVjbA9n5Xhh/7KMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAobPdx+Z/5flSt/pJpzxACbQI+3qutwDz8o5GKUblKBRJjUgrWh1kk hxQrI1BF7vfk4t0c8fHyLBiiapbq+yHQwzLGP5MYxwYl00RMFBeTw71RJ91mXdse /51rLY55KXke3P1f7wxBGWF5qbJ4WR6I2aghpkW3VvF07zqWc9rH21YvxE7463vJ cJ/E8UW502RA8NrNyJi0lfdsC0k5M4cIGFAlznZ797mC3oLIJEYWBjG7tbOXxGC6 D1Z8jYp0o0foc98z04O9b0+GfWvB0rCUaNS9FfmTaG9DGv5IknDjERc9exyaDZSB DsNQGkWtEGS/aSR/80scUqubRI8Cz1vR -----END CERTIFICATE-----Generated at Sat May 31 16:43:50 2025 by rpki-client