$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: ndUJkDgoRY2xq2uIgSQ8YzF3aHc8+3dKMSIynvUTfAk= Subject key identifier: F3:1F:08:9C:91:D1:44:F6:CC:42:F6:B1:43:3B:81:B8:7F:20:3F:2E Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0C9C Signing time: Fri 30 May 2025 18:25:48 +0000 Manifest this update: Fri 30 May 2025 18:25:47 +0000 Manifest next update: Fri 06 Jun 2025 18:25:47 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: sC7uC46hUgjkPIUn9ifkBduWAYh5tLcxbo6BPIhS0+4=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: May 30 18:25:47 2025 GMT Not After : Jun 6 18:25:47 2025 GMT Subject: CN=6839f82c-37d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:41:4f:ed:7a:9c:4d:cc:41:32:2a:ad:d5: d3:93:c9:ef:d9:a5:24:87:f5:09:12:53:a3:07:2b: 7d:e8:88:e1:01:20:84:96:40:70:87:64:dc:8f:e8: 70:38:3b:b2:8b:39:55:59:c9:ac:e6:cc:d5:9a:95: 55:d9:68:d2:38:0c:4e:15:ff:68:cf:88:46:f2:94: e0:f2:02:f3:c5:f9:d6:38:57:15:19:19:c4:58:f6: a8:a2:49:74:4a:8f:be:2a:4f:5d:75:90:fa:b8:e2: ab:51:3e:b8:a8:d3:9a:cb:02:0c:ad:4e:89:f9:01: 0f:3b:f7:20:88:2a:22:6d:42:58:ea:75:46:2a:ce: 55:d7:88:ad:2a:43:7a:71:b0:cc:bd:84:2f:97:4d: 24:bb:7b:86:23:d4:61:f2:86:14:9a:4f:d9:64:39: d2:84:69:98:b7:5a:7b:03:42:99:17:95:48:f7:d5: 87:01:27:98:89:a3:32:5c:42:fe:8f:bf:b5:02:03: 4e:40:ca:81:10:c3:c6:5b:79:06:db:0a:97:b8:d1: 6d:a0:5e:27:02:7d:b7:6b:59:11:54:ff:74:11:c8: a1:83:8e:a5:07:d8:37:50:8d:80:08:cc:12:88:8a: 14:7a:77:4b:99:c9:e9:32:dc:91:0f:bb:00:8e:48: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1F:08:9C:91:D1:44:F6:CC:42:F6:B1:43:3B:81:B8:7F:20:3F:2E X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3e:91:6c:8a:59:51:5e:9b:58:d4:71:55:4d:df:ee:19:76: 03:be:b3:33:77:42:22:ad:a7:b7:f5:42:a7:49:08:30:ee:5c: 05:ec:38:bc:ce:4a:6c:11:14:94:db:76:39:cc:85:8c:29:34: 6c:d2:66:9a:1a:e5:f8:75:2c:8f:cf:a0:9a:21:29:c0:6a:27: dc:1a:b1:92:de:a8:89:73:7f:01:0d:79:65:67:e1:b5:34:81: 90:da:f0:6f:65:ab:b9:be:b6:44:b5:e3:82:df:85:4c:4f:0f: 5d:1b:29:8a:76:18:49:a3:c4:9d:ac:55:73:a4:1a:93:39:6f: ab:87:a1:38:32:b9:b0:51:92:ea:28:e0:33:df:dc:be:fa:0f: 23:d1:54:88:72:b8:f0:e9:5a:ca:5e:74:ea:d0:50:f8:21:24: 29:49:53:fb:23:92:db:04:68:be:a6:6b:d8:8f:bd:d7:0d:26: 38:47:f4:0f:21:e3:79:11:a4:bc:b0:a0:04:75:b8:c9:a5:fe: 85:cb:ea:cb:15:09:3f:c8:1b:54:02:b0:6c:1b:55:9f:d5:b3: 73:3e:6c:91:2d:85:0d:10:0d:3e:48:90:ba:b2:04:fc:1d:9b: f3:a8:e6:25:ce:b2:23:f9:39:e6:46:ab:33:4b:c5:42:7b:4b: bd:fe:1c:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNTMwMTgyNTQ3WhcNMjUwNjA2MTgyNTQ3WjAYMRYwFAYD VQQDEw02ODM5ZjgyYy0zN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qhBT+16nE3MQTIqrdXTk8nv2aUkh/UJElOjByt96IjhASCElkBwh2Tcj+hw ODuyizlVWcms5szVmpVV2WjSOAxOFf9oz4hG8pTg8gLzxfnWOFcVGRnEWPaookl0 So++Kk9ddZD6uOKrUT64qNOaywIMrU6J+QEPO/cgiCoibUJY6nVGKs5V14itKkN6 cbDMvYQvl00ku3uGI9Rh8oYUmk/ZZDnShGmYt1p7A0KZF5VI99WHASeYiaMyXEL+ j7+1AgNOQMqBEMPGW3kG2wqXuNFtoF4nAn23a1kRVP90Ecihg46lB9g3UI2ACMwS iIoUendLmcnpMtyRD7sAjki1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMfCJyR 0UT2zEL2sUM7gbh/ID8uMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApPpFsillRXptY1HFVTd/uGXYDvrMzd0Iirae39UKnSQgw7lwF7Di8 zkpsERSU23Y5zIWMKTRs0maaGuX4dSyPz6CaISnAaifcGrGS3qiJc38BDXllZ+G1 NIGQ2vBvZau5vrZEteOC34VMTw9dGymKdhhJo8SdrFVzpBqTOW+rh6E4MrmwUZLq KOAz39y++g8j0VSIcrjw6VrKXnTq0FD4ISQpSVP7I5LbBGi+pmvYj73XDSY4R/QP IeN5EaS8sKAEdbjJpf6Fy+rLFQk/yBtUArBsG1Wf1bNzPmyRLYUNEA0+SJC6sgT8 HZvzqOYlzrIj+TnmRqszS8VCe0u9/hxN -----END CERTIFICATE-----Generated at Sat May 31 17:20:34 2025 by rpki-client