$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: hY9QRCKUblXz1rjFzkcQuYiOYZH9Jp+4L+i1NAIw5ow= Subject key identifier: AF:4A:36:27:DF:7A:4C:67:7A:AC:73:17:DE:AE:AB:17:56:92:2F:B3 Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 0188 Signing time: Fri 25 Apr 2025 02:45:10 +0000 Manifest this update: Fri 25 Apr 2025 02:45:10 +0000 Manifest next update: Fri 02 May 2025 02:45:10 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: 4bxXAVahjV7cRPjG57pCD2sS7hG+3dkeJMVujfthOJg=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: n6K4D2BF6Z/jg8pmMgx23T1tIpkzmfvCsXfhNFPSXIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: Apr 25 02:45:10 2025 GMT Not After : May 2 02:45:10 2025 GMT Subject: CN=680af736-b87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:22:36:06:2e:50:d4:0b:bb:8b:31:94:4d: 24:0f:41:2d:65:16:18:2a:8a:c9:69:6d:2d:6d:7d: 57:85:e4:bf:8d:6b:af:95:f9:b6:5a:7a:80:1f:ac: 0f:fb:55:c1:93:b7:dd:4d:b3:35:f9:8f:6a:87:22: 9d:a8:f8:d5:4b:7b:dd:73:16:3b:99:2d:ca:11:3c: e1:6a:ae:b2:21:c9:85:3c:51:da:8d:59:61:e5:71: c8:95:a9:fb:a5:6f:4b:e1:d8:9f:bb:0f:71:9f:0c: c0:00:b9:26:d3:7e:32:6f:6a:58:eb:b8:3f:ad:8c: e0:05:ba:3c:21:1f:01:80:0e:dc:cf:75:54:6c:a9: e6:4b:3d:79:46:ac:4d:0c:4c:1d:41:ae:c0:2f:dc: 17:ba:b5:56:40:b7:40:aa:d1:e8:d1:17:64:4a:f1: e6:14:bd:3a:31:09:6f:e9:2b:0a:a5:d2:56:e3:a4: 03:7e:bb:fb:a7:1b:2e:51:e4:af:ab:f3:75:c8:72: 11:a5:68:8e:dd:7e:9f:80:9e:05:72:39:7f:18:47: a6:a6:25:98:3d:45:15:b8:5a:c6:93:d7:13:1a:46: 82:19:19:8c:33:d1:af:a8:e4:70:25:c4:4d:23:de: 8c:d8:d3:14:74:98:9f:70:90:eb:34:c5:5d:1d:e1: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4A:36:27:DF:7A:4C:67:7A:AC:73:17:DE:AE:AB:17:56:92:2F:B3 X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b0:19:1e:2f:8c:13:bd:b9:01:83:f1:4d:01:30:71:52:f7: 4c:79:d6:42:b2:d4:bb:c3:a5:f2:a0:68:7f:3b:44:bc:1e:4b: 6a:cb:df:5a:bc:11:19:99:74:23:61:44:1e:31:d6:fd:51:9b: 06:9c:9e:62:67:1b:d2:34:ab:be:7a:3c:30:db:e0:39:e2:a5: 8c:b1:df:3c:99:17:3c:c9:b9:cd:81:64:59:6a:c2:5b:6d:fd: 8c:4c:ed:b3:81:be:87:50:44:fe:1f:bd:33:df:52:47:39:27: 86:70:1a:53:7d:b4:54:ad:6f:be:f1:07:10:74:13:e8:36:ea: c9:07:5f:f1:5c:51:d7:8c:48:0d:87:a4:c3:16:ee:12:25:e1: 8b:ee:2f:48:2b:7d:0b:08:d0:02:65:fc:f1:09:13:7e:29:bf: 79:e6:c0:dc:47:a5:3b:d4:23:37:f7:6a:1e:ec:74:05:40:e5: 5e:10:93:2e:4c:b9:e1:5e:a5:3d:84:50:ce:41:e0:3d:5e:7b: e0:22:04:c7:ca:ab:9c:47:17:c7:c2:6d:55:5c:96:a1:69:c7: b4:89:de:48:a0:51:c1:13:fb:7d:4c:c9:8e:53:4a:ab:33:69: a6:48:75:c8:45:48:a7:60:78:ee:56:72:07:d6:69:e2:35:a9: 58:87:09:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwNDI1MDI0NTEwWhcNMjUwNTAyMDI0NTEwWjAYMRYwFAYD VQQDEw02ODBhZjczNi1iODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7kiNgYuUNQLu4sxlE0kD0EtZRYYKorJaW0tbX1XheS/jWuvlfm2WnqAH6wP +1XBk7fdTbM1+Y9qhyKdqPjVS3vdcxY7mS3KETzhaq6yIcmFPFHajVlh5XHIlan7 pW9L4difuw9xnwzAALkm034yb2pY67g/rYzgBbo8IR8BgA7cz3VUbKnmSz15RqxN DEwdQa7AL9wXurVWQLdAqtHo0RdkSvHmFL06MQlv6SsKpdJW46QDfrv7pxsuUeSv q/N1yHIRpWiO3X6fgJ4Fcjl/GEempiWYPUUVuFrGk9cTGkaCGRmMM9GvqORwJcRN I96M2NMUdJifcJDrNMVdHeGRsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9KNiff ekxneqxzF96uqxdWki+zMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCisBkeL4wTvbkBg/FNATBxUvdMedZCstS7w6XyoGh/O0S8Hktqy99a vBEZmXQjYUQeMdb9UZsGnJ5iZxvSNKu+ejww2+A54qWMsd88mRc8ybnNgWRZasJb bf2MTO2zgb6HUET+H70z31JHOSeGcBpTfbRUrW++8QcQdBPoNurJB1/xXFHXjEgN h6TDFu4SJeGL7i9IK30LCNACZfzxCRN+Kb955sDcR6U71CM392oe7HQFQOVeEJMu TLnhXqU9hFDOQeA9XnvgIgTHyqucRxfHwm1VXJahace0id5IoFHBE/t9TMmOU0qr M2mmSHXIRUinYHjuVnIH1mniNalYhwnG -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:48 2025 by rpki-client