$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: VJCu+oHJesI4LFl08Yh2MATwc9YNhK2mrXLPwC/dU4Q= Subject key identifier: 78:0F:32:EF:00:39:DB:AC:68:A3:5C:96:93:D5:68:B4:0F:05:ED:A6 Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: 01A4 Signing time: Tue 17 Jun 2025 02:27:31 +0000 Manifest this update: Tue 17 Jun 2025 02:27:30 +0000 Manifest next update: Tue 24 Jun 2025 02:27:30 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: mN9ysdeJ6CtO6vlRAtHHvUEy04VefNRMNgw4mVswF0w=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: 3Eo9M+6uF1PrL4pGQbaO7H9tA5QUvhxpxJznY/pRFpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: Jun 17 02:27:30 2025 GMT Not After : Jun 24 02:27:30 2025 GMT Subject: CN=6850d292-40ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:77:c1:1c:34:34:29:f9:77:46:7a:b1:bf: f7:bd:35:97:50:62:25:0d:5f:5b:3a:03:c4:fd:bd: 26:53:93:1b:9b:24:04:37:ea:47:17:eb:f7:8f:8c: 1c:ea:42:1f:e6:8e:90:73:7f:9e:31:44:71:07:e4: 14:29:cb:50:1d:c4:9e:23:e6:d7:2d:7a:5a:33:3c: 70:56:6a:1b:e1:c5:2c:be:80:8a:98:1a:98:06:02: b6:9e:5a:82:29:fe:76:b3:27:6f:fa:93:f8:99:e9: 26:e9:d9:38:5c:65:97:5f:0c:cf:12:c2:dd:b2:e9: b0:13:96:8c:0f:bc:64:b1:48:ec:13:36:ba:3c:59: 98:06:20:61:75:5f:dc:b3:01:e0:8b:fc:75:61:85: 3e:8a:25:2c:29:a5:bf:fd:d6:2a:8d:e7:7c:5e:95: f6:bf:f8:18:b6:95:a0:84:2a:05:87:33:85:85:af: c6:ea:c0:85:47:60:97:64:ed:34:cf:a5:13:56:8d: 39:9d:44:9a:53:a6:16:48:7b:61:1d:49:f5:67:55: 0e:d2:8f:3d:70:70:6b:96:db:9b:0f:97:9d:4d:5b: d7:42:49:c3:be:b3:c2:29:b4:2d:03:b9:c4:37:80: 48:c8:db:67:25:f9:ba:cb:c6:04:94:f1:4a:78:e5: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0F:32:EF:00:39:DB:AC:68:A3:5C:96:93:D5:68:B4:0F:05:ED:A6 X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0c:62:a9:16:5e:6a:4f:ec:7e:0e:67:4f:1d:fb:f9:00:7d: 92:99:17:e4:90:d0:1a:b0:8e:28:6d:c9:4d:b1:fb:a7:f7:4b: 5a:af:00:36:9d:bc:2f:f9:d4:32:a3:a6:14:a2:a6:8e:3d:b9: 91:be:63:9a:fe:68:ad:3c:c9:b2:e7:5c:ae:f3:7f:c8:60:d7: 50:1b:04:b0:60:a6:8b:a3:1b:60:66:45:51:6a:85:57:a8:02: 46:a7:3e:a1:9e:ab:20:05:f1:d3:0a:bd:54:4f:6b:03:10:e9: b4:31:2d:7d:95:6e:25:8c:3d:c3:eb:e8:44:cd:ff:24:e4:ab: cc:df:47:59:47:c8:de:7d:28:e6:1d:1f:9c:ad:80:49:63:28: 3b:76:80:b3:42:52:d5:5d:ef:89:4c:0a:5c:3c:c4:35:cd:99: 8d:10:e3:72:81:eb:df:8a:e4:7d:23:5a:b3:7d:fa:42:aa:cb: ce:09:7d:70:2e:ad:90:73:a6:01:09:5b:b5:82:65:73:ca:d6: 15:5e:bf:b2:1a:93:bf:bc:8d:a6:16:1d:72:f7:f1:b2:3b:a8: 1b:ca:73:66:d4:ae:39:15:bf:4c:68:ac:d3:6a:a5:03:d6:43: b4:eb:95:58:74:d2:69:f2:36:3c:d2:5d:4e:8a:bc:44:b2:65: 2b:59:39:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjUwNjE3MDIyNzMwWhcNMjUwNjI0MDIyNzMwWjAYMRYwFAYD VQQDEw02ODUwZDI5Mi00MGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cx3wRw0NCn5d0Z6sb/3vTWXUGIlDV9bOgPE/b0mU5MbmyQEN+pHF+v3j4wc 6kIf5o6Qc3+eMURxB+QUKctQHcSeI+bXLXpaMzxwVmob4cUsvoCKmBqYBgK2nlqC Kf52sydv+pP4mekm6dk4XGWXXwzPEsLdsumwE5aMD7xksUjsEza6PFmYBiBhdV/c swHgi/x1YYU+iiUsKaW//dYqjed8XpX2v/gYtpWghCoFhzOFha/G6sCFR2CXZO00 z6UTVo05nUSaU6YWSHthHUn1Z1UO0o89cHBrltubD5edTVvXQknDvrPCKbQtA7nE N4BIyNtnJfm6y8YElPFKeOWRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgPMu8A OdusaKNclpPVaLQPBe2mMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYDGKpFl5qT+x+DmdPHfv5AH2SmRfkkNAasI4obclNsfun90tarwA2 nbwv+dQyo6YUoqaOPbmRvmOa/mitPMmy51yu83/IYNdQGwSwYKaLoxtgZkVRaoVX qAJGpz6hnqsgBfHTCr1UT2sDEOm0MS19lW4ljD3D6+hEzf8k5KvM30dZR8jefSjm HR+crYBJYyg7doCzQlLVXe+JTApcPMQ1zZmNEONygevfiuR9I1qzffpCqsvOCX1w Lq2Qc6YBCVu1gmVzytYVXr+yGpO/vI2mFh1y9/GyO6gbynNm1K45Fb9MaKzTaqUD 1kO065VYdNJp8jY80l1OirxEsmUrWTny -----END CERTIFICATE-----Generated at Tue Jun 17 10:35:39 2025 by rpki-client