$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: W4MJIBUAa2L+rqs40nTK28epINk7WxT5kGjKEre19L0= Subject key identifier: 4D:41:24:06:84:6F:6A:62:55:E9:E6:9E:AA:D2:7D:1F:FF:2F:65:E6 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 0193 Signing time: Fri 13 Jun 2025 02:30:11 +0000 Manifest this update: Fri 13 Jun 2025 02:30:11 +0000 Manifest next update: Fri 20 Jun 2025 02:30:11 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: ZmbXQUek95r1ova3Q+0Zf/ogoedOJ1x0Z/+LCgTOgj4=) 2: BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa (hash: TcJPWywxYGP4zNwqCV3RMOeXIr2sCq4he29rvfSHcP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Jun 13 02:30:11 2025 GMT Not After : Jun 20 02:30:11 2025 GMT Subject: CN=684b8d33-2e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:d6:49:31:2a:d9:e9:2f:d6:d3:08:10:9b: 52:c4:d2:05:58:d0:ac:18:79:b3:cb:58:4c:3b:8a: 8d:e4:df:54:6e:26:c4:b6:66:85:19:a5:10:11:bb: 1f:74:52:5b:8b:d0:97:c8:c7:cf:8c:c3:4b:5c:f3: 8d:8e:67:19:a7:fa:e6:64:db:0f:1e:ea:31:77:c8: d1:6e:03:07:3b:b6:d8:c7:28:70:6c:fb:16:a1:b0: ea:0f:f6:03:2b:04:dd:32:ba:a2:65:bc:e2:7b:e0: 10:10:03:2b:d5:00:a0:fd:ec:ab:e4:5d:0b:40:69: 8a:2a:9c:01:96:50:4d:fe:b0:0d:69:20:a9:bc:80: 29:e2:68:9f:e6:eb:c1:09:91:cd:f3:84:fd:b3:c7: 02:9c:3b:f3:b3:45:c2:02:4e:87:17:9c:5a:eb:9f: 2b:d0:52:d0:89:2e:4e:9d:b6:42:0e:89:55:df:c3: 71:1b:bc:e5:5c:ae:9a:15:5d:1d:d8:22:ab:f6:9b: 13:bf:9d:94:19:d0:40:10:31:75:68:ce:30:eb:4f: d1:34:4e:53:65:4f:2b:aa:e5:5c:8b:c4:ca:d7:50: 45:3a:34:b8:18:27:29:7f:59:f5:db:a5:66:d9:5e: a7:d0:d8:7f:48:9d:87:9c:d2:6b:4d:03:10:8a:c5: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:24:06:84:6F:6A:62:55:E9:E6:9E:AA:D2:7D:1F:FF:2F:65:E6 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6d:94:29:9b:40:7e:26:cb:f1:7b:6d:cd:ec:28:91:71:20: 9e:e9:09:0e:35:65:54:aa:06:ff:69:dd:da:c8:2a:ec:99:b6: a3:ee:11:24:58:cf:38:2d:36:fe:8a:3f:c3:38:6c:04:1a:79: 6b:d9:94:3b:41:16:35:96:3d:4e:7d:1d:71:4c:89:0d:0a:0f: 08:b6:a3:54:53:c0:ef:c1:1c:89:06:12:9d:86:ae:fc:92:45: 41:a8:63:2f:f9:05:f4:27:44:4b:69:b7:76:5c:cf:8f:45:9a: c0:3e:cc:03:94:6c:86:d9:f0:ce:a8:33:e9:20:c9:49:c7:17: 47:91:b9:5f:67:c1:86:c4:09:43:d2:c8:e8:d3:6c:cb:e6:54: e4:5b:75:24:32:b0:8a:d7:16:f9:ec:64:3a:75:90:1a:f7:f8: 22:55:08:5e:43:d7:00:35:65:86:21:27:46:a2:7f:12:f6:60: ad:24:91:ea:e5:29:2f:3b:64:59:6f:0e:6c:5b:61:77:cf:f0: ea:77:0d:f7:bc:37:8e:8a:7c:41:e2:01:56:a8:6c:ed:b1:15: d0:84:9c:dc:f0:60:54:cf:2f:21:b2:d7:e3:1a:f8:5a:da:d0: 8d:33:81:4c:6a:d1:db:b1:b7:e9:11:6f:b8:d9:54:70:c6:6a: fd:f9:b4:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUwNjEzMDIzMDExWhcNMjUwNjIwMDIzMDExWjAYMRYwFAYD VQQDEw02ODRiOGQzMy0yZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA277WSTEq2ekv1tMIEJtSxNIFWNCsGHmzy1hMO4qN5N9UbibEtmaFGaUQEbsf dFJbi9CXyMfPjMNLXPONjmcZp/rmZNsPHuoxd8jRbgMHO7bYxyhwbPsWobDqD/YD KwTdMrqiZbzie+AQEAMr1QCg/eyr5F0LQGmKKpwBllBN/rANaSCpvIAp4mif5uvB CZHN84T9s8cCnDvzs0XCAk6HF5xa658r0FLQiS5OnbZCDolV38NxG7zlXK6aFV0d 2CKr9psTv52UGdBAEDF1aM4w60/RNE5TZU8rquVci8TK11BFOjS4GCcpf1n126Vm 2V6n0Nh/SJ2HnNJrTQMQisVvKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1BJAaE b2piVenmnqrSfR//L2XmMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADbZQpm0B+Jsvxe23N7CiRcSCe6QkONWVUqgb/ad3ayCrsmbaj7hEk WM84LTb+ij/DOGwEGnlr2ZQ7QRY1lj1OfR1xTIkNCg8ItqNUU8DvwRyJBhKdhq78 kkVBqGMv+QX0J0RLabd2XM+PRZrAPswDlGyG2fDOqDPpIMlJxxdHkblfZ8GGxAlD 0sjo02zL5lTkW3UkMrCK1xb57GQ6dZAa9/giVQheQ9cANWWGISdGon8S9mCtJJHq 5SkvO2RZbw5sW2F3z/Dqdw33vDeOinxB4gFWqGztsRXQhJzc8GBUzy8hstfjGvha 2tCNM4FMatHbsbfpEW+42VRwxmr9+bSQ -----END CERTIFICATE-----Generated at Sat Jun 14 18:47:38 2025 by rpki-client