$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: RhsR8JjeDKIQSPQMmAhwFcDSVBK+0t0dLofOv8F/Yn4= Subject key identifier: 26:92:89:37:12:03:70:04:42:9A:78:72:D5:CE:B6:5E:E2:1A:9D:F8 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0C88 Signing time: Thu 24 Apr 2025 18:12:19 +0000 Manifest this update: Thu 24 Apr 2025 18:12:18 +0000 Manifest next update: Thu 01 May 2025 18:12:18 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: 4eGaI8XCSaIng8m92obE/UXFXlhl9DAas6e7JtWtn8Q=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: XBCRIujbmqCZAO+evWS2z7S/+660XMC7RMeYNEWozlk=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: EHmZXLxVsief8zLb3cKkbfGcRs3h6H923HKwEbsQt7I=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: GO1uvSUSs2KlKPAfKRLY58uFyr43GGZE9D5pAlewhKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 24 18:12:18 2025 GMT Not After : May 1 18:12:18 2025 GMT Subject: CN=680a7f02-9624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:4a:1f:d4:09:00:21:e1:3f:b5:2d:9f:b1: 19:18:f9:03:a3:04:fd:43:61:ab:75:4e:e5:61:5b: 83:65:dc:08:47:ce:0f:66:03:85:a6:ca:26:7d:d4: d6:b8:a5:a1:34:10:50:ed:9f:2a:0a:9a:22:d7:88: a7:aa:5e:12:29:ec:f6:a5:af:ba:c8:62:14:5e:e4: 6f:23:60:a4:f4:1a:b3:a7:58:97:25:15:74:d3:19: 37:c8:f9:b6:68:17:54:30:ea:f6:d5:8e:bd:11:b3: 2f:75:0a:d7:1b:52:6b:cb:56:bf:fd:e5:c6:32:3d: aa:40:2e:e4:58:32:8e:84:0e:d9:94:ef:c1:33:66: 59:38:3c:b5:dd:ab:c4:ff:1c:bd:7e:fc:d2:88:70: c3:50:1d:c7:e6:19:b2:77:ce:72:4a:e4:b7:81:18: 95:a5:1d:7b:e1:8a:14:2b:e3:35:00:ec:80:20:3f: e6:b9:2d:fe:e7:23:b3:70:a3:14:24:89:90:58:3a: 69:60:3c:bf:d0:91:cc:db:d7:7b:6e:e1:38:34:ba: df:bf:08:7d:21:60:bb:de:e9:76:b4:b9:dc:94:b9: 08:a7:bc:6f:07:81:30:ec:8e:2e:a2:2e:96:da:60: ed:13:c7:af:f9:da:80:42:45:58:5b:ee:91:dc:88: f4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:92:89:37:12:03:70:04:42:9A:78:72:D5:CE:B6:5E:E2:1A:9D:F8 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:01:74:f3:b2:40:5e:cc:46:63:c2:ec:f0:6a:2d:c9:14:e5: f1:c4:78:3e:39:41:5d:69:a0:88:dc:12:95:6d:41:4d:22:b7: 76:d5:db:d1:83:8d:53:7b:17:58:97:f9:d8:96:51:81:c5:46: d2:ea:b1:02:6c:f4:b6:de:46:55:d3:d8:6f:84:d5:59:fb:b2: 5c:90:ef:2e:f5:5a:72:67:92:80:11:a2:12:76:82:c4:41:fd: 38:58:25:08:1f:6a:4e:f2:8c:fb:db:ad:92:48:bb:bd:ce:c8: 3a:ae:96:34:13:11:63:c2:53:fd:07:c3:c9:e1:77:d0:73:01: cd:12:73:cd:8b:31:15:6a:2e:a9:a0:1f:2f:7c:79:66:c0:02: 5e:11:ab:ba:c2:c3:f5:8d:ac:92:f1:92:22:27:1b:1a:78:00: ae:47:10:0e:97:e3:11:bf:6b:fc:90:4d:84:0f:76:05:5a:27: 59:2e:b8:c4:8d:d7:8f:2e:57:5d:fa:63:f3:a4:41:40:e5:54: 8d:b3:84:89:2d:9a:48:0b:a8:c2:7a:34:13:e7:c0:14:ec:f2: 0e:da:ac:34:b4:26:29:88:43:ff:fb:a1:db:94:72:fa:c4:2f: 14:1d:f7:4b:cd:fe:6b:47:61:2a:cc:9f:85:10:51:d0:e7:be: 6e:16:56:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNDI0MTgxMjE4WhcNMjUwNTAxMTgxMjE4WjAYMRYwFAYD VQQDEw02ODBhN2YwMi05NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yxKH9QJACHhP7Utn7EZGPkDowT9Q2GrdU7lYVuDZdwIR84PZgOFpsomfdTW uKWhNBBQ7Z8qCpoi14inql4SKez2pa+6yGIUXuRvI2Ck9Bqzp1iXJRV00xk3yPm2 aBdUMOr21Y69EbMvdQrXG1Jry1a//eXGMj2qQC7kWDKOhA7ZlO/BM2ZZODy13avE /xy9fvzSiHDDUB3H5hmyd85ySuS3gRiVpR174YoUK+M1AOyAID/muS3+5yOzcKMU JImQWDppYDy/0JHM29d7buE4NLrfvwh9IWC73ul2tLnclLkIp7xvB4Ew7I4uoi6W 2mDtE8ev+dqAQkVYW+6R3Ij0GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaSiTcS A3AEQpp4ctXOtl7iGp34MB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCAXTzskBezEZjwuzwai3JFOXxxHg+OUFdaaCI3BKVbUFNIrd21dvR g41TexdYl/nYllGBxUbS6rECbPS23kZV09hvhNVZ+7JckO8u9VpyZ5KAEaISdoLE Qf04WCUIH2pO8oz7262SSLu9zsg6rpY0ExFjwlP9B8PJ4XfQcwHNEnPNizEVai6p oB8vfHlmwAJeEau6wsP1jayS8ZIiJxsaeACuRxAOl+MRv2v8kE2ED3YFWidZLrjE jdePLldd+mPzpEFA5VSNs4SJLZpIC6jCejQT58AU7PIO2qw0tCYpiEP/+6HblHL6 xC8UHfdLzf5rR2EqzJ+FEFHQ575uFlbZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:41 2025 by rpki-client