$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: JEuCG8+HXeN3EZ0guRBl8arAL11coZGV1hnXpfT99eM= Subject key identifier: 5F:2C:95:72:94:23:A5:96:13:E0:62:8E:A0:55:1F:01:89:0D:60:B3 Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 06BB Signing time: Wed 02 Apr 2025 22:05:53 +0000 Manifest this update: Wed 02 Apr 2025 22:05:53 +0000 Manifest next update: Wed 09 Apr 2025 22:05:53 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 4whPXDxew+PVGWtrdimZUsElH12GB3O9/EL8Z+UZpbM=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7 Validity Not Before: Apr 2 22:05:53 2025 GMT Not After : Apr 9 22:05:53 2025 GMT Subject: CN=67edb4c1-5320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:50:de:9c:72:76:f4:c1:24:d6:c5:a5:19: 10:5f:22:e7:b3:94:44:20:a3:31:74:7e:dd:e2:d7: 4f:fe:1e:ab:06:ef:b4:f1:a8:52:5f:03:37:1f:5f: 50:c3:8f:53:27:58:9b:9c:d9:f8:a5:ae:ad:03:7d: 6d:47:76:65:66:b7:35:38:04:6d:e7:1c:a5:72:3b: 90:76:19:62:56:b1:23:57:70:43:7e:ac:1f:eb:f0: 9c:db:0b:ea:57:c9:bf:57:59:02:c7:67:97:22:81: f6:9f:8d:a1:1c:1d:d9:da:c0:99:52:d2:d1:5d:75: 22:13:a6:45:78:91:e2:c1:ec:84:ce:28:36:09:f4: 51:cd:c2:2b:9e:3e:2a:c6:10:74:c8:e1:0f:43:f4: f5:17:30:24:2f:26:b5:d4:14:54:dc:60:4b:84:c7: 23:d3:bd:0c:d6:80:da:51:98:df:c5:e0:6e:4f:72: 0e:d0:c4:3c:6b:83:cf:6d:0d:fd:0c:91:25:8a:c9: b6:32:fe:a9:b1:74:27:03:6a:99:a7:f0:a9:45:f2: 16:47:a4:91:2e:d1:71:d7:5b:84:d4:0d:8d:af:e9: fd:be:46:af:43:dd:83:9d:1f:ef:ec:e9:e4:8a:f6: 1f:6c:a9:cc:4f:07:f7:eb:0a:1d:b3:03:c8:9e:c8: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:95:72:94:23:A5:96:13:E0:62:8E:A0:55:1F:01:89:0D:60:B3 X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:79:eb:f2:d5:e4:94:c5:02:85:26:ec:9f:90:60:9d:60: a4:b5:f1:bb:80:c3:49:0d:31:88:6e:d1:ff:e1:01:05:0a:55: 12:9e:c3:be:ce:fc:cf:72:77:42:c5:09:89:f4:5f:f2:2e:dd: 0c:6a:d2:c0:6b:ca:f8:2d:95:cd:62:cc:1f:f0:1b:3e:2a:61: 5c:37:8a:8a:89:68:c3:6e:52:ac:0f:cc:d4:85:f5:6c:b8:ff: 37:92:1b:d5:04:56:3c:af:de:56:61:2e:b6:09:a6:b3:4b:e5: 89:34:a2:3c:89:2b:48:8c:c4:4d:bd:0d:72:86:05:7d:74:e9: 7c:c3:12:c0:90:d9:92:ae:33:97:85:f2:19:d4:8c:1e:08:ff: 1c:35:21:22:f6:71:a4:00:f6:37:de:b6:ed:1e:66:3e:58:17: ff:0a:d0:30:48:ad:07:76:2c:07:78:d3:78:7e:6e:b1:62:37: f7:52:52:f9:da:ee:40:34:79:a4:91:61:48:11:f0:55:34:b1: d1:8e:58:31:e9:91:66:5f:39:77:41:ae:72:cc:e2:b8:ad:99: 1e:9d:9d:3e:95:ea:23:2a:55:41:56:69:42:ae:94:ec:d4:7e: 01:28:a8:9d:7a:33:cf:e9:e0:b2:23:a2:88:88:c4:37:b6:71: 82:f2:3e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjUwNDAyMjIwNTUzWhcNMjUwNDA5MjIwNTUzWjAYMRYwFAYD VQQDEw02N2VkYjRjMS01MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5FQ3pxydvTBJNbFpRkQXyLns5REIKMxdH7d4tdP/h6rBu+08ahSXwM3H19Q w49TJ1ibnNn4pa6tA31tR3ZlZrc1OARt5xylcjuQdhliVrEjV3BDfqwf6/Cc2wvq V8m/V1kCx2eXIoH2n42hHB3Z2sCZUtLRXXUiE6ZFeJHiweyEzig2CfRRzcIrnj4q xhB0yOEPQ/T1FzAkLya11BRU3GBLhMcj070M1oDaUZjfxeBuT3IO0MQ8a4PPbQ39 DJElism2Mv6psXQnA2qZp/CpRfIWR6SRLtFx11uE1A2Nr+n9vkavQ92DnR/v7Onk ivYfbKnMTwf36wodswPInsj/CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8slXKU I6WWE+BijqBVHwGJDWCzMB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaM3nr8tXklMUChSbsn5BgnWCktfG7gMNJDTGIbtH/4QEFClUSnsO+ zvzPcndCxQmJ9F/yLt0MatLAa8r4LZXNYswf8Bs+KmFcN4qKiWjDblKsD8zUhfVs uP83khvVBFY8r95WYS62CaazS+WJNKI8iStIjMRNvQ1yhgV9dOl8wxLAkNmSrjOX hfIZ1IweCP8cNSEi9nGkAPY33rbtHmY+WBf/CtAwSK0HdiwHeNN4fm6xYjf3UlL5 2u5ANHmkkWFIEfBVNLHRjlgx6ZFmXzl3Qa5yzOK4rZkenZ0+leojKlVBVmlCrpTs 1H4BKKidejPP6eCyI6KIiMQ3tnGC8j6K -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:44 2025 by rpki-client