$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: J+sqP2QZ8bezp2AlR1d651BrrpWGLWni6WE4MhsfhKU= Subject key identifier: 18:AA:57:DC:AC:44:C7:97:18:E6:20:33:1C:4A:4D:06:06:FA:BA:6D Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C2A Signing time: Fri 04 Apr 2025 18:39:03 +0000 Manifest this update: Fri 04 Apr 2025 18:39:02 +0000 Manifest next update: Fri 11 Apr 2025 18:39:02 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: QGOECTm9XvCkRdV/BNgUG0zir6uGEeXTbgPHg0mEXbE=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A Validity Not Before: Apr 4 18:39:02 2025 GMT Not After : Apr 11 18:39:02 2025 GMT Subject: CN=67f02747-a680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:5c:2b:67:b2:64:c6:16:5d:15:1b:12:77: 92:74:56:b2:a1:50:a9:70:23:f2:b1:1d:c7:33:ec: 1a:ff:23:15:48:7a:41:dd:96:c4:4c:cc:ec:a6:e6: 87:1c:1d:86:be:b1:5d:6d:e2:4f:cc:05:69:16:12: 00:33:9f:2c:c1:88:24:2e:3a:cd:37:e4:5c:b8:59: be:81:63:ad:36:00:44:ee:45:3c:a4:a8:98:84:1f: a5:77:27:20:a1:a0:c2:29:41:98:8b:95:8f:cb:83: b0:f5:38:b7:ec:67:b7:da:64:3b:c8:91:2d:33:9b: bf:b8:ca:37:78:1a:79:e4:2a:38:77:c9:ba:28:58: ca:f9:e2:8f:e8:52:de:f7:c8:83:95:54:d4:80:db: 35:71:76:ce:3a:db:72:eb:74:5f:24:2b:33:e3:e0: 3a:ee:d5:c0:90:af:43:47:5a:ae:63:3d:e1:c5:68: b9:68:8f:51:5d:26:9f:ba:83:9d:23:d3:3f:5e:da: 9b:1f:0c:ba:78:67:34:79:ff:cb:5d:80:e4:22:12: ff:d8:77:50:bc:b4:88:fa:bc:0b:70:60:cd:c7:c5: 69:07:96:25:5a:d0:69:d7:3c:5a:2a:76:79:2c:32: d4:7e:f0:9e:8f:48:e4:a5:63:ab:3a:f9:68:c4:8d: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AA:57:DC:AC:44:C7:97:18:E6:20:33:1C:4A:4D:06:06:FA:BA:6D X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:26:70:ab:aa:1b:4a:a0:c7:e6:b1:14:66:af:22:75:0a:09: 7c:60:0b:c7:27:fa:75:f9:91:ec:1b:76:7f:94:10:e8:12:d9: 32:9a:9a:3d:df:e7:d1:b2:f6:16:f2:e8:79:ff:9f:a8:8b:8b: fa:f8:35:e5:f7:a0:ea:1e:7a:b2:41:86:b5:69:21:7f:41:dd: 63:c6:be:f2:c4:06:11:d2:d2:6e:70:6d:4f:77:03:0e:a7:76: f9:6f:d1:66:68:2d:11:03:e2:53:2f:88:ea:45:89:d8:51:01: ee:20:30:75:e5:c0:e9:5f:27:af:23:c9:a9:b6:1c:01:ae:68: 3f:f1:16:80:4d:a1:46:33:8a:c3:4a:9e:29:cc:82:04:c4:9d: 58:16:e6:88:b1:31:a5:c9:ff:ed:a2:95:c2:04:a5:bb:03:2e: 05:30:63:6a:b3:01:85:87:9c:18:44:66:29:4e:8a:75:85:24: 35:40:cd:7e:cb:c1:7d:be:87:16:43:82:f6:c6:b3:b7:58:59: dc:97:5c:50:ba:de:61:22:8c:68:71:ed:75:f3:8c:7c:f4:5f: 69:44:4e:b0:df:4a:a8:5a:c9:58:68:4e:e4:c2:47:11:e1:15: 4e:69:2b:ab:db:68:39:71:ae:e9:04:69:e0:9a:82:18:ca:c4: 13:cf:0d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwNDA0MTgzOTAyWhcNMjUwNDExMTgzOTAyWjAYMRYwFAYD VQQDEw02N2YwMjc0Ny1hNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqRcK2eyZMYWXRUbEneSdFayoVCpcCPysR3HM+wa/yMVSHpB3ZbETMzspuaH HB2GvrFdbeJPzAVpFhIAM58swYgkLjrNN+RcuFm+gWOtNgBE7kU8pKiYhB+ldycg oaDCKUGYi5WPy4Ow9Ti37Ge32mQ7yJEtM5u/uMo3eBp55Co4d8m6KFjK+eKP6FLe 98iDlVTUgNs1cXbOOtty63RfJCsz4+A67tXAkK9DR1quYz3hxWi5aI9RXSafuoOd I9M/XtqbHwy6eGc0ef/LXYDkIhL/2HdQvLSI+rwLcGDNx8VpB5YlWtBp1zxaKnZ5 LDLUfvCej0jkpWOrOvloxI0BtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiqV9ys RMeXGOYgMxxKTQYG+rptMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZJnCrqhtKoMfmsRRmryJ1Cgl8YAvHJ/p1+ZHsG3Z/lBDoEtkympo9 3+fRsvYW8uh5/5+oi4v6+DXl96DqHnqyQYa1aSF/Qd1jxr7yxAYR0tJucG1PdwMO p3b5b9FmaC0RA+JTL4jqRYnYUQHuIDB15cDpXyevI8mpthwBrmg/8RaATaFGM4rD Sp4pzIIExJ1YFuaIsTGlyf/topXCBKW7Ay4FMGNqswGFh5wYRGYpTop1hSQ1QM1+ y8F9vocWQ4L2xrO3WFncl1xQut5hIoxoce1184x89F9pRE6w30qoWslYaE7kwkcR 4RVOaSur22g5ca7pBGngmoIYysQTzw3j -----END CERTIFICATE-----Generated at Sun Apr 6 05:35:22 2025 by rpki-client