$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: cnWoDXDC/eFdcilTSN82dP9sh4yZ0031Rr8XL7NJJDA= Subject key identifier: 57:5A:14:79:44:BF:FA:1A:57:96:63:0C:56:F7:AD:58:DF:64:67:45 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:56:47 +0000 Manifest this update: Sat 31 May 2025 05:56:46 +0000 Manifest next update: Sat 07 Jun 2025 05:56:46 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: mRT2K7s+ykduc0+5n/Pg2tJDy2kU/DpGmP84XM3en+o=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: May 31 05:56:46 2025 GMT Not After : Jun 7 05:56:46 2025 GMT Subject: CN=683a9a1f-5a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:07:9c:b6:28:af:89:33:c4:2e:f0:ec:37:24: 08:d8:77:bb:d9:85:c1:a2:e9:80:95:c3:52:44:51: 5c:a1:84:5f:9f:a4:1a:e7:66:a1:00:66:95:63:e0: ac:7f:a4:6e:9b:7a:1a:82:21:2a:f6:cb:2c:de:57: 42:81:1b:8d:fc:2f:55:41:14:95:9a:05:82:21:fc: d6:78:ba:3f:19:de:65:e6:85:fd:26:53:19:09:5a: c0:bb:cc:60:86:83:37:bd:5b:ae:34:02:80:2a:54: 47:00:7e:ab:5e:2a:3f:66:22:ed:5c:d2:19:a7:44: 0e:26:34:52:c2:41:bd:ce:e9:20:84:25:8c:4c:85: c0:e6:c6:9e:f8:69:46:e8:2a:aa:a7:29:70:38:46: ff:03:ad:ba:6a:89:10:2a:3c:fb:19:1f:f2:2e:28: bf:63:b7:60:c4:c1:11:d6:4c:31:fa:cc:3f:b0:f0: 5d:64:ef:7c:7a:b1:5e:19:57:26:e9:95:36:43:53: db:d6:67:c7:b1:8d:8b:ea:3a:e1:29:4e:fa:04:05: ca:33:22:b1:ba:04:54:b6:83:6e:9e:0a:e7:8b:5b: 60:d3:a8:cb:aa:90:14:8e:f8:59:1f:d8:2a:3b:13: ba:4c:5d:07:d5:75:3a:38:2a:ba:d4:d4:2a:6a:fa: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:14:79:44:BF:FA:1A:57:96:63:0C:56:F7:AD:58:DF:64:67:45 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ef:86:95:6e:43:0c:fc:70:72:37:96:51:dd:c3:12:a0:64: d5:68:7a:ad:28:14:21:3d:ea:09:59:af:20:19:4e:9e:f6:4b: de:58:69:c4:54:c8:de:17:fa:58:e8:98:da:38:88:bc:d5:ba: ae:b5:e7:1e:e7:e8:c9:9e:35:19:c3:79:fb:65:10:6f:88:38: e5:53:05:31:3d:55:e0:d9:cc:4e:6c:bb:f8:d7:a3:72:06:2a: 51:3f:25:00:af:f0:7a:e3:89:41:a4:98:74:ca:e1:0e:13:73: 6d:5b:8e:e2:e6:67:43:90:46:56:b8:1b:1d:d8:16:5d:c5:a1: 15:56:ce:85:bd:b8:8c:30:e0:bd:6a:f0:84:bd:8a:22:89:f4: 4e:0e:37:ad:10:d5:d3:71:4a:21:3e:e5:99:94:7b:4a:af:b2: 47:6c:a8:c5:e0:6f:7f:2b:ad:50:9e:fe:9a:24:34:90:94:29: cb:87:01:64:22:89:0c:fa:98:7f:b8:0b:f9:b0:f4:55:8d:3c: 7f:f2:53:1e:3e:b7:46:dc:0d:fe:99:52:01:2a:a8:4c:30:c4: 82:b8:ca:ee:ed:73:54:35:19:22:31:2a:f5:a5:25:da:51:fe: ea:48:58:00:15:e7:0e:4f:7a:9c:9a:6e:9a:99:07:a8:80:b1: 9b:55:0f:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUwNTMxMDU1NjQ2WhcNMjUwNjA3MDU1NjQ2WjAYMRYwFAYD VQQDEw02ODNhOWExZi01YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AectiiviTPELvDsNyQI2He72YXBoumAlcNSRFFcoYRfn6Qa52ahAGaVY+Cs f6Rum3oagiEq9sss3ldCgRuN/C9VQRSVmgWCIfzWeLo/Gd5l5oX9JlMZCVrAu8xg hoM3vVuuNAKAKlRHAH6rXio/ZiLtXNIZp0QOJjRSwkG9zukghCWMTIXA5sae+GlG 6CqqpylwOEb/A626aokQKjz7GR/yLii/Y7dgxMER1kwx+sw/sPBdZO98erFeGVcm 6ZU2Q1Pb1mfHsY2L6jrhKU76BAXKMyKxugRUtoNungrni1tg06jLqpAUjvhZH9gq OxO6TF0H1XU6OCq61NQqavrG1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdaFHlE v/oaV5ZjDFb3rVjfZGdFMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw74aVbkMM/HByN5ZR3cMSoGTVaHqtKBQhPeoJWa8gGU6e9kveWGnE VMjeF/pY6JjaOIi81bqutece5+jJnjUZw3n7ZRBviDjlUwUxPVXg2cxObLv416Ny BipRPyUAr/B644lBpJh0yuEOE3NtW47i5mdDkEZWuBsd2BZdxaEVVs6FvbiMMOC9 avCEvYoiifRODjetENXTcUohPuWZlHtKr7JHbKjF4G9/K61Qnv6aJDSQlCnLhwFk IokM+ph/uAv5sPRVjTx/8lMePrdG3A3+mVIBKqhMMMSCuMru7XNUNRkiMSr1pSXa Uf7qSFgAFecOT3qcmm6amQeogLGbVQ/e -----END CERTIFICATE-----Generated at Sat May 31 17:24:52 2025 by rpki-client