$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: msE6UuHLMvuJmCfd56NY8q1bcAX5DtUGAJztyCdZg70= Subject key identifier: 22:9D:ED:76:01:1A:F6:5D:85:02:B2:8A:DC:38:AD:B9:BD:C7:F9:28 Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A29 Signing time: Fri 30 May 2025 19:58:22 +0000 Manifest this update: Fri 30 May 2025 19:58:21 +0000 Manifest next update: Fri 06 Jun 2025 19:58:21 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: fNVgJ3yBgzTpc3WiMD/6fgFlHhxhysVDkxL32JewHvI=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: May 30 19:58:21 2025 GMT Not After : Jun 6 19:58:21 2025 GMT Subject: CN=683a0ddd-35a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:f9:a2:f0:3d:31:b1:0c:ed:63:29:a5:71: a2:b8:38:92:a3:d1:71:be:0f:49:8a:40:77:16:ed: 6a:99:2c:9a:19:17:26:f6:f9:cb:44:36:e1:f3:2f: 8e:c6:c2:ac:6f:de:84:a4:2c:38:0f:e5:90:1f:fa: 51:7e:61:38:ea:34:90:89:3c:86:19:ab:71:a6:ce: 73:a1:ff:73:c3:09:02:6b:d8:2e:87:b5:ab:72:b5: dc:bf:6e:51:1d:28:c5:26:fa:04:6e:23:63:3c:ea: c0:57:e3:af:f5:81:18:91:ca:f2:ca:e5:55:d3:82: c7:9b:f7:42:fc:2d:ee:ca:f0:2a:4b:6b:23:75:62: d9:19:3c:0a:22:a7:74:4b:d7:c5:e9:dd:79:8a:44: ee:be:d0:6c:86:93:20:4c:c5:0d:b4:09:05:2d:a9: 49:ce:c8:78:0b:42:58:e6:08:53:e7:2b:c5:a6:99: 5f:fc:92:60:19:36:e5:68:a6:d0:b7:09:09:4e:2a: 98:8c:5f:b5:14:19:62:3b:5a:93:30:46:c3:5e:aa: c2:5d:e0:69:7d:57:86:80:9d:4d:ac:aa:98:42:a7: 0b:6d:05:a2:58:be:4c:48:00:5d:50:ff:99:9a:5f: 27:25:60:cb:d7:bf:be:34:03:53:c1:71:c1:49:1b: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:ED:76:01:1A:F6:5D:85:02:B2:8A:DC:38:AD:B9:BD:C7:F9:28 X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:99:ff:a9:5d:d0:9a:3b:af:d4:00:39:83:18:69:cf:3c: d4:38:83:6e:f5:14:f5:3c:1d:4c:25:e9:f6:53:6b:f6:4d:d9: b5:dc:82:5d:8f:1b:dd:d3:e2:81:ec:7b:3e:e7:1e:61:58:41: 3f:db:68:21:b4:40:54:3a:40:a2:ad:7e:49:51:a8:78:92:f7: 10:ee:b2:07:92:6c:79:3c:6a:10:0c:8e:64:bd:d4:01:d8:40: b7:92:59:2e:8a:51:07:0b:24:0b:80:ba:fc:ff:aa:c6:b6:69: 06:98:f4:75:47:7c:9f:e9:fd:c1:3d:cf:44:83:84:7c:a8:68: c9:64:6c:4c:e6:8a:0a:5b:86:82:93:f3:c1:c8:90:28:cd:58: ee:dc:28:dd:a4:7f:19:a7:d0:3f:3d:e4:3a:bb:e4:cc:86:f3: a1:bc:05:0d:cf:af:5a:35:98:5d:26:ba:f8:3d:e5:b2:e5:d4: a9:28:b8:c0:76:96:ab:58:aa:c9:af:e7:1a:f8:fe:6a:37:33: 64:e1:6d:3a:d9:22:ec:5c:12:9e:67:52:b5:49:b4:fe:93:90: cb:a8:e0:c2:eb:10:6c:52:8a:53:f7:11:73:01:d4:12:a2:64: d9:b9:a8:3c:4c:42:c1:d2:cd:f9:30:05:ff:f6:c7:7d:27:0f: bc:10:34:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUwNTMwMTk1ODIxWhcNMjUwNjA2MTk1ODIxWjAYMRYwFAYD VQQDEw02ODNhMGRkZC0zNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS35ovA9MbEM7WMppXGiuDiSo9Fxvg9JikB3Fu1qmSyaGRcm9vnLRDbh8y+O xsKsb96EpCw4D+WQH/pRfmE46jSQiTyGGatxps5zof9zwwkCa9guh7WrcrXcv25R HSjFJvoEbiNjPOrAV+Ov9YEYkcryyuVV04LHm/dC/C3uyvAqS2sjdWLZGTwKIqd0 S9fF6d15ikTuvtBshpMgTMUNtAkFLalJzsh4C0JY5ghT5yvFpplf/JJgGTblaKbQ twkJTiqYjF+1FBliO1qTMEbDXqrCXeBpfVeGgJ1NrKqYQqcLbQWiWL5MSABdUP+Z ml8nJWDL17++NANTwXHBSRvypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKd7XYB GvZdhQKyitw4rbm9x/koMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1uJn/qV3Qmjuv1AA5gxhpzzzUOINu9RT1PB1MJen2U2v2Tdm13IJd jxvd0+KB7Hs+5x5hWEE/22ghtEBUOkCirX5JUah4kvcQ7rIHkmx5PGoQDI5kvdQB 2EC3klkuilEHCyQLgLr8/6rGtmkGmPR1R3yf6f3BPc9Eg4R8qGjJZGxM5ooKW4aC k/PByJAozVju3CjdpH8Zp9A/PeQ6u+TMhvOhvAUNz69aNZhdJrr4PeWy5dSpKLjA dparWKrJr+ca+P5qNzNk4W062SLsXBKeZ1K1SbT+k5DLqODC6xBsUopT9xFzAdQS omTZuag8TELB0s35MAX/9sd9Jw+8EDQp -----END CERTIFICATE-----Generated at Sat May 31 17:45:06 2025 by rpki-client