$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: wPP6hhdRXY9/dG1bDf6S4Sxs1Z+8InF+0uKwyhGCZ2g= Subject key identifier: A4:33:89:8A:F3:9C:36:AA:DB:76:F8:D2:A9:89:C1:17:C2:B1:29:A9 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 01DB Signing time: Sat 31 May 2025 02:35:12 +0000 Manifest this update: Sat 31 May 2025 02:35:12 +0000 Manifest next update: Sat 07 Jun 2025 02:35:12 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: rD6R8dILtPCDqd+WGqaDRhsrfILTGwj2H0h8Dn7hLvk=) 2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: G8jsJ+mpJjx+P09daIjyz9j+xHd4TGz4K0la+7J5BHY=) 3: C453112224E911F09C66370CC4F9AE02.roa (hash: s/bfR0V4/eCMXH0PO2Yn4B62GfiDwzVSga9VpUyLwbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: May 31 02:35:12 2025 GMT Not After : Jun 7 02:35:12 2025 GMT Subject: CN=683a6ae0-cff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:d3:1e:8c:ce:eb:7e:1e:2e:f5:f9:dc:11: 3b:b2:8a:ba:33:3b:c2:dc:ba:81:e5:cc:a5:ba:82: 25:f8:e4:2c:58:f7:f8:5f:9d:c8:a5:df:6c:3c:8d: 66:8e:ea:25:2f:ab:ee:f2:11:37:5c:c3:d7:94:74: b8:43:07:78:4a:86:8d:30:a1:e2:55:a5:ae:02:69: 7e:6e:3b:c1:35:28:56:45:31:e0:db:2f:76:7f:cc: c7:93:6e:7f:8d:f2:d2:8f:4b:55:03:77:83:9f:9c: b3:88:a0:50:f2:e9:6f:1c:74:a2:c8:bc:05:13:e3: 71:78:dc:80:08:37:16:1f:f4:d8:12:99:59:31:9a: b7:80:dd:11:6e:c9:32:11:ec:4f:52:6e:e3:62:6e: 3a:da:d6:e5:e1:91:31:58:85:d8:86:c6:1a:67:73: 43:73:13:eb:d1:a4:5a:57:e1:c1:aa:a7:af:c1:1c: 70:37:d5:45:d5:65:d4:1d:45:43:0b:26:57:ce:ff: 59:e6:9e:dc:6b:ec:20:c3:4a:95:65:d5:5b:2c:ff: 49:af:8b:2d:70:52:b1:0c:79:34:89:80:1a:2f:26: 14:94:dd:71:47:8f:35:48:2a:6e:31:f0:67:98:cb: 5a:ea:28:f1:12:6c:2a:23:f7:ec:d6:46:ce:5b:18: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:33:89:8A:F3:9C:36:AA:DB:76:F8:D2:A9:89:C1:17:C2:B1:29:A9 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fe:9c:83:da:18:ee:83:b1:fb:18:65:71:db:32:0e:72:22: e7:a3:64:0e:bc:70:3f:63:6e:61:66:da:9b:55:c1:eb:b4:a5: 7c:8c:4c:2b:04:74:50:56:40:b8:8f:81:7b:a6:26:7f:68:ee: be:10:49:f3:ea:39:e1:83:e2:d5:ff:2f:30:b1:cb:d8:c4:cc: 0c:86:cb:87:0d:6d:ec:6f:94:85:cb:df:25:0f:be:fc:0c:1e: 04:0b:56:86:db:bd:0f:2d:40:7f:a3:8c:a0:74:d9:94:7e:a9: 73:c9:bf:26:bf:d2:2b:ce:f1:2b:5e:2f:4e:f5:d1:42:89:20: 3f:6c:02:17:30:09:ce:8f:19:54:91:d4:9c:09:99:19:a0:fe: df:04:f5:41:23:9e:d1:1b:6b:33:92:2b:1b:68:e2:77:8f:de: 66:97:eb:84:b5:77:46:0c:e0:5a:5f:9a:63:34:23:34:57:bc: ae:ff:de:dd:d4:c8:fe:f2:64:0d:48:9e:6b:74:92:aa:03:67: be:f5:95:8e:b0:da:cf:18:83:31:de:a8:98:89:88:e7:fe:da: 9f:54:c4:d1:ab:dd:ad:d0:1f:34:3c:67:c2:6c:40:31:57:3c: 41:f8:78:28:cf:e6:ab:e7:b6:0d:11:cd:99:80:7b:2e:22:1f: 90:ac:03:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUwNTMxMDIzNTEyWhcNMjUwNjA3MDIzNTEyWjAYMRYwFAYD VQQDEw02ODNhNmFlMC1jZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3PTHozO634eLvX53BE7soq6MzvC3LqB5cyluoIl+OQsWPf4X53Ipd9sPI1m juolL6vu8hE3XMPXlHS4Qwd4SoaNMKHiVaWuAml+bjvBNShWRTHg2y92f8zHk25/ jfLSj0tVA3eDn5yziKBQ8ulvHHSiyLwFE+NxeNyACDcWH/TYEplZMZq3gN0Rbsky EexPUm7jYm462tbl4ZExWIXYhsYaZ3NDcxPr0aRaV+HBqqevwRxwN9VF1WXUHUVD CyZXzv9Z5p7ca+wgw0qVZdVbLP9Jr4stcFKxDHk0iYAaLyYUlN1xR481SCpuMfBn mMta6ijxEmwqI/fs1kbOWxiQqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQziYrz nDaq23b40qmJwRfCsSmpMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR/pyD2hjug7H7GGVx2zIOciLno2QOvHA/Y25hZtqbVcHrtKV8jEwr BHRQVkC4j4F7piZ/aO6+EEnz6jnhg+LV/y8wscvYxMwMhsuHDW3sb5SFy98lD778 DB4EC1aG270PLUB/o4ygdNmUfqlzyb8mv9IrzvErXi9O9dFCiSA/bAIXMAnOjxlU kdScCZkZoP7fBPVBI57RG2szkisbaOJ3j95ml+uEtXdGDOBaX5pjNCM0V7yu/97d 1Mj+8mQNSJ5rdJKqA2e+9ZWOsNrPGIMx3qiYiYjn/tqfVMTRq92t0B80PGfCbEAx VzxB+Hgoz+ar57YNEc2ZgHsuIh+QrAP6 -----END CERTIFICATE-----Generated at Sat May 31 16:43:03 2025 by rpki-client