$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json) Hash identifier: Wgq0h3T5b563evQbG7aQQ2G8gowYlGIqodfJS6XoiP0= Subject key identifier: 96:8D:23:13:23:97:AE:19:15:5B:37:54:6D:90:69:40:88:CD:44:F0 Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft Manifest number: 013E Signing time: Sat 31 May 2025 04:02:33 +0000 Manifest this update: Sat 31 May 2025 04:02:32 +0000 Manifest next update: Sat 07 Jun 2025 04:02:32 +0000 Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: /2sqeEWFBVFLh+0AKGua1tcyIvIesSILdNqeME4DlD8=) 2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: jSX8BBXcDhKRO02h61flDcL9PRKVJzf27mu274wCdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: May 31 04:02:32 2025 GMT Not After : Jun 7 04:02:32 2025 GMT Subject: CN=683a7f59-40b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:c7:44:c7:3d:60:8d:9c:c3:0d:04:d2:e8: 23:c7:d9:a7:c2:3f:4d:b2:d7:59:b7:60:10:42:c2: f3:61:40:77:23:ca:27:00:d4:e6:03:a4:7d:2f:10: 4c:29:bc:68:f9:36:37:c3:d6:62:56:06:5c:62:9f: 02:c6:87:1e:b1:d3:70:7a:95:11:e1:0c:ad:ee:28: 6c:57:b4:02:b8:d9:91:83:d7:bd:61:63:5d:12:d2: e6:7f:45:d2:a2:14:ef:2b:8f:1b:c3:4b:99:c8:84: 49:93:26:f6:31:c0:2a:83:6b:9d:9f:7b:3e:72:4f: 01:7a:b3:77:48:a3:ed:6d:12:ec:8c:10:9c:99:98: 72:6e:d4:ed:c1:2c:7a:17:7a:4e:f6:04:68:25:dd: 41:a0:38:1f:b3:15:5a:50:e7:01:e6:09:6c:d0:65: dc:88:bb:9a:d6:9f:d8:d0:1e:b4:64:50:f0:7a:00: 87:f5:0b:f1:d3:2e:b2:d6:76:e0:92:1b:e1:b1:2d: bd:87:97:61:07:a3:74:29:64:39:23:6a:b7:45:5e: 1e:dd:cf:9d:72:6a:11:70:1c:20:54:56:3a:ea:b6: 3a:00:d6:6e:c4:e5:0d:15:48:67:af:52:78:d4:9d: 2b:0c:2b:de:c0:79:86:3a:19:a4:e5:3b:9a:06:50: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:23:13:23:97:AE:19:15:5B:37:54:6D:90:69:40:88:CD:44:F0 X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a7:93:5d:e0:b0:87:42:a6:19:83:4a:8e:da:f7:97:57:b9: 00:7b:22:05:71:60:4a:98:2e:9d:76:ab:cc:28:9e:fb:13:c5: 75:e7:51:11:c2:53:7e:0a:37:d8:56:86:dd:25:c3:9b:f2:87: e8:ed:e4:ce:c3:0b:ee:82:79:27:51:71:c0:d0:be:44:96:5f: 0c:05:02:0e:af:7a:b3:98:43:ea:60:2d:f8:34:38:d3:90:bd: 5a:4e:72:7f:ce:6e:17:e9:71:b2:c4:5b:35:59:28:d3:45:82: 2b:ac:b4:09:bc:35:4b:41:a7:c7:81:5e:c1:56:ff:13:3e:fa: ab:fa:6d:d4:aa:93:d6:c2:5c:6f:60:d6:bb:88:e7:9e:9e:9f: 05:9b:8b:53:d1:c6:09:12:23:0b:1b:6d:b7:d8:e3:a9:a1:13: 9f:65:17:fc:34:f6:46:42:a3:e7:80:62:ea:ae:2f:10:68:f1: 72:ba:c1:2f:f7:a4:af:8c:e0:3b:7d:1a:fc:0d:1b:23:2f:85: 45:f2:48:a0:06:b5:a9:dd:ca:fa:78:79:1b:a9:88:2f:8c:64: 63:32:be:a6:e6:a7:d2:e3:e1:61:6b:96:be:e1:70:95:02:1b: c5:11:1d:7e:dc:44:33:93:ce:43:85:6f:2a:35:d2:77:4f:db: 43:b7:44:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1 OUMxNTI0QkYwHhcNMjUwNTMxMDQwMjMyWhcNMjUwNjA3MDQwMjMyWjAYMRYwFAYD VQQDEw02ODNhN2Y1OS00MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXDHRMc9YI2cww0E0ugjx9mnwj9NstdZt2AQQsLzYUB3I8onANTmA6R9LxBM Kbxo+TY3w9ZiVgZcYp8CxocesdNwepUR4Qyt7ihsV7QCuNmRg9e9YWNdEtLmf0XS ohTvK48bw0uZyIRJkyb2McAqg2udn3s+ck8BerN3SKPtbRLsjBCcmZhybtTtwSx6 F3pO9gRoJd1BoDgfsxVaUOcB5gls0GXciLua1p/Y0B60ZFDwegCH9Qvx0y6y1nbg khvhsS29h5dhB6N0KWQ5I2q3RV4e3c+dcmoRcBwgVFY66rY6ANZuxOUNFUhnr1J4 1J0rDCvewHmGOhmk5TuaBlBjsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaNIxMj l64ZFVs3VG2QaUCIzUTwMB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4 RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzlFOC9GREY2NzMwNjU4RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3 cFQwa1J1X2JETUJad1ZKTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtp5Nd4LCHQqYZg0qO2veXV7kAeyIFcWBKmC6ddqvMKJ77E8V151ER wlN+CjfYVobdJcOb8ofo7eTOwwvugnknUXHA0L5Ell8MBQIOr3qzmEPqYC34NDjT kL1aTnJ/zm4X6XGyxFs1WSjTRYIrrLQJvDVLQafHgV7BVv8TPvqr+m3UqpPWwlxv YNa7iOeenp8Fm4tT0cYJEiMLG2232OOpoROfZRf8NPZGQqPngGLqri8QaPFyusEv 96SvjOA7fRr8DRsjL4VF8kigBrWp3cr6eHkbqYgvjGRjMr6m5qfS4+Fha5a+4XCV AhvFER1+3EQzk85DhW8qNdJ3T9tDt0Sv -----END CERTIFICATE-----Generated at Sat May 31 16:36:51 2025 by rpki-client