$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json) Hash identifier: C4W2CSjBlp8DR+ZX+dqZyqxQfATto/2YtEr5TNvtaEM= Subject key identifier: 55:8E:33:59:57:18:15:FF:09:66:B5:CB:34:00:FB:F7:82:F3:FC:01 Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft Manifest number: 01AA Signing time: Sat 31 May 2025 03:03:41 +0000 Manifest this update: Sat 31 May 2025 03:03:41 +0000 Manifest next update: Sat 07 Jun 2025 03:03:41 +0000 Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: PRjTuemZz3OxSpsnJQpHl3YqqvJLwKEeA3Ic7MVmzJg=) 2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: li4OxnhOQgQRujPF67sN5Xz793LOnzHpSZGFaFwRWYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Validity Not Before: May 31 03:03:41 2025 GMT Not After : Jun 7 03:03:41 2025 GMT Subject: CN=683a718d-f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:27:2f:eb:06:ad:49:9e:16:9b:cd:16:9f: 88:31:19:0e:42:94:8f:05:d9:47:5f:cc:5a:bb:84: d8:41:28:92:a8:00:7f:08:0a:79:bb:23:c3:58:fe: fc:fe:b9:68:78:1e:cb:f5:d6:bf:ab:52:81:c0:fe: da:80:d5:af:04:ee:0b:5c:41:83:87:1f:13:a8:25: 92:88:0b:f9:67:d3:73:d0:2d:eb:71:c1:01:b7:4d: 81:bc:c4:f0:3e:c5:f6:48:48:99:6c:1c:1f:1a:54: c6:8d:36:24:fa:86:48:c9:ab:4f:5e:0f:8a:2e:a9: f7:d9:58:4b:5d:85:60:89:53:ee:af:14:16:f2:02: ce:b9:bf:b3:0e:c8:fd:56:16:07:aa:4c:38:5c:8f: 98:bd:43:d3:df:0b:7c:40:8e:b6:32:4d:31:60:a5: 47:5c:1b:36:aa:f7:a6:7b:a5:be:bd:e4:c1:ab:e0: 1a:dc:61:d1:f3:14:3e:4e:fc:d6:86:f9:69:55:37: e5:45:26:74:8a:28:61:38:39:da:f4:06:a8:45:cf: d0:dc:c2:6a:0e:a2:d6:a3:b3:2a:49:5e:e3:72:ca: e6:39:33:78:0f:3f:37:14:cc:86:a3:d3:16:4d:62: 9a:d2:dc:9c:28:d1:12:0e:52:2a:5a:77:ba:f2:72: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8E:33:59:57:18:15:FF:09:66:B5:CB:34:00:FB:F7:82:F3:FC:01 X509v3 Authority Key Identifier: keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:83:ea:45:79:1a:53:64:b7:2d:6f:06:81:90:a1:77:bf:81: b3:84:5f:bf:41:6e:ac:75:f2:bb:13:b8:5c:62:9c:f0:fa:7a: cd:1c:19:d1:c5:c5:d3:6e:61:ea:24:fb:f1:4b:25:fc:52:ce: 39:44:ec:da:09:89:ac:eb:81:4b:3f:d5:b6:e3:2d:46:18:90: 46:ee:88:f9:71:a4:48:3d:2a:1e:74:47:fe:73:81:f8:bf:9a: 54:39:ec:7e:3f:71:d8:96:a6:5c:43:e5:39:04:9a:68:96:4d: c4:36:f9:0b:31:b1:11:91:71:2e:7c:6b:bb:98:80:13:55:bb: 58:4c:ea:2f:84:bb:79:ee:59:21:f4:cc:8d:df:98:06:f4:ff: b1:db:28:26:a9:f1:48:47:8f:68:f1:58:13:7f:de:86:cf:28: c6:25:9e:c9:52:da:fe:49:8d:9c:83:e6:36:7b:fa:ef:d0:e6: c8:9f:69:c7:61:f5:fc:2e:00:4a:a7:53:af:43:4b:e2:e3:df: 43:4b:2c:7c:08:7a:4f:fe:bf:ff:3d:6a:2c:4e:13:2b:1c:18: c6:50:f9:ca:6f:0e:2c:16:05:4d:65:a5:be:16:5e:a6:4e:48: a4:f9:3a:89:49:75:91:7a:b0:13:6e:55:c9:8f:94:08:fa:27: 69:75:73:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx RUJCRTg3QUEwHhcNMjUwNTMxMDMwMzQxWhcNMjUwNjA3MDMwMzQxWjAYMRYwFAYD VQQDEw02ODNhNzE4ZC1mN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsAnL+sGrUmeFpvNFp+IMRkOQpSPBdlHX8xau4TYQSiSqAB/CAp5uyPDWP78 /rloeB7L9da/q1KBwP7agNWvBO4LXEGDhx8TqCWSiAv5Z9Nz0C3rccEBt02BvMTw PsX2SEiZbBwfGlTGjTYk+oZIyatPXg+KLqn32VhLXYVgiVPurxQW8gLOub+zDsj9 VhYHqkw4XI+YvUPT3wt8QI62Mk0xYKVHXBs2qveme6W+veTBq+Aa3GHR8xQ+TvzW hvlpVTflRSZ0iihhODna9AaoRc/Q3MJqDqLWo7MqSV7jcsrmOTN4Dz83FMyGo9MW TWKa0tycKNESDlIqWne68nLK3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWOM1lX GBX/CWa1yzQA+/eC8/wBMB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0 RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD a2pTbDlVeFNPN1FldS1oNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZg+pFeRpTZLctbwaBkKF3v4GzhF+/QW6sdfK7E7hcYpzw+nrNHBnR xcXTbmHqJPvxSyX8Us45ROzaCYms64FLP9W24y1GGJBG7oj5caRIPSoedEf+c4H4 v5pUOex+P3HYlqZcQ+U5BJpolk3ENvkLMbERkXEufGu7mIATVbtYTOovhLt57lkh 9MyN35gG9P+x2ygmqfFIR49o8VgTf96GzyjGJZ7JUtr+SY2cg+Y2e/rv0ObIn2nH YfX8LgBKp1OvQ0vi499DSyx8CHpP/r//PWosThMrHBjGUPnKbw4sFgVNZaW+Fl6m Tkik+TqJSXWRerATblXJj5QI+idpdXNy -----END CERTIFICATE-----Generated at Sat May 31 17:28:55 2025 by rpki-client