$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: uG40Kh+zJzt6HJHNz/Ro79gSMLMb5JF8Idsn4xVVo/0= Subject key identifier: 80:2E:26:92:AA:EA:4A:94:9C:A9:C6:2C:B5:5A:03:59:51:EB:3A:57 Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 03F9 Signing time: Sat 31 May 2025 00:39:55 +0000 Manifest this update: Sat 31 May 2025 00:39:55 +0000 Manifest next update: Sat 07 Jun 2025 00:39:55 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: 0y0FwYZJO83ktClEtXvUoprSlh5AB3c5cLty/vBu7PY=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: May 31 00:39:55 2025 GMT Not After : Jun 7 00:39:55 2025 GMT Subject: CN=683a4fdb-56c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:58:a7:54:36:65:17:9c:94:c2:d5:83:84: 89:77:32:ba:5c:cc:4d:b7:6b:ad:d5:a9:ef:ed:22: 5b:b0:6b:27:65:95:51:88:19:74:42:59:a8:d2:ba: d7:52:d3:22:0b:62:29:6c:7d:32:fb:25:92:e7:50: 88:b4:9a:ad:1d:79:4a:5f:05:a5:af:42:ed:ae:09: dd:c1:be:45:57:84:e5:93:f1:43:44:62:7b:e4:c3: c5:32:9c:77:27:1f:0e:33:3d:1b:0f:9e:28:2b:88: a1:d2:f8:53:cb:58:b9:51:cd:66:3b:52:a7:4c:b3: c3:00:67:e7:77:56:96:0f:5b:8e:c9:88:44:cb:aa: c9:62:c1:46:8b:93:c6:37:f4:6d:76:f3:fd:a0:c6: a4:88:71:51:5f:bd:b1:e7:fb:72:25:95:a6:5c:9f: f8:40:b1:24:8c:d6:eb:22:e8:8a:29:cf:48:db:49: a3:d1:eb:ee:96:91:4d:5c:aa:f5:9a:72:62:3e:40: 92:cc:ba:79:98:71:77:4e:b6:90:ad:ca:9d:86:6e: 3f:ec:66:0f:69:ec:bd:b5:dc:1e:d4:db:c5:c6:da: e9:ee:e7:e2:cd:5b:2a:11:2b:3b:83:d5:7c:aa:71: 55:b9:6b:20:2c:01:17:e4:67:f8:d5:c7:49:28:dc: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2E:26:92:AA:EA:4A:94:9C:A9:C6:2C:B5:5A:03:59:51:EB:3A:57 X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:95:f2:18:41:1f:37:b6:6f:86:a0:b4:96:e2:ef:91:95:81: b1:ac:22:62:44:ae:9c:45:2c:8a:19:d2:e9:ad:50:36:12:d1: ae:7a:67:d6:a8:5a:4f:17:6f:55:9c:04:33:b8:72:6c:83:e9: 48:72:1e:e9:2c:e1:c0:6a:35:49:f9:75:f4:4c:b2:30:af:ad: 54:70:82:b1:a5:f7:f3:c0:e7:1f:29:5f:c3:9e:2c:3c:a0:53: 20:fe:7d:a7:bd:51:d2:35:aa:06:d8:db:2a:df:15:ea:c3:b5: b5:76:64:30:1c:e1:2a:7d:6c:a2:22:b7:86:97:fa:5c:c8:13: e9:62:4f:39:eb:81:94:92:4b:87:b8:73:2e:ba:32:2c:b7:f8: fc:ad:d4:62:f1:3e:11:bd:cb:70:7f:e6:79:00:e2:09:e9:ed: f6:cb:25:d4:6d:da:b1:d8:70:95:01:f2:87:f3:e9:29:1e:63: fc:a2:c3:18:82:94:f8:ef:97:e7:e9:c0:1f:d7:32:95:03:c2: f7:e7:30:bf:2d:00:33:17:2c:8b:aa:cb:a3:4b:61:b2:18:c1: 33:13:ac:9c:1a:75:86:b6:29:a7:95:b7:47:06:f5:eb:ad:45: 55:fd:fa:1a:ed:a2:44:9c:1f:b0:d1:0a:97:06:32:24:2a:ee: f2:9f:4f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUwNTMxMDAzOTU1WhcNMjUwNjA3MDAzOTU1WjAYMRYwFAYD VQQDEw02ODNhNGZkYi01NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5K9Yp1Q2ZReclMLVg4SJdzK6XMxNt2ut1anv7SJbsGsnZZVRiBl0Qlmo0rrX UtMiC2IpbH0y+yWS51CItJqtHXlKXwWlr0Ltrgndwb5FV4Tlk/FDRGJ75MPFMpx3 Jx8OMz0bD54oK4ih0vhTy1i5Uc1mO1KnTLPDAGfnd1aWD1uOyYhEy6rJYsFGi5PG N/RtdvP9oMakiHFRX72x5/tyJZWmXJ/4QLEkjNbrIuiKKc9I20mj0evulpFNXKr1 mnJiPkCSzLp5mHF3TraQrcqdhm4/7GYPaey9tdwe1NvFxtrp7ufizVsqESs7g9V8 qnFVuWsgLAEX5Gf41cdJKNwBCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAuJpKq 6kqUnKnGLLVaA1lR6zpXMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBlfIYQR83tm+GoLSW4u+RlYGxrCJiRK6cRSyKGdLprVA2EtGuemfW qFpPF29VnAQzuHJsg+lIch7pLOHAajVJ+XX0TLIwr61UcIKxpffzwOcfKV/Dniw8 oFMg/n2nvVHSNaoG2Nsq3xXqw7W1dmQwHOEqfWyiIreGl/pcyBPpYk8564GUkkuH uHMuujIst/j8rdRi8T4Rvctwf+Z5AOIJ6e32yyXUbdqx2HCVAfKH8+kpHmP8osMY gpT475fn6cAf1zKVA8L35zC/LQAzFyyLqsujS2GyGMEzE6ycGnWGtimnlbdHBvXr rUVV/foa7aJEnB+w0QqXBjIkKu7yn0/w -----END CERTIFICATE-----Generated at Sat May 31 17:54:58 2025 by rpki-client