$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: BnHeTwuK7IDAEeo5kXGXoc5zFOaxUCM8ihUvJoRRrfo= Subject key identifier: 49:08:77:9C:C7:85:91:56:02:54:EB:71:E5:CC:6D:61:59:82:1E:10 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 0388 Signing time: Sat 31 May 2025 01:04:36 +0000 Manifest this update: Sat 31 May 2025 01:04:36 +0000 Manifest next update: Sat 07 Jun 2025 01:04:36 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: ms3ZE4rCfOwVgwL617yWB8gj7TAiCCr6rYojyp1Jxj4=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: May 31 01:04:36 2025 GMT Not After : Jun 7 01:04:36 2025 GMT Subject: CN=683a55a4-f951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:fa:1b:41:37:0c:a0:d0:23:f4:cc:67:05: 62:58:71:6b:bf:5b:2c:fe:5e:c2:be:94:03:c3:f9: 83:7c:f0:32:a6:9b:76:6e:3d:99:1b:33:34:5e:0c: af:c1:7e:52:de:c6:87:58:3d:b6:15:a4:f7:61:2e: e6:6c:c6:6e:4b:8e:30:40:45:fc:c9:a1:ca:25:de: 00:d8:1e:49:5e:c6:66:16:73:fe:84:22:78:15:50: 99:1c:e1:f5:48:e9:16:15:74:17:3c:fb:70:4f:9a: 6a:cc:a7:4e:40:db:e0:94:b9:e7:59:5c:65:f6:e6: 3d:66:fb:09:5f:1f:05:61:a5:d8:61:3d:45:63:ba: 9e:31:7d:35:ff:3e:15:84:da:66:46:33:c2:43:c3: 85:c6:f9:0d:1c:9f:bd:1c:22:7b:c8:7e:ac:1c:f3: 1e:d2:16:0f:98:33:43:c9:72:da:61:7d:c1:c3:1b: 57:5e:f7:05:9f:f7:d9:ba:1e:dc:10:d7:11:08:91: 28:e4:66:2d:4d:35:26:a9:63:9f:fe:15:c2:b4:52: ef:c8:d0:2f:7c:f7:1e:c1:6c:8a:7c:7c:b3:8e:09: 7d:d0:82:82:2a:e8:a2:fb:4c:71:2e:db:e3:5b:b5: 4b:73:e2:b3:3f:ad:5a:10:20:73:87:7f:23:0b:86: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:77:9C:C7:85:91:56:02:54:EB:71:E5:CC:6D:61:59:82:1E:10 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:72:06:cd:c8:7d:47:02:2a:d0:5f:95:3a:dc:32:2f:d2:c3: 62:f6:fe:fe:18:61:04:f0:93:14:00:10:f0:e2:e8:01:96:c1: b8:e9:db:24:67:8f:a6:d4:f1:2c:e4:95:1f:e5:8b:d5:2d:e0: 71:ff:da:72:c7:5f:e1:5b:43:2f:d9:a5:51:37:76:9a:a5:d9: 03:00:6e:2b:32:6a:fa:a5:e7:3f:49:74:03:09:c5:aa:80:b1: 20:94:96:ba:61:dc:f4:3b:05:1a:fd:63:be:f4:01:d9:55:69: 89:f6:e7:cd:19:85:91:f8:32:87:06:22:8d:87:23:82:1a:1e: 35:3d:9e:3b:ad:01:c2:61:0d:4a:d3:dd:71:d3:73:33:4b:1f: a6:e9:dc:77:dc:82:90:e1:87:b9:ff:a7:e7:36:68:a4:c7:0c: 11:e7:44:7f:73:46:68:9e:fb:4d:ae:8c:60:0d:3b:9c:19:d2: e9:81:fc:d8:fd:f6:46:8e:f9:ed:2e:f7:dd:c5:b4:b2:47:8c: 33:8a:b7:bb:fc:fd:e1:4a:98:0b:f7:12:d2:de:2f:68:ad:b6: 56:61:58:25:0a:96:11:ed:6b:f0:66:e2:82:53:f3:55:07:46: 7b:ff:fd:cb:7c:3d:22:e8:48:b8:76:bd:c2:b5:14:68:1a:91: e5:31:03:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNTMxMDEwNDM2WhcNMjUwNjA3MDEwNDM2WjAYMRYwFAYD VQQDEw02ODNhNTVhNC1mOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Tv6G0E3DKDQI/TMZwViWHFrv1ss/l7CvpQDw/mDfPAyppt2bj2ZGzM0Xgyv wX5S3saHWD22FaT3YS7mbMZuS44wQEX8yaHKJd4A2B5JXsZmFnP+hCJ4FVCZHOH1 SOkWFXQXPPtwT5pqzKdOQNvglLnnWVxl9uY9ZvsJXx8FYaXYYT1FY7qeMX01/z4V hNpmRjPCQ8OFxvkNHJ+9HCJ7yH6sHPMe0hYPmDNDyXLaYX3BwxtXXvcFn/fZuh7c ENcRCJEo5GYtTTUmqWOf/hXCtFLvyNAvfPcewWyKfHyzjgl90IKCKuii+0xxLtvj W7VLc+KzP61aECBzh38jC4a+cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkId5zH hZFWAlTrceXMbWFZgh4QMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8cgbNyH1HAirQX5U63DIv0sNi9v7+GGEE8JMUABDw4ugBlsG46dsk Z4+m1PEs5JUf5YvVLeBx/9pyx1/hW0Mv2aVRN3aapdkDAG4rMmr6pec/SXQDCcWq gLEglJa6Ydz0OwUa/WO+9AHZVWmJ9ufNGYWR+DKHBiKNhyOCGh41PZ47rQHCYQ1K 091x03MzSx+m6dx33IKQ4Ye5/6fnNmikxwwR50R/c0ZonvtNroxgDTucGdLpgfzY /fZGjvntLvfdxbSyR4wzire7/P3hSpgL9xLS3i9orbZWYVglCpYR7WvwZuKCU/NV B0Z7//3LfD0i6Ei4dr3CtRRoGpHlMQPy -----END CERTIFICATE-----Generated at Sat May 31 16:45:40 2025 by rpki-client