$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft File: Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json) Hash identifier: Q11lnxcHPVWcsSR+rVglt0rUYht6UxLwDaMeBFYCi8o= Subject key identifier: 0D:3C:03:04:CB:5D:ED:86:CA:C3:C9:B1:54:0E:C6:93:45:96:8C:F2 Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Certificate serial: 05DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft Manifest number: 05D3 Signing time: Fri 30 May 2025 23:15:56 +0000 Manifest this update: Fri 30 May 2025 23:15:56 +0000 Manifest next update: Fri 06 Jun 2025 23:15:56 +0000 Files and hashes: 1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: ds7t/YBfLa2Xbbbdm8bzF/ihfhXGRnlQ5yaJ+ft5QA8=) 2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: fb7qHh5ZQWTTd8VnRA4KyHFCOrkRy8TphWCCGB0gByk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Validity Not Before: May 30 23:15:56 2025 GMT Not After : Jun 6 23:15:56 2025 GMT Subject: CN=683a3c2c-741b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fd:fd:78:82:c9:8b:f7:10:5a:92:03:18:72: a0:f2:d6:c4:a7:9e:73:b2:58:3d:92:ea:12:30:a5: 7f:f5:9e:f4:23:58:45:3c:25:b2:bf:20:51:35:70: 21:1c:d4:38:01:61:d3:0f:e6:96:87:26:fa:14:82: a6:4d:9e:44:51:1d:f2:b9:5e:77:c3:84:fc:08:20: a7:06:59:db:54:57:9d:ae:ec:bd:59:52:9d:aa:5f: 8b:65:be:31:c5:39:38:fc:40:5f:e6:be:45:3d:d4: 01:81:4a:c8:39:a0:9f:3c:d8:5f:a4:09:09:a0:a8: 0b:42:9e:5d:7b:b8:03:7c:d4:30:4d:f6:a5:a9:b6: 4f:dd:df:bc:bf:fe:94:93:60:b6:43:a5:67:99:6c: 7f:3d:df:8e:eb:a9:0d:6c:10:a0:6c:45:43:e3:f7: 15:a4:37:75:1d:a4:55:1e:c3:34:31:a1:5d:be:9f: 0b:62:23:08:59:f1:2c:b5:ce:5e:3a:81:bb:8f:7b: ac:c4:b4:a4:cf:1c:3e:4f:16:c8:4f:6b:00:d5:5f: 75:ea:7e:c7:36:bf:21:5b:92:b0:fd:ff:ef:f5:1f: 29:5c:e9:a7:ab:d3:6f:bd:7d:00:98:7d:0a:a7:67: 94:19:d9:ec:bf:00:04:af:52:44:7e:e5:e2:7b:ad: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3C:03:04:CB:5D:ED:86:CA:C3:C9:B1:54:0E:C6:93:45:96:8C:F2 X509v3 Authority Key Identifier: keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fd:ce:2f:1c:e4:00:2f:49:0b:05:8b:9b:61:56:2e:de:4d: 75:97:f2:f7:75:1b:d1:dd:cb:1c:b1:e2:43:a1:b1:c2:b9:f0: c3:7b:94:39:fd:b5:8c:80:b0:86:44:b9:21:80:0a:28:23:cc: 18:ac:7b:91:2b:a5:16:4e:98:22:a9:7e:86:a6:11:76:9c:57: 0a:c0:e7:e3:61:fe:96:af:27:c3:e9:bf:74:bb:86:83:0d:d2: 5e:88:34:ad:f0:f2:b8:be:e4:a4:ba:ae:af:e6:71:b4:65:43: ae:fb:00:3a:83:ce:c2:39:cd:85:31:07:8b:dd:7c:c2:f6:a4: c4:84:e6:d1:b9:b7:f3:18:f7:7c:94:9c:6f:7d:ff:23:9b:09: 35:0f:41:03:77:c8:b3:4f:1b:97:64:56:a3:4f:da:ad:3c:a2: d1:de:21:b2:97:cf:13:b0:22:5b:5d:cb:0e:04:e0:c8:c7:c5: 8a:9b:74:18:6c:69:b3:85:67:e5:0a:e0:14:b0:e2:e3:c6:e1: 36:0d:4b:de:18:88:2a:ae:c5:68:cf:a4:a6:3a:07:e1:b7:d7: 6e:66:ab:7e:9b:dd:9d:27:31:c1:99:ff:20:02:20:83:d2:6b: c2:fd:1e:b2:99:38:75:2b:35:44:f5:49:21:0d:e9:f1:c4:02: f1:c6:ed:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4 MTRFNUZBNTMwHhcNMjUwNTMwMjMxNTU2WhcNMjUwNjA2MjMxNTU2WjAYMRYwFAYD VQQDEw02ODNhM2MyYy03NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/39eILJi/cQWpIDGHKg8tbEp55zslg9kuoSMKV/9Z70I1hFPCWyvyBRNXAh HNQ4AWHTD+aWhyb6FIKmTZ5EUR3yuV53w4T8CCCnBlnbVFedruy9WVKdql+LZb4x xTk4/EBf5r5FPdQBgUrIOaCfPNhfpAkJoKgLQp5de7gDfNQwTfalqbZP3d+8v/6U k2C2Q6VnmWx/Pd+O66kNbBCgbEVD4/cVpDd1HaRVHsM0MaFdvp8LYiMIWfEstc5e OoG7j3usxLSkzxw+TxbIT2sA1V916n7HNr8hW5Kw/f/v9R8pXOmnq9NvvX0AmH0K p2eUGdnsvwAEr1JEfuXie63/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA08AwTL Xe2GysPJsVQOxpNFlozyMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3 RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/c4vHOQAL0kLBYubYVYu3k11l/L3dRvR3cscseJDobHCufDDe5Q5 /bWMgLCGRLkhgAooI8wYrHuRK6UWTpgiqX6GphF2nFcKwOfjYf6WryfD6b90u4aD DdJeiDSt8PK4vuSkuq6v5nG0ZUOu+wA6g87COc2FMQeL3XzC9qTEhObRubfzGPd8 lJxvff8jmwk1D0EDd8izTxuXZFajT9qtPKLR3iGyl88TsCJbXcsOBODIx8WKm3QY bGmzhWflCuAUsOLjxuE2DUveGIgqrsVoz6SmOgfht9duZqt+m92dJzHBmf8gAiCD 0mvC/R6ymTh1KzVE9UkhDenxxALxxu1x -----END CERTIFICATE-----Generated at Sat May 31 16:50:39 2025 by rpki-client