$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: w5fKzB5RZkHJ/ES0BTiOzJnFLUazEVm5V8vD63lanQ8= Subject key identifier: 63:53:40:1A:86:65:4A:60:95:5C:F9:61:6D:D0:42:61:A1:64:5A:F4 Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: B6 Signing time: Sat 31 May 2025 05:51:50 +0000 Manifest this update: Sat 31 May 2025 05:51:50 +0000 Manifest next update: Sat 07 Jun 2025 05:51:50 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: 2H6lgNg9cC7OtTR4sE6JkrNlbhJZgPaC4AwsbFAzgTo=) 2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=) 3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: May 31 05:51:50 2025 GMT Not After : Jun 7 05:51:50 2025 GMT Subject: CN=683a98f6-2bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:7c:2b:b8:80:7b:bc:83:37:15:73:ef:f0: 52:3d:13:09:1e:aa:89:7f:41:f0:a9:7a:1f:67:7e: f6:a1:6d:32:d2:b9:a4:f4:30:c5:c3:f2:0b:97:a3: a1:ea:ca:6b:85:08:b4:64:b5:19:19:62:e4:1a:31: 5d:09:c1:3d:1e:e9:ca:76:45:4c:bf:0b:99:a3:e9: b9:4f:6c:46:f0:38:c5:16:98:70:5f:f1:c5:84:65: dd:a0:e8:bd:bc:19:02:97:76:0c:92:bc:9f:4d:a0: 82:5f:eb:14:cc:94:9a:20:2d:bc:f6:6f:0f:72:40: 1b:a5:a3:cf:61:23:34:2e:da:e2:e6:b9:ec:cf:fb: 21:ab:bd:5c:a0:70:63:33:1a:ae:bc:b2:d6:46:66: 54:b5:07:d5:18:6e:0c:a0:f6:70:15:36:53:ac:c6: 9a:14:58:9b:50:e1:6d:18:44:4c:b5:6c:cf:1b:64: ba:62:37:8f:3d:71:5a:96:61:b5:ac:fe:1d:1f:dd: ce:f0:26:60:2e:05:10:d3:7d:b9:7e:4c:00:bb:08: 08:79:60:c7:f9:20:13:89:7e:72:85:5d:5d:b9:04: bb:67:25:e0:0a:c4:48:af:2c:ab:d9:f8:6c:61:be: 4a:80:90:bc:c5:c0:be:dc:11:79:9a:e7:8c:50:4c: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:40:1A:86:65:4A:60:95:5C:F9:61:6D:D0:42:61:A1:64:5A:F4 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:90:e1:71:45:38:4f:3f:c9:3b:d4:11:81:93:da:c0:48:61: 5f:1c:bd:12:39:e8:ef:9c:ee:1c:a4:69:21:2a:09:7a:49:22: 8e:2e:71:d1:c4:b4:42:61:6a:2d:05:e7:f8:97:ae:d5:bf:df: e0:da:81:b0:96:78:73:d0:6b:ce:5a:c8:a6:16:13:c4:47:09: 09:58:0d:9a:a8:21:e5:5b:8b:40:59:f3:e2:5a:aa:59:3b:51: 54:eb:50:dd:e5:63:df:ac:67:7e:9f:dd:5f:2f:4a:a9:0c:22: 02:43:55:6d:fd:0c:2e:84:33:23:7d:68:53:a7:fa:8d:f9:54: 46:6b:f8:17:63:30:d9:15:17:e6:5b:d9:92:d1:3c:f9:6f:65: 1c:3b:3e:f1:2c:7b:f3:df:6d:96:40:c4:07:d7:2f:89:09:5d: 4e:10:4e:8e:b1:98:f1:9b:17:ea:45:a1:47:cd:be:81:1d:dd: f5:78:f3:3c:02:e8:81:59:98:b9:4f:33:ca:62:31:3a:d3:60: 51:15:ec:03:6e:c3:2a:d5:d0:24:ed:f4:f7:c7:cf:2b:07:93: a3:04:96:5e:b4:5a:ec:0c:c5:6c:8f:ba:d9:be:d8:88:46:77: d8:4c:c4:fe:dd:a5:1f:e7:98:46:83:77:7e:9d:e9:77:27:1f: 6d:bd:c9:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUwNTMxMDU1MTUwWhcNMjUwNjA3MDU1MTUwWjAYMRYwFAYD VQQDEw02ODNhOThmNi0yYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hZ8K7iAe7yDNxVz7/BSPRMJHqqJf0HwqXofZ372oW0y0rmk9DDFw/ILl6Oh 6sprhQi0ZLUZGWLkGjFdCcE9HunKdkVMvwuZo+m5T2xG8DjFFphwX/HFhGXdoOi9 vBkCl3YMkryfTaCCX+sUzJSaIC289m8PckAbpaPPYSM0Ltri5rnsz/shq71coHBj MxquvLLWRmZUtQfVGG4MoPZwFTZTrMaaFFibUOFtGERMtWzPG2S6YjePPXFalmG1 rP4dH93O8CZgLgUQ0325fkwAuwgIeWDH+SATiX5yhV1duQS7ZyXgCsRIryyr2fhs Yb5KgJC8xcC+3BF5mueMUEyHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNTQBqG ZUpglVz5YW3QQmGhZFr0MB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzEzNC9FNjVGQThBMDU0NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJn RWExYzlJelg1TVNMdVhvUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLkOFxRThPP8k71BGBk9rASGFfHL0SOejvnO4cpGkhKgl6SSKOLnHR xLRCYWotBef4l67Vv9/g2oGwlnhz0GvOWsimFhPERwkJWA2aqCHlW4tAWfPiWqpZ O1FU61Dd5WPfrGd+n91fL0qpDCICQ1Vt/QwuhDMjfWhTp/qN+VRGa/gXYzDZFRfm W9mS0Tz5b2UcOz7xLHvz322WQMQH1y+JCV1OEE6OsZjxmxfqRaFHzb6BHd31ePM8 AuiBWZi5TzPKYjE602BRFewDbsMq1dAk7fT3x88rB5OjBJZetFrsDMVsj7rZvtiI RnfYTMT+3aUf55hGg3d+nel3Jx9tvckA -----END CERTIFICATE-----Generated at Sat May 31 17:32:53 2025 by rpki-client