$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: CvPp2uO1i9PL0Kdpixn0Nu9voTPhHeG1/cXpVRV7n00= Subject key identifier: D1:01:18:FD:73:ED:21:A5:50:6C:AC:0F:A3:52:E6:9E:CD:A6:EB:D5 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 60 Signing time: Sat 31 May 2025 06:42:55 +0000 Manifest this update: Sat 31 May 2025 06:42:54 +0000 Manifest next update: Sat 07 Jun 2025 06:42:54 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: R9oVpQjKNxjb84KXsiJfCQimeJlyexrJjK1n5VOgA+w=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: 1aGxRTXwu6ybjRU4JNrtMNFs2xwtsiTJtnAFcF9bvmg=) 3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: FC93rdM/vdZQAg1QRdAMhOId3DELs7nG9wTwZW4DnWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: May 31 06:42:54 2025 GMT Not After : Jun 7 06:42:54 2025 GMT Subject: CN=683aa4ee-c3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:d7:1a:16:04:5d:e9:d7:94:93:69:32:ca: ff:cb:96:7e:c9:a0:da:e4:b1:a2:78:b3:77:37:f5: e1:9c:c6:03:10:36:20:10:56:b0:aa:c4:50:4c:2f: fc:21:b4:cc:fd:62:fb:67:1c:d6:67:8b:00:97:c3: da:eb:6a:f3:15:7b:31:97:39:c9:b8:05:15:7a:ee: 1f:9b:90:0b:63:04:00:f5:14:26:45:cf:97:dc:a4: 5b:c8:48:1f:9b:f7:fd:9a:4c:b2:03:1b:13:08:d0: 1d:48:f4:36:5e:50:99:53:d0:72:e4:c1:e7:64:93: 2a:ce:52:c2:2a:27:a1:ad:fc:51:24:50:25:59:9b: 36:81:97:29:7f:67:3d:2d:72:62:ec:d9:a0:3f:2d: b8:bf:bc:c5:02:71:3d:aa:4d:2d:1e:30:02:ae:51: 85:11:56:a5:43:e4:8c:60:7c:96:00:ab:2c:de:89: 2e:ae:82:a2:da:90:93:d7:96:69:42:7f:94:5e:f4: 7a:92:d9:5f:09:e4:ef:89:9a:d9:7c:7a:12:75:c3: 35:d8:f6:f9:27:79:d3:bd:fb:02:f0:38:cb:29:bf: 0b:ed:a6:9c:af:5d:56:22:71:46:b4:41:c2:1f:58: 2b:77:b4:77:2e:69:e8:db:45:a7:82:a2:e3:32:83: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:01:18:FD:73:ED:21:A5:50:6C:AC:0F:A3:52:E6:9E:CD:A6:EB:D5 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c5:43:1b:ff:68:b6:ae:b5:4f:bb:a5:b1:3a:38:8e:15:c3: b7:ce:a5:6f:c3:73:a5:f2:f7:a3:1f:5e:db:a9:9a:c5:8d:57: 12:35:cc:f3:4b:21:e6:53:c3:9c:10:fb:ed:bb:a5:05:4c:ef: 5d:e1:c2:4f:78:62:fd:81:90:0f:43:74:85:b3:9c:df:8b:1d: 4e:ac:80:da:31:8c:9b:3b:06:1a:81:47:0c:09:84:26:db:5a: d7:56:ff:77:c3:26:db:ee:44:1f:a8:1f:3a:21:86:45:6a:dc: a3:05:9b:58:dc:83:d7:0c:7a:89:1d:54:c2:12:18:b3:9a:48: cf:54:ec:f4:f7:5c:ff:86:35:de:ed:91:e1:d9:a1:92:63:2a: fd:43:fb:78:2f:84:10:8e:bc:38:fc:a3:41:ea:b3:97:07:43: 1d:d1:9a:20:42:2e:b0:df:b1:35:5a:52:09:9e:f0:de:00:97: 0d:d5:c6:2b:ae:66:54:fe:da:18:69:9d:72:a9:75:bb:2b:33: cb:9f:91:4f:db:14:51:be:b6:7e:fc:5d:7d:48:59:be:25:d2: f9:79:02:b8:5f:5f:a9:f2:22:b5:a3:22:7b:45:8a:5a:f5:c3: ec:74:cb:14:7b:9b:22:f9:98:51:45:16:dd:df:de:f9:3f:ef: 51:ed:4d:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzQ4RDExMC8GA1UEBRMoODY0NDRBMzM0OTE1MTIxNEI0RjI3MTFCMkM1REEwQ0I5 OUU1MEYxMzAeFw0yNTA1MzEwNjQyNTRaFw0yNTA2MDcwNjQyNTRaMBgxFjAUBgNV BAMTDTY4M2FhNGVlLWMzY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2L9caFgRd6deUk2kyyv/Lln7JoNrksaJ4s3c39eGcxgMQNiAQVrCqxFBML/wh tMz9YvtnHNZniwCXw9rravMVezGXOcm4BRV67h+bkAtjBAD1FCZFz5fcpFvISB+b 9/2aTLIDGxMI0B1I9DZeUJlT0HLkwedkkyrOUsIqJ6Gt/FEkUCVZmzaBlyl/Zz0t cmLs2aA/Lbi/vMUCcT2qTS0eMAKuUYURVqVD5IxgfJYAqyzeiS6ugqLakJPXlmlC f5Re9HqS2V8J5O+Jmtl8ehJ1wzXY9vknedO9+wLwOMspvwvtppyvXVYicUa0QcIf WCt3tHcuaejbRaeCouMyg8W1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0QEY/XPt IaVQbKwPo1Lmns2m69UwHwYDVR0jBBgwFoAUhkRKM0kVEhS08nEbLF2gy5nlDxMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDNDhELzBDMjE1OEIyQjJD OTExRUY5MDNGNzg4M0M0RjlBRTAyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGtSS00wa1ZFaFMwOG5FYkxGMmd5NW5sRHhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD NDhELzBDMjE1OEIyQjJDOTExRUY5MDNGNzg4M0M0RjlBRTAyL2hrUktNMGtWRWhT MDhuRWJMRjJneTVubER4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTFQxv/aLautU+7pbE6OI4Vw7fOpW/Dc6Xy96MfXtupmsWNVxI1zPNL IeZTw5wQ++27pQVM713hwk94Yv2BkA9DdIWznN+LHU6sgNoxjJs7BhqBRwwJhCbb WtdW/3fDJtvuRB+oHzohhkVq3KMFm1jcg9cMeokdVMISGLOaSM9U7PT3XP+GNd7t keHZoZJjKv1D+3gvhBCOvDj8o0Hqs5cHQx3RmiBCLrDfsTVaUgme8N4Alw3Vxiuu ZlT+2hhpnXKpdbsrM8ufkU/bFFG+tn78XX1IWb4l0vl5ArhfX6nyIrWjIntFilr1 w+x0yxR7myL5mFFFFt3f3vk/71HtTSI= -----END CERTIFICATE-----Generated at Sat May 31 17:50:37 2025 by rpki-client