$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: NjENku9LMbajt3f4qf87aP7/j2IDPYmprJSWXR3MnRA= Subject key identifier: D4:5B:73:95:2C:82:1E:97:64:A3:DE:B4:38:8B:55:C7:60:3E:D4:31 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 019B Signing time: Sat 31 May 2025 03:05:58 +0000 Manifest this update: Sat 31 May 2025 03:05:57 +0000 Manifest next update: Sat 07 Jun 2025 03:05:57 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: QBkKRehdGijTxmPaFhp5S1oSxza0dnpglnuORBffDpk=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: wjMufEaDH/y4s6T5wRstNmQqRorcPZgCttuLv7sLSbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: May 31 03:05:57 2025 GMT Not After : Jun 7 03:05:57 2025 GMT Subject: CN=683a7215-91aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:84:11:52:6e:0b:d8:27:9e:73:09:1e:ca: 78:7b:b1:e0:81:fc:c6:79:99:cd:79:8f:b7:5a:6c: 80:1a:65:5e:bc:1f:4c:b1:9c:c9:32:d5:bb:63:99: 6a:cd:74:6a:e8:7d:41:53:ae:85:2a:47:63:ff:97: 19:58:48:43:ef:22:09:9d:b4:b8:59:3a:ee:4b:be: f5:78:6c:8f:96:d5:64:d9:48:cd:68:6d:46:6c:6f: 77:34:db:c3:93:70:8b:c4:a3:ce:ff:41:bf:53:d5: 80:0c:22:a5:2c:22:b3:33:7b:70:bc:3c:d1:88:9c: 29:bc:20:8f:63:b9:ff:42:cf:33:49:75:ae:47:2b: 86:1d:39:3c:d2:1a:66:d5:d1:e8:00:78:29:5d:f8: 95:52:68:d7:1b:2a:c5:73:05:e4:40:70:7f:54:f5: 26:08:3f:38:15:d5:5b:2e:21:7a:19:41:71:6e:20: 39:63:60:9a:39:87:8a:5f:00:1b:4a:cc:05:a1:9c: 09:b9:7e:27:66:69:6f:33:f0:94:f0:79:9a:60:f7: 00:bb:24:da:8b:81:68:72:e5:44:ce:0f:e7:e6:83: fd:d7:55:38:e7:58:fd:df:df:b8:aa:8d:43:6e:0e: 5e:45:f1:b0:89:ba:30:f3:71:b1:9e:74:15:c3:d9: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5B:73:95:2C:82:1E:97:64:A3:DE:B4:38:8B:55:C7:60:3E:D4:31 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:1c:ad:7d:c2:04:7e:53:60:82:37:5b:c4:be:94:85:39:77: b6:fb:73:6f:af:33:53:09:6a:fe:9d:ed:5d:7d:00:b1:77:a1: c0:2e:34:b7:a7:af:7d:33:e2:be:95:7d:04:88:14:25:c5:8c: 15:82:46:69:37:40:ad:05:5d:fa:f6:39:3b:15:81:b7:3a:70: 0d:49:b6:f4:da:0e:2e:7d:8f:a5:23:03:3b:77:5e:1c:8b:d0: d3:21:60:b1:06:ca:cd:d4:06:08:49:af:9a:f6:75:9a:da:bb: 8d:88:5b:c4:44:a4:08:b9:3f:4e:14:0d:54:79:fb:44:12:af: 9c:4c:8b:e0:b2:f9:df:3b:a9:6f:79:f0:29:d1:98:5e:e4:b5: 48:d5:55:55:a2:bf:31:2b:7f:e5:19:7f:b6:88:46:b7:f8:1f: a3:5d:27:3a:3e:cb:19:6b:6d:ac:17:f8:bd:03:72:43:4b:51: d5:02:74:c9:8f:5a:60:ed:91:24:18:f2:55:91:da:e7:d4:f2: 77:3a:cf:d5:2c:87:4a:e5:b5:a7:5d:fe:8e:0a:d8:0f:72:89: bc:78:cf:b6:91:3b:45:02:89:3d:80:02:73:54:4c:0c:27:67: 33:2f:95:07:66:21:69:12:12:c8:6f:ad:54:43:88:de:83:9b: 53:71:69:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjUwNTMxMDMwNTU3WhcNMjUwNjA3MDMwNTU3WjAYMRYwFAYD VQQDEw02ODNhNzIxNS05MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEWEEVJuC9gnnnMJHsp4e7HggfzGeZnNeY+3WmyAGmVevB9MsZzJMtW7Y5lq zXRq6H1BU66FKkdj/5cZWEhD7yIJnbS4WTruS771eGyPltVk2UjNaG1GbG93NNvD k3CLxKPO/0G/U9WADCKlLCKzM3twvDzRiJwpvCCPY7n/Qs8zSXWuRyuGHTk80hpm 1dHoAHgpXfiVUmjXGyrFcwXkQHB/VPUmCD84FdVbLiF6GUFxbiA5Y2CaOYeKXwAb SswFoZwJuX4nZmlvM/CU8HmaYPcAuyTai4FocuVEzg/n5oP911U451j939+4qo1D bg5eRfGwibow83GxnnQVw9ntEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRbc5Us gh6XZKPetDiLVcdgPtQxMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjHK19wgR+U2CCN1vEvpSFOXe2+3NvrzNTCWr+ne1dfQCxd6HALjS3 p699M+K+lX0EiBQlxYwVgkZpN0CtBV369jk7FYG3OnANSbb02g4ufY+lIwM7d14c i9DTIWCxBsrN1AYISa+a9nWa2ruNiFvERKQIuT9OFA1UeftEEq+cTIvgsvnfO6lv efAp0Zhe5LVI1VVVor8xK3/lGX+2iEa3+B+jXSc6PssZa22sF/i9A3JDS1HVAnTJ j1pg7ZEkGPJVkdrn1PJ3Os/VLIdK5bWnXf6OCtgPcom8eM+2kTtFAok9gAJzVEwM J2czL5UHZiFpEhLIb61UQ4jeg5tTcWma -----END CERTIFICATE-----Generated at Sat May 31 17:27:54 2025 by rpki-client