$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json) Hash identifier: Vmu3+N4GNP2e+MPW434FDEMOBEaKppRaxZE9MtXCfGs= Subject key identifier: CC:C0:17:85:CD:6E:66:9A:37:4D:32:94:D8:5C:20:4D:F9:1F:7E:D7 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft Manifest number: 04DE Signing time: Fri 30 May 2025 23:59:51 +0000 Manifest this update: Fri 30 May 2025 23:59:51 +0000 Manifest next update: Fri 06 Jun 2025 23:59:51 +0000 Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: W7z+VwNC3sIT6PKnq9vkEuvs2NPwVX26Ma0Orj6ukNU=) 2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: IAKK+mY8HFgS2YSMZrRmCEo9EyVF6c8NsaWFUI1Cy7U=) 3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: LVDrWJ6BXerl5rnm8vBbRTurQuWLvQoWiaKOgBW7x5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: May 30 23:59:51 2025 GMT Not After : Jun 6 23:59:51 2025 GMT Subject: CN=683a4677-0bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:a9:e1:bb:46:61:1b:30:f4:a3:94:a5:cd: 33:39:32:1d:40:8c:83:0b:91:61:5f:d8:81:66:53: a8:e9:15:b8:fa:45:d9:f1:e8:a9:a3:88:95:2f:d3: e8:c7:9c:0f:95:62:c3:24:f1:27:b1:ca:bd:e3:9d: 0b:ab:6a:19:53:2a:1d:9f:fc:56:8e:b6:db:83:05: 38:ae:5f:64:5a:4a:19:44:af:68:0c:5a:f5:4d:d4: b3:4c:60:6f:4a:ff:96:56:bc:bf:9a:fc:35:b7:44: e6:44:52:73:c0:ff:21:66:9b:01:83:c7:2b:9c:d8: 1d:2c:88:52:8b:97:46:ba:fb:84:49:8e:97:5d:d0: 25:57:22:d1:7e:d1:56:cc:21:1a:f6:f5:28:54:82: 84:1f:6a:61:11:bd:ff:15:03:94:c4:82:64:c7:3c: ce:f4:8b:73:fd:88:ec:d7:6b:ed:f3:86:7b:e3:c8: 98:9a:e1:b3:13:eb:9b:40:d2:a2:4c:a9:0f:90:40: b0:bf:76:a9:4b:be:9d:e4:97:81:ae:af:b9:ab:b5: 1f:1a:81:27:2c:ec:95:71:fb:9c:f4:28:0d:83:2d: 03:4b:c1:16:3a:be:b0:1e:24:8e:8c:29:ff:eb:83: 83:53:c3:be:14:7b:e7:88:56:93:59:21:8f:6e:59: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C0:17:85:CD:6E:66:9A:37:4D:32:94:D8:5C:20:4D:F9:1F:7E:D7 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a6:d5:be:cc:c2:6e:42:e5:2a:b2:de:53:16:a8:13:da:ae: 65:ca:a0:e2:b5:b9:1a:8d:85:be:24:cd:80:eb:db:18:11:fa: d5:f1:a3:0c:c6:99:9c:f3:6d:9a:13:20:98:b3:0e:fb:9e:d1: 96:1d:7c:b9:b1:7d:42:97:20:4c:4a:1f:54:52:51:5b:b2:06: c2:f4:c7:d3:a9:69:fd:32:2a:83:36:81:d2:51:32:0c:8e:58: 97:02:64:5c:33:7e:65:11:b8:3d:eb:ae:5d:f0:95:65:80:f5: 01:60:b1:2c:8e:74:73:ff:26:a7:09:2e:e0:27:98:48:14:1f: ca:c7:20:e4:c4:55:0e:ba:b9:72:1f:93:3f:22:de:ae:02:84: b3:e4:79:5a:40:3b:77:07:60:50:fd:2c:a2:9d:b0:bd:8d:bc: 8d:60:44:7c:5d:44:f1:22:59:6b:71:5f:f6:fb:7f:00:c0:da: 52:ee:97:64:b5:ea:31:29:bf:93:50:6a:81:e7:a8:e0:de:b4: ec:dc:eb:b4:3a:f4:15:5f:37:7e:28:6f:b5:c8:a9:31:e9:46: 40:2b:7e:67:a5:36:b1:06:10:a8:d0:d3:87:cf:48:eb:14:ab: 6a:64:3a:2a:bb:a7:35:e1:6b:e8:ae:a4:3b:50:b4:7b:2f:3d: 77:a3:89:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjUwNTMwMjM1OTUxWhcNMjUwNjA2MjM1OTUxWjAYMRYwFAYD VQQDEw02ODNhNDY3Ny0wYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYSp4btGYRsw9KOUpc0zOTIdQIyDC5FhX9iBZlOo6RW4+kXZ8eipo4iVL9Po x5wPlWLDJPEnscq9450Lq2oZUyodn/xWjrbbgwU4rl9kWkoZRK9oDFr1TdSzTGBv Sv+WVry/mvw1t0TmRFJzwP8hZpsBg8crnNgdLIhSi5dGuvuESY6XXdAlVyLRftFW zCEa9vUoVIKEH2phEb3/FQOUxIJkxzzO9Itz/Yjs12vt84Z748iYmuGzE+ubQNKi TKkPkECwv3apS76d5JeBrq+5q7UfGoEnLOyVcfuc9CgNgy0DS8EWOr6wHiSOjCn/ 64ODU8O+FHvniFaTWSGPblnP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzAF4XN bmaaN00ylNhcIE35H37XMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3 eThoVTRfUU1oOHZQS2hXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIptW+zMJuQuUqst5TFqgT2q5lyqDitbkajYW+JM2A69sYEfrV8aMM xpmc822aEyCYsw77ntGWHXy5sX1ClyBMSh9UUlFbsgbC9MfTqWn9MiqDNoHSUTIM jliXAmRcM35lEbg9665d8JVlgPUBYLEsjnRz/yanCS7gJ5hIFB/KxyDkxFUOurly H5M/It6uAoSz5HlaQDt3B2BQ/SyinbC9jbyNYER8XUTxIllrcV/2+38AwNpS7pdk teoxKb+TUGqB56jg3rTs3Ou0OvQVXzd+KG+1yKkx6UZAK35npTaxBhCo0NOHz0jr FKtqZDoqu6c14WvorqQ7ULR7Lz13o4mb -----END CERTIFICATE-----Generated at Sat May 31 16:39:46 2025 by rpki-client