$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: ew2GnDAnetUUFN8UGeienXnZi5SIC+eyu0+0ffX+XZw= Subject key identifier: 3D:FD:64:9D:46:10:4A:A5:B3:AD:21:D1:2B:E4:FA:A0:FE:5B:27:60 Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 0124 Signing time: Sat 31 May 2025 04:19:33 +0000 Manifest this update: Sat 31 May 2025 04:19:32 +0000 Manifest next update: Sat 07 Jun 2025 04:19:32 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: 7tKngD4VxaUU6pO3vG4N1Ypnh72GCkD4PugwNPi81k8=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: qxZ80C2zZyx5cq4VROiHoH57qrwZSWdC3kAJGztpgCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: May 31 04:19:32 2025 GMT Not After : Jun 7 04:19:32 2025 GMT Subject: CN=683a8354-e01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:66:81:7d:86:c0:a2:ec:e9:c3:64:ed:f3: 5a:ac:66:f1:a6:0a:32:82:fc:e7:3d:fa:d0:e8:0c: 2b:ba:2f:14:03:eb:02:7e:c3:13:04:3c:b4:f0:d7: 93:fa:4d:b8:9b:44:4c:f4:3a:0f:78:42:50:da:f0: 6f:52:4d:3f:92:53:ea:25:97:5d:7f:1b:ff:9f:94: 1c:ec:0a:50:c9:d4:a7:03:86:e2:91:e6:37:d8:49: 31:7a:f1:6e:77:f4:76:6b:12:ed:07:aa:0c:27:c2: e3:af:65:fe:1b:9c:0c:33:e1:b2:da:6c:53:35:0f: 5d:a0:f3:fa:14:a5:30:c0:e8:11:df:75:8b:21:c8: 1b:c0:a3:67:c2:12:06:fc:80:cc:d6:0b:d5:55:c6: 35:e5:bf:45:61:d0:07:8e:09:22:5d:bb:71:c6:3f: 4d:e0:d3:e5:6a:90:49:ae:5d:4c:e4:d2:93:9e:77: 7e:27:26:f9:a8:c5:09:da:78:62:d0:27:4f:e4:56: 68:99:e8:95:be:80:83:77:dc:12:f6:a0:cf:45:47: 49:6d:4f:68:2f:17:72:7c:81:f8:21:09:1b:34:1e: e4:39:f0:1c:3e:de:c0:f1:d2:43:2f:11:19:52:0f: a0:00:93:a8:c3:f9:0e:90:01:d4:cd:f3:67:31:31: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FD:64:9D:46:10:4A:A5:B3:AD:21:D1:2B:E4:FA:A0:FE:5B:27:60 X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:3c:95:d9:18:e1:bf:34:0d:e1:15:6e:05:27:64:83:41:31: c4:a1:f4:cc:a4:09:81:bf:a0:33:35:41:18:d9:26:7f:91:bf: 75:35:23:3f:a4:cb:54:17:78:5f:17:68:c1:61:d3:84:b1:62: 3f:bf:6b:c2:b7:b8:53:b8:3b:a8:8c:cd:1d:2c:1a:fb:68:67: 76:b9:8b:e5:70:8f:88:70:f5:db:f6:77:f0:26:d9:89:67:d4: ea:06:0f:ff:35:39:40:88:c6:49:05:a9:f7:1d:6d:30:03:f0: ae:1b:ba:f8:41:0d:1e:89:bc:8c:3a:c6:1b:7b:ac:4a:7a:18: 17:81:91:c2:82:fc:a7:0f:3e:50:6b:0f:26:bf:6e:44:92:32: 7b:c8:25:66:0c:2b:69:74:8f:8a:f9:81:15:c7:91:36:63:e0: 91:33:80:e6:6e:d8:53:64:c6:4d:b4:dd:f3:2a:27:7e:d2:73: c6:b1:6c:9a:4e:c7:85:9e:af:e0:38:8c:fc:60:d6:37:67:9a: 20:3a:61:bd:46:3d:9e:28:b1:d5:23:31:f4:a7:e2:07:50:a0: e2:88:f6:76:1c:33:05:cc:95:e3:ca:70:96:7e:09:70:1f:cb: 4c:45:bd:10:a6:e6:f2:03:9b:25:e7:c3:1a:4a:b7:b3:ef:36: a9:f6:24:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjUwNTMxMDQxOTMyWhcNMjUwNjA3MDQxOTMyWjAYMRYwFAYD VQQDEw02ODNhODM1NC1lMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wlmgX2GwKLs6cNk7fNarGbxpgoygvznPfrQ6Awrui8UA+sCfsMTBDy08NeT +k24m0RM9DoPeEJQ2vBvUk0/klPqJZddfxv/n5Qc7ApQydSnA4bikeY32EkxevFu d/R2axLtB6oMJ8Ljr2X+G5wMM+Gy2mxTNQ9doPP6FKUwwOgR33WLIcgbwKNnwhIG /IDM1gvVVcY15b9FYdAHjgkiXbtxxj9N4NPlapBJrl1M5NKTnnd+Jyb5qMUJ2nhi 0CdP5FZomeiVvoCDd9wS9qDPRUdJbU9oLxdyfIH4IQkbNB7kOfAcPt7A8dJDLxEZ Ug+gAJOow/kOkAHUzfNnMTE0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD39ZJ1G EEqls60h0Svk+qD+WydgMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVPJXZGOG/NA3hFW4FJ2SDQTHEofTMpAmBv6AzNUEY2SZ/kb91NSM/ pMtUF3hfF2jBYdOEsWI/v2vCt7hTuDuojM0dLBr7aGd2uYvlcI+IcPXb9nfwJtmJ Z9TqBg//NTlAiMZJBan3HW0wA/CuG7r4QQ0eibyMOsYbe6xKehgXgZHCgvynDz5Q aw8mv25EkjJ7yCVmDCtpdI+K+YEVx5E2Y+CRM4DmbthTZMZNtN3zKid+0nPGsWya TseFnq/gOIz8YNY3Z5ogOmG9Rj2eKLHVIzH0p+IHUKDiiPZ2HDMFzJXjynCWfglw H8tMRb0QpubyA5sl58MaSrez7zap9iQZ -----END CERTIFICATE-----Generated at Sat May 31 17:39:20 2025 by rpki-client