$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json) Hash identifier: m9IeboeSBmJ9JShgmsfTjgPLwsl3HleDhYyVWjZDMW4= Subject key identifier: 79:BD:F1:0E:ED:B5:4A:DC:C9:90:10:1F:A8:DB:73:59:29:46:D6:FC Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft Manifest number: 05F7 Signing time: Fri 30 May 2025 23:07:08 +0000 Manifest this update: Fri 30 May 2025 23:07:08 +0000 Manifest next update: Fri 06 Jun 2025 23:07:08 +0000 Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: cSpww1VzWIWzuqJTrsKuzpB7OboAI19/bLL6MDfVudI=) 2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: JNO//UyjyCwtO6c12uk/NjDfBJbKa4UXXgFo1EP+Qts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Validity Not Before: May 30 23:07:08 2025 GMT Not After : Jun 6 23:07:08 2025 GMT Subject: CN=683a3a1c-c6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:34:e6:16:96:ca:7e:f2:c4:3d:5c:fd:54: a2:8f:33:8a:e2:21:21:7e:ca:9a:f3:5b:ea:4f:f0: 6c:f9:ef:25:50:68:be:85:c9:cb:e4:48:7d:0f:7b: 71:34:e6:f9:ca:e9:af:0f:bb:21:3c:59:04:0a:eb: b4:35:8d:15:49:84:fd:14:b0:7c:e6:5a:59:f3:f7: e3:0c:5f:03:71:3a:15:bb:d8:18:2b:32:33:6e:a8: b1:4f:57:5e:66:85:eb:f4:6d:d6:88:7f:5d:68:77: 95:95:40:e6:02:36:04:fd:e7:d4:4d:cf:7c:51:b5: 4a:9b:d1:63:ca:60:30:f8:79:5c:8d:66:b8:19:56: 3d:99:40:7e:c7:50:6e:a0:df:09:d9:06:3c:65:8e: 60:8c:95:51:ee:5b:23:07:9c:ce:6e:0d:5f:a8:38: 03:8f:17:3c:42:8d:62:79:d7:f9:c1:4b:1f:80:fb: 4c:fe:f7:2b:dc:fe:c4:d7:09:e7:38:29:98:e1:84: 73:93:e3:27:5a:a4:d6:a2:91:09:88:32:21:44:eb: f8:32:09:15:0f:4a:d6:3d:68:25:82:f3:05:eb:d6: 30:0f:1b:2c:dc:82:3d:b7:b6:dd:0e:40:f1:6d:df: 0d:bc:2f:58:15:76:19:21:ca:ff:5f:23:90:01:51: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BD:F1:0E:ED:B5:4A:DC:C9:90:10:1F:A8:DB:73:59:29:46:D6:FC X509v3 Authority Key Identifier: keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e2:81:58:9b:8a:47:b7:40:88:49:a9:20:1f:18:62:06:7f: e1:bd:b9:d2:3a:e2:62:df:d5:00:f2:0c:00:00:d7:40:9a:e4: a4:cb:51:46:f1:fd:db:29:b0:06:8a:8d:e2:fa:7a:a6:eb:92: 13:d8:46:4d:8e:e5:de:74:b4:4e:93:55:11:1b:ab:cf:27:7e: 6b:a7:91:26:6e:a6:0c:bd:d9:f8:d0:ab:4a:26:f6:5a:75:7c: ef:fc:93:d9:9d:47:62:52:ec:1a:ce:62:04:8f:3d:a0:1b:61: 08:01:d5:00:94:94:67:f9:f2:f4:ef:a0:f1:19:25:53:35:d3: b4:f1:24:51:1f:96:6f:5c:a6:d1:cd:3e:94:85:66:9d:26:b9: cd:6e:9c:b3:8a:88:0b:3c:9f:54:75:f8:a0:8e:b5:f8:00:4f: 0c:5c:a1:fc:4e:ba:a7:23:36:a9:c5:41:a6:fc:44:80:6a:76: 83:df:1a:31:ff:ca:e1:9a:91:ef:d9:42:d5:2c:53:80:65:0d: 9a:82:2c:53:7b:df:3b:12:ec:c3:74:b3:a6:52:8f:48:46:dd: 5c:41:97:78:c2:76:5b:6d:2b:6b:16:95:b8:f6:17:be:52:0a: 0c:31:07:92:28:db:3e:a5:92:90:9a:e9:57:11:df:1d:37:d3: 0e:ef:d5:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD QUEyMjFFMzcwHhcNMjUwNTMwMjMwNzA4WhcNMjUwNjA2MjMwNzA4WjAYMRYwFAYD VQQDEw02ODNhM2ExYy1jNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9U05haWyn7yxD1c/VSijzOK4iEhfsqa81vqT/Bs+e8lUGi+hcnL5Eh9D3tx NOb5yumvD7shPFkECuu0NY0VSYT9FLB85lpZ8/fjDF8DcToVu9gYKzIzbqixT1de ZoXr9G3WiH9daHeVlUDmAjYE/efUTc98UbVKm9FjymAw+HlcjWa4GVY9mUB+x1Bu oN8J2QY8ZY5gjJVR7lsjB5zObg1fqDgDjxc8Qo1iedf5wUsfgPtM/vcr3P7E1wnn OCmY4YRzk+MnWqTWopEJiDIhROv4MgkVD0rWPWglgvMF69YwDxss3II9t7bdDkDx bd8NvC9YFXYZIcr/XyOQAVGcVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm98Q7t tUrcyZAQH6jbc1kpRtb8MB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz VXExLURndkRMUGZLb2lIamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ4oFYm4pHt0CISakgHxhiBn/hvbnSOuJi39UA8gwAANdAmuSky1FG 8f3bKbAGio3i+nqm65IT2EZNjuXedLROk1URG6vPJ35rp5EmbqYMvdn40KtKJvZa dXzv/JPZnUdiUuwazmIEjz2gG2EIAdUAlJRn+fL076DxGSVTNdO08SRRH5ZvXKbR zT6UhWadJrnNbpyziogLPJ9UdfigjrX4AE8MXKH8TrqnIzapxUGm/ESAanaD3xox /8rhmpHv2ULVLFOAZQ2agixTe987EuzDdLOmUo9IRt1cQZd4wnZbbStrFpW49he+ UgoMMQeSKNs+pZKQmulXEd8dN9MO79X3 -----END CERTIFICATE-----Generated at Sat May 31 16:28:37 2025 by rpki-client