$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: YUTnLZ6wMTIujbw6ZSZdZkOy4eSRXKakXai9sWFgIeo= Subject key identifier: 4E:A0:55:60:0A:CB:11:66:B0:2E:95:FF:81:04:24:3F:67:CC:31:D1 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 05E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 05E0 Signing time: Fri 30 May 2025 23:11:22 +0000 Manifest this update: Fri 30 May 2025 23:11:21 +0000 Manifest next update: Fri 06 Jun 2025 23:11:21 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: 9EOIoH4tB54zKO2N8UhRXDMCLaROw144vMd+vg9SXpM=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1513 (0x5e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: May 30 23:11:21 2025 GMT Not After : Jun 6 23:11:21 2025 GMT Subject: CN=683a3b19-61dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:0a:86:3e:3f:b3:01:19:8f:a5:00:27:aa: c0:75:01:d8:72:b0:76:b7:c1:f2:4b:14:79:ca:e7: e1:27:5e:44:5f:5d:9c:df:d3:1b:f3:e8:c2:1e:14: d7:ed:5d:5f:07:1b:b9:06:f2:8c:14:ed:23:69:92: a3:0d:da:1c:7a:de:c6:d0:18:fd:46:72:66:af:99: 2e:c5:78:da:64:83:d2:c4:a7:f8:bb:7d:ce:2a:19: 13:ea:d2:cc:b4:4d:fa:37:5f:19:92:37:24:ea:26: f3:62:0e:10:96:5c:fd:58:19:f9:d6:67:f4:62:1a: f3:51:69:13:6c:e6:7c:12:49:a9:31:fa:9e:0f:12: 8d:07:e0:54:2e:59:52:51:a2:f0:6f:34:46:e0:65: 19:68:75:01:f7:84:b5:80:7e:27:5f:e8:d9:9b:20: b0:f5:e3:8d:57:27:18:49:fb:98:73:0c:52:44:cd: b6:67:ae:1d:d4:67:26:65:28:5a:6b:59:7c:92:a6: 6f:00:6e:0b:d3:d0:b9:66:1d:ea:46:db:b5:cc:96: c4:22:37:b5:35:4e:0b:3d:e8:85:88:fe:0d:19:c8: fe:22:9f:5d:7d:55:c4:de:5e:d6:61:03:63:68:38: 31:7b:ac:0c:3b:e0:f5:78:c5:87:7f:84:28:4c:3d: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:55:60:0A:CB:11:66:B0:2E:95:FF:81:04:24:3F:67:CC:31:D1 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d5:00:8a:11:bc:61:18:bf:59:d5:db:03:20:de:88:1d:79: 8f:bb:8b:04:b0:67:26:bc:25:bb:1f:69:f9:0c:c1:9c:6b:d2: 61:be:99:3f:4b:5d:52:b1:ba:10:22:c3:43:bd:17:1a:6f:11: ee:66:73:23:0e:65:ea:5a:6b:de:60:41:19:a8:1a:d9:0f:f3: b3:e6:1e:c1:b8:33:af:fa:10:b0:54:98:5d:19:f4:6d:fd:c3: a2:0b:23:b4:44:f2:31:44:df:9a:73:a9:2d:39:76:f3:9f:da: e5:71:d9:8d:b0:c6:00:0c:af:7f:a6:fa:ff:d5:2e:2b:7c:56: 2c:a6:78:9c:c8:12:ac:b7:87:fa:e5:57:b1:89:58:80:c3:c1: 09:e7:f9:21:5d:8a:a9:d5:0f:c2:b3:24:4b:72:91:16:f7:e9: 47:b8:41:8c:9e:65:bc:f4:64:71:3c:6c:d2:ff:f7:4a:53:e7: 54:12:99:5d:c9:67:c7:50:1d:ab:c5:90:d7:82:f2:0d:e2:3f: 22:29:1f:31:18:05:db:0d:17:ad:86:fd:d1:ba:7e:9b:cb:75: 6e:77:d2:25:13:b2:c5:f8:2d:f7:78:10:ba:5a:fc:e3:9f:3a: f7:ca:37:31:8f:c6:16:cb:22:20:fa:eb:98:11:f3:a9:1a:2e: 40:98:76:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUwNTMwMjMxMTIxWhcNMjUwNjA2MjMxMTIxWjAYMRYwFAYD VQQDEw02ODNhM2IxOS02MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiwKhj4/swEZj6UAJ6rAdQHYcrB2t8HySxR5yufhJ15EX12c39Mb8+jCHhTX 7V1fBxu5BvKMFO0jaZKjDdocet7G0Bj9RnJmr5kuxXjaZIPSxKf4u33OKhkT6tLM tE36N18Zkjck6ibzYg4Qllz9WBn51mf0YhrzUWkTbOZ8EkmpMfqeDxKNB+BULllS UaLwbzRG4GUZaHUB94S1gH4nX+jZmyCw9eONVycYSfuYcwxSRM22Z64d1GcmZSha a1l8kqZvAG4L09C5Zh3qRtu1zJbEIje1NU4LPeiFiP4NGcj+Ip9dfVXE3l7WYQNj aDgxe6wMO+D1eMWHf4QoTD2rIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6gVWAK yxFmsC6V/4EEJD9nzDHRMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD1QCKEbxhGL9Z1dsDIN6IHXmPu4sEsGcmvCW7H2n5DMGca9Jhvpk/ S11SsboQIsNDvRcabxHuZnMjDmXqWmveYEEZqBrZD/Oz5h7BuDOv+hCwVJhdGfRt /cOiCyO0RPIxRN+ac6ktOXbzn9rlcdmNsMYADK9/pvr/1S4rfFYspnicyBKst4f6 5VexiViAw8EJ5/khXYqp1Q/CsyRLcpEW9+lHuEGMnmW89GRxPGzS//dKU+dUEpld yWfHUB2rxZDXgvIN4j8iKR8xGAXbDRethv3Run6by3Vud9IlE7LF+C33eBC6Wvzj nzr3yjcxj8YWyyIg+uuYEfOpGi5AmHYt -----END CERTIFICATE-----Generated at Sat May 31 17:47:29 2025 by rpki-client