$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: +QkD+OrxGxPtfq+AygS7OLOr2p3l74CQVJXknxSRp3s= Subject key identifier: E2:B3:F9:96:93:D9:FB:D4:35:3A:F8:55:89:49:4E:65:16:4E:94:AD Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: F0 Signing time: Sat 31 May 2025 05:07:53 +0000 Manifest this update: Sat 31 May 2025 05:07:53 +0000 Manifest next update: Sat 07 Jun 2025 05:07:53 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: ar6TckhwWCQ2DrtEx49xJ/iLdSQtIXDzdaQUp+UKS5o=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: hlb2SfBxJYheUKrpN9mM5swhopWBRQyixAQ28JRvUzI=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: 3XDa5Qvq48RtoRjAw8eS6iGbVpjU9ftFentU+xzbXfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: May 31 05:07:53 2025 GMT Not After : Jun 7 05:07:53 2025 GMT Subject: CN=683a8ea9-bed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:a0:24:72:f6:d2:c7:d8:77:a8:9b:a9:ec: 3e:f8:48:79:64:17:69:27:72:04:f7:3b:d1:33:d1: 12:06:07:cc:90:82:21:39:54:99:9e:ac:50:d1:14: 6d:f6:7c:34:9f:1f:84:b1:ca:b2:d7:75:7e:00:c8: 95:15:8e:51:4b:5d:b1:df:0e:52:dd:b5:5d:e0:fd: 49:d1:f2:f0:82:2b:54:4b:b5:6c:69:84:9b:4f:29: 6d:3e:3d:1f:a0:12:8f:0b:ad:07:9f:fc:fc:21:da: 7e:19:a5:60:dd:0d:fe:df:dd:49:d1:72:65:49:71: 5b:16:49:84:80:80:7e:d4:f9:28:65:b3:39:d7:de: 7b:69:30:10:05:12:1c:ed:70:6f:4d:2f:98:06:7b: 8f:44:0c:9f:6a:30:83:2c:8b:ed:62:ed:e5:11:44: 3b:59:15:d3:d1:d2:e8:0c:49:81:2d:6e:e7:ab:ab: 9c:2b:8e:5b:09:06:b0:3d:90:88:30:c0:3b:d4:5e: 00:e6:57:69:4d:55:dd:b2:c5:a4:98:b5:db:92:ea: 2a:c7:7f:42:8b:eb:8a:63:c3:76:7e:5c:2a:22:a4: 8f:2e:5c:8b:4e:cf:0c:bc:dd:95:ce:ee:3b:55:a5: 11:82:eb:8f:44:e4:e6:4e:76:06:2a:40:e4:1b:1f: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B3:F9:96:93:D9:FB:D4:35:3A:F8:55:89:49:4E:65:16:4E:94:AD X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:24:e2:23:9b:2a:ef:df:b8:25:fb:49:40:d7:ec:6b:c3:78: 6b:d6:a0:72:c2:a8:2c:09:d2:7f:ac:ff:9a:97:a1:3e:2e:96: 24:7f:e9:a3:5a:c9:a1:67:28:37:5d:bb:30:af:c8:48:b0:28: ca:3c:4a:23:47:85:f6:3c:24:90:ca:a8:14:04:4a:02:f9:75: 12:1d:3e:ab:f3:ff:a6:63:c2:ce:e6:c8:c0:07:05:2b:24:76: 09:06:82:c0:a0:25:48:04:f6:fa:c8:2d:b9:eb:f5:fc:16:95: 17:03:ff:53:aa:17:f1:20:20:d5:ef:2f:66:73:78:0a:a7:f1: 0b:ac:21:b7:d4:21:3b:58:3d:03:9d:b0:3f:c7:82:ae:24:a6: 64:84:cc:0e:2a:b1:0f:63:0a:da:01:44:e3:df:5c:2a:10:93: a7:c5:b6:6a:66:1e:e0:dd:fc:5c:03:92:3e:ce:bf:a7:d9:bc: 81:44:71:a2:2b:71:d5:25:71:9d:bf:02:4b:f0:55:53:ae:bb: 56:81:73:54:be:72:43:ad:21:cc:3a:cf:07:dd:8b:85:98:73: f0:d5:bf:a8:99:1d:5d:3e:a3:f7:70:2c:00:a2:2d:70:63:de: 4c:24:d6:4c:0e:ed:36:d3:0b:95:ba:8b:9d:6a:62:24:8c:e5: c5:c7:0f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUwNTMxMDUwNzUzWhcNMjUwNjA3MDUwNzUzWjAYMRYwFAYD VQQDEw02ODNhOGVhOS1iZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D2gJHL20sfYd6ibqew++Eh5ZBdpJ3IE9zvRM9ESBgfMkIIhOVSZnqxQ0RRt 9nw0nx+Escqy13V+AMiVFY5RS12x3w5S3bVd4P1J0fLwgitUS7VsaYSbTyltPj0f oBKPC60Hn/z8Idp+GaVg3Q3+391J0XJlSXFbFkmEgIB+1PkoZbM51957aTAQBRIc 7XBvTS+YBnuPRAyfajCDLIvtYu3lEUQ7WRXT0dLoDEmBLW7nq6ucK45bCQawPZCI MMA71F4A5ldpTVXdssWkmLXbkuoqx39Ci+uKY8N2flwqIqSPLlyLTs8MvN2Vzu47 VaURguuPROTmTnYGKkDkGx9FkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKz+ZaT 2fvUNTr4VYlJTmUWTpStMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRJOIjmyrv37gl+0lA1+xrw3hr1qBywqgsCdJ/rP+al6E+LpYkf+mj WsmhZyg3Xbswr8hIsCjKPEojR4X2PCSQyqgUBEoC+XUSHT6r8/+mY8LO5sjABwUr JHYJBoLAoCVIBPb6yC256/X8FpUXA/9TqhfxICDV7y9mc3gKp/ELrCG31CE7WD0D nbA/x4KuJKZkhMwOKrEPYwraAUTj31wqEJOnxbZqZh7g3fxcA5I+zr+n2byBRHGi K3HVJXGdvwJL8FVTrrtWgXNUvnJDrSHMOs8H3YuFmHPw1b+omR1dPqP3cCwAoi1w Y95MJNZMDu020wuVuoudamIkjOXFxw9/ -----END CERTIFICATE-----Generated at Sat May 31 17:01:15 2025 by rpki-client