$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: e4AeDbcHgK8qZn26yzZnz/OL1G4nIMoXQS0SZi2A0R4= Subject key identifier: 13:26:29:A9:9D:34:47:B7:2B:D8:7A:E0:2E:0F:F0:19:39:40:8A:74 Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 34E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 34B5 Signing time: Sat 31 May 2025 14:33:32 +0000 Manifest this update: Sat 31 May 2025 14:33:31 +0000 Manifest next update: Sat 07 Jun 2025 14:33:31 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: P9nxGM7XohE9KsZsnA1iA8OjW7yfWsaD5hco2dTaIcw=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: d0P/BKes6SbSKV4r9lK1XjzU3f1Gv4sq1ihkJ2akzQw=) 3: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: 1oolI04ZrhXaYmXgZvqSiMymHhXrDoJjC9cjKEp6I10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: May 31 14:33:31 2025 GMT Not After : Jun 7 14:33:31 2025 GMT Subject: CN=683b133c-1885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:ef:9f:6e:54:0f:3e:a8:81:3d:c2:5d:05: fa:e9:50:9f:bb:f9:98:87:97:3f:a6:0e:1c:9a:f6: 2d:b1:25:b4:aa:c7:3c:97:80:64:5a:74:9b:54:f6: 0f:5a:7d:76:7f:a7:55:a6:a8:b0:13:8f:a5:4c:97: c9:ce:3f:e6:3b:ba:30:49:01:ce:c0:80:ef:1a:2f: 8f:81:fa:98:a2:6f:e8:1a:b6:5d:21:9a:51:41:ef: 5e:2c:f1:1e:42:8e:8b:ca:71:3b:82:ac:ac:74:80: eb:a2:b4:29:9d:1c:e8:fc:35:76:c1:44:15:1f:d3: 08:35:07:3c:f2:95:b0:f0:50:e3:20:af:08:55:13: 51:5f:10:a4:aa:cb:e1:21:23:41:1f:9e:0e:ed:11: 6d:28:f1:74:7a:5b:ef:8e:24:7d:ad:91:b1:b5:78: c2:a2:d2:6d:d8:5b:e5:08:f5:ec:44:d0:3e:40:5b: c0:4c:d5:fd:57:b7:b1:d1:84:54:fd:e1:08:54:7e: ba:6c:a7:75:69:c2:74:2e:89:5b:54:45:39:79:af: ed:5f:df:dd:4c:ae:d4:2b:d4:f8:ca:66:7b:14:60: 61:af:6f:94:31:2b:00:07:6a:e7:3a:39:f1:93:6c: e5:c2:f4:2d:ff:f9:da:e9:41:10:21:75:31:7e:f8: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:26:29:A9:9D:34:47:B7:2B:D8:7A:E0:2E:0F:F0:19:39:40:8A:74 X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d9:f7:02:9e:cf:37:d4:41:e4:66:85:62:e1:b4:4f:4b:fe: c9:0d:ed:14:ef:72:b6:e5:ee:e9:82:58:90:d6:68:2b:89:68: 4d:77:7b:d8:a0:a8:3d:97:cc:0b:68:21:39:e6:f4:35:7a:9b: 16:d1:d8:83:b5:fc:64:5d:60:1e:88:aa:a2:19:45:01:5a:cc: 5d:e6:83:27:20:68:c8:4a:01:98:4a:25:aa:17:d2:a9:89:05: b5:74:15:7e:f5:0e:24:f9:d7:67:3a:53:0f:37:c4:fd:06:61: 20:6a:8e:4c:2a:1c:3a:9e:77:2b:07:61:65:e4:c9:f4:4d:d6: a7:2c:24:f2:d0:27:7f:07:38:40:7b:37:c4:ae:79:17:7c:2f: ab:e5:0b:99:fd:b6:3c:71:83:4c:f8:34:98:c0:a7:24:3f:fc: 91:ca:92:85:6d:1e:f2:da:03:db:01:39:90:15:00:8d:7a:40: 10:4b:57:26:f8:21:c1:07:93:09:90:22:b4:96:f4:e6:31:e9: 31:f4:37:d7:ac:15:29:28:34:b3:c5:1b:87:48:60:b8:f8:14: 5c:9d:c9:48:32:59:73:75:52:c6:bd:2f:cd:c1:39:4c:c1:36: 4c:f0:d9:5f:bf:85:eb:a1:f9:3d:c2:ea:8c:37:5b:b9:ee:c0: 5c:93:44:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjUwNTMxMTQzMzMxWhcNMjUwNjA3MTQzMzMxWjAYMRYwFAYD VQQDEw02ODNiMTMzYy0xODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbnvn25UDz6ogT3CXQX66VCfu/mYh5c/pg4cmvYtsSW0qsc8l4BkWnSbVPYP Wn12f6dVpqiwE4+lTJfJzj/mO7owSQHOwIDvGi+PgfqYom/oGrZdIZpRQe9eLPEe Qo6LynE7gqysdIDrorQpnRzo/DV2wUQVH9MINQc88pWw8FDjIK8IVRNRXxCkqsvh ISNBH54O7RFtKPF0elvvjiR9rZGxtXjCotJt2FvlCPXsRNA+QFvATNX9V7ex0YRU /eEIVH66bKd1acJ0LolbVEU5ea/tX9/dTK7UK9T4ymZ7FGBhr2+UMSsAB2rnOjnx k2zlwvQt//na6UEQIXUxfvgiDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMmKamd NEe3K9h64C4P8Bk5QIp0MB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2fcCns831EHkZoVi4bRPS/7JDe0U73K25e7pgliQ1mgriWhNd3vY oKg9l8wLaCE55vQ1epsW0diDtfxkXWAeiKqiGUUBWsxd5oMnIGjISgGYSiWqF9Kp iQW1dBV+9Q4k+ddnOlMPN8T9BmEgao5MKhw6nncrB2Fl5Mn0TdanLCTy0Cd/BzhA ezfErnkXfC+r5QuZ/bY8cYNM+DSYwKckP/yRypKFbR7y2gPbATmQFQCNekAQS1cm +CHBB5MJkCK0lvTmMekx9DfXrBUpKDSzxRuHSGC4+BRcnclIMllzdVLGvS/NwTlM wTZM8Nlfv4Xrofk9wuqMN1u57sBck0SK -----END CERTIFICATE-----Generated at Sat May 31 17:06:27 2025 by rpki-client