$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: vUjH4+Ulpe6oV5SvSRAAQpDev+tsJ8FSPnIwWn1IqrY= Subject key identifier: 95:9E:6B:31:04:51:3B:86:63:93:2F:1C:6A:6F:11:98:A3:C3:A2:D1 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C46 Signing time: Fri 30 May 2025 18:40:46 +0000 Manifest this update: Fri 30 May 2025 18:40:46 +0000 Manifest next update: Fri 06 Jun 2025 18:40:46 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: XjkgG6TCxLhBlQDUt2R/v8rpV0urp7YHYIPLGr96SWI=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: May 30 18:40:46 2025 GMT Not After : Jun 6 18:40:46 2025 GMT Subject: CN=6839fbae-e9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:73:e4:34:05:9c:d4:11:65:9d:7e:4d:7d: fc:e8:e1:2c:2c:4a:d3:46:87:c0:a7:7e:52:4f:d1: 30:01:a5:1e:1f:34:8d:06:0f:68:59:d0:2b:69:5e: d2:50:d5:d9:50:2e:20:fa:65:06:09:c8:d5:bf:28: 64:e2:1e:82:26:22:a1:bd:c3:4d:d7:e3:41:fd:ee: 06:37:07:f0:79:ca:13:63:e0:d0:e2:b2:b5:99:c8: 26:0f:2b:67:be:3f:41:59:1b:4e:68:69:7b:b9:64: 59:51:01:35:dd:d7:3a:fe:66:1c:00:4a:7c:30:7e: dc:aa:b5:f1:a3:48:3b:2f:05:32:ac:fd:11:21:a1: c4:19:78:33:e8:09:6e:28:9b:a9:37:f8:fa:38:fd: ce:28:99:2a:45:79:a7:7c:59:c6:a5:12:a8:23:60: 2a:66:31:79:ee:8b:59:54:b7:7e:7a:df:e7:5f:d0: 5d:b3:35:bc:87:cb:79:bc:98:94:62:0d:ba:fd:b8: fb:7e:01:ac:18:41:6f:c4:7a:c6:e4:f1:71:a7:e9: a0:49:b5:11:73:05:6b:9c:7f:e7:e6:b5:9e:fa:59: 03:58:3f:59:8e:15:af:cf:0f:b2:8c:c2:b3:ff:2b: 94:ee:7d:4c:11:9d:fc:36:08:05:f2:ec:1f:46:8d: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:6B:31:04:51:3B:86:63:93:2F:1C:6A:6F:11:98:A3:C3:A2:D1 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:de:15:78:34:a9:41:1b:a0:51:7a:b8:02:23:05:49:b3:8b: 7a:3f:24:1a:4b:fa:72:37:1a:eb:b8:96:aa:57:16:f6:ef:71: c0:d7:76:26:6e:fc:78:e6:51:da:ac:6a:aa:a5:ab:d9:7b:db: 5e:22:dc:50:7e:b2:c9:bb:dc:4b:8a:c3:45:4f:91:74:96:07: 92:aa:3c:6b:d7:a9:52:59:9c:dd:2a:0e:27:0c:6c:20:cc:2a: 0d:96:9d:de:53:b8:00:a7:06:4a:a1:33:1a:44:71:56:84:7d: 91:bf:1d:00:4c:3a:41:1c:d7:55:37:e4:69:91:d3:1e:24:4c: 4d:4a:25:f1:0e:65:bc:67:11:ca:91:2a:9f:e5:62:e7:62:9a: fb:d7:be:08:b5:6a:c5:ed:6d:e3:84:ad:10:3d:fd:8f:00:89: 38:ce:0c:21:f6:38:d4:6b:5e:c8:72:58:b0:d7:d7:45:de:9f: b2:f3:8c:ec:ee:cd:4c:f3:ed:f4:89:b4:a1:cc:82:25:0a:47: c6:86:ed:ec:a6:42:f5:f7:0c:5d:ff:c1:6e:c1:1e:6a:5c:86: ee:93:f7:d6:78:11:a5:1c:40:e9:c0:dc:cd:12:e5:dc:97:f8: e1:4b:7f:31:27:30:6c:90:84:cb:c3:a2:5f:8f:43:1d:2a:22: 34:cb:f4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwNTMwMTg0MDQ2WhcNMjUwNjA2MTg0MDQ2WjAYMRYwFAYD VQQDEw02ODM5ZmJhZS1lOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+5z5DQFnNQRZZ1+TX386OEsLErTRofAp35ST9EwAaUeHzSNBg9oWdAraV7S UNXZUC4g+mUGCcjVvyhk4h6CJiKhvcNN1+NB/e4GNwfwecoTY+DQ4rK1mcgmDytn vj9BWRtOaGl7uWRZUQE13dc6/mYcAEp8MH7cqrXxo0g7LwUyrP0RIaHEGXgz6Alu KJupN/j6OP3OKJkqRXmnfFnGpRKoI2AqZjF57otZVLd+et/nX9BdszW8h8t5vJiU Yg26/bj7fgGsGEFvxHrG5PFxp+mgSbURcwVrnH/n5rWe+lkDWD9ZjhWvzw+yjMKz /yuU7n1MEZ38NggF8uwfRo115QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWeazEE UTuGY5MvHGpvEZijw6LRMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB3hV4NKlBG6BRergCIwVJs4t6PyQaS/pyNxrruJaqVxb273HA13Ym bvx45lHarGqqpavZe9teItxQfrLJu9xLisNFT5F0lgeSqjxr16lSWZzdKg4nDGwg zCoNlp3eU7gApwZKoTMaRHFWhH2Rvx0ATDpBHNdVN+RpkdMeJExNSiXxDmW8ZxHK kSqf5WLnYpr7174ItWrF7W3jhK0QPf2PAIk4zgwh9jjUa17Icliw19dF3p+y84zs 7s1M8+30ibShzIIlCkfGhu3spkL19wxd/8FuwR5qXIbuk/fWeBGlHEDpwNzNEuXc l/jhS38xJzBskITLw6Jfj0MdKiI0y/Q7 -----END CERTIFICATE-----Generated at Sat May 31 16:00:17 2025 by rpki-client