$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: +5LC3N5m1P6AglnQwsbntUzRJS2rGTCA7OPxiVnIlKI= Subject key identifier: 1C:2D:84:AF:3B:12:6E:EB:16:BB:F4:FD:6B:8D:96:F6:B3:40:B3:EC Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 01C2 Signing time: Sat 31 May 2025 02:42:16 +0000 Manifest this update: Sat 31 May 2025 02:42:16 +0000 Manifest next update: Sat 07 Jun 2025 02:42:16 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: 1a5NBX7I5UU8Od++YW/AoPA7BhPmYEf1dwC+hxileJI=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: fk3GNutu1Xl8jf9hzH4EWHosYGuy+JY1n5pgsTabR1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: May 31 02:42:16 2025 GMT Not After : Jun 7 02:42:16 2025 GMT Subject: CN=683a6c88-d282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:85:28:18:f8:b0:cc:89:aa:e2:e2:c2:63: 70:b0:6b:a8:b8:89:a1:ab:22:d2:a6:45:df:1a:18: 98:45:0b:c3:f1:8e:13:0b:48:e5:72:a0:75:15:c0: cb:16:58:eb:71:1e:60:1f:53:2a:cd:92:b3:ab:a1: 25:11:4d:b4:7e:98:28:1a:47:79:48:31:00:9b:a1: 8b:ae:58:4e:14:98:9a:dc:32:2d:ed:59:ad:cc:d6: b3:88:58:de:5a:9b:52:cf:0d:09:e3:03:40:e0:31: 82:8c:82:46:55:5a:47:99:9f:0c:17:76:7c:de:9c: 7f:23:dc:d9:29:7c:2a:bf:6e:00:af:1f:c4:fc:55: 99:5b:ed:44:f3:aa:0f:6b:b7:67:9d:b0:1f:a0:5a: 7c:5b:f9:41:3e:ea:b7:de:d8:9e:36:96:fb:73:eb: 9c:b7:6e:e4:1d:b1:4d:84:86:5c:f8:c8:48:66:7e: 58:2f:61:b9:2f:77:22:f0:b9:62:cc:a8:a7:33:8f: a3:5d:6f:70:90:99:52:e5:57:99:89:11:d9:40:4d: af:2e:d5:d5:10:06:1c:1c:d9:d9:e4:1c:17:2d:e3: fd:da:0f:23:1c:81:f5:d9:e0:ae:fa:8e:eb:4f:dc: 13:72:9f:f7:ab:1a:3f:b3:2e:bc:8a:0b:5d:12:ae: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2D:84:AF:3B:12:6E:EB:16:BB:F4:FD:6B:8D:96:F6:B3:40:B3:EC X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:85:65:b5:68:1e:d5:40:73:93:a8:26:2b:b3:f8:39:39: 0d:58:f7:1a:d0:0b:4e:25:e4:fa:c7:1c:bb:2a:5b:03:7f:be: cb:eb:0e:bb:8e:ba:01:e5:d1:d8:2a:30:03:d0:f6:9f:a2:2a: d5:1a:35:09:07:48:9d:e4:04:93:aa:ad:8e:38:ac:f1:3b:ad: 10:c4:42:e7:e6:31:38:6c:77:e6:a6:f3:0a:fa:df:66:f4:0a: b3:0d:58:45:3d:6e:d4:33:8c:03:d9:62:96:03:29:5a:a7:38: 8d:d8:22:1a:0a:a4:84:a5:f1:e7:7e:63:45:1f:7e:00:30:69: 08:34:b8:61:bd:d9:0f:ba:93:8a:5a:17:54:44:2e:60:5f:e6: e7:94:c1:54:2c:de:f0:15:a9:82:b3:0b:13:0e:3e:a6:3b:e6: 49:43:07:53:c5:7b:48:0b:b3:66:80:ec:37:71:c8:21:8f:08: 5a:c8:c1:10:cb:4b:c5:e5:b4:12:39:79:9d:c8:fb:6b:dc:84: ce:42:02:00:b1:6e:9b:60:93:4d:78:d9:32:e3:9d:e8:eb:a4: 04:d4:d4:b6:b6:cc:ad:68:69:09:6f:40:de:d7:e7:b4:b7:7d: f2:35:e2:e9:08:db:52:39:47:90:3a:de:4c:d5:74:f3:cd:e4: 11:14:43:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjUwNTMxMDI0MjE2WhcNMjUwNjA3MDI0MjE2WjAYMRYwFAYD VQQDEw02ODNhNmM4OC1kMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpyFKBj4sMyJquLiwmNwsGuouImhqyLSpkXfGhiYRQvD8Y4TC0jlcqB1FcDL FljrcR5gH1MqzZKzq6ElEU20fpgoGkd5SDEAm6GLrlhOFJia3DIt7VmtzNaziFje WptSzw0J4wNA4DGCjIJGVVpHmZ8MF3Z83px/I9zZKXwqv24Arx/E/FWZW+1E86oP a7dnnbAfoFp8W/lBPuq33tieNpb7c+uct27kHbFNhIZc+MhIZn5YL2G5L3ci8Lli zKinM4+jXW9wkJlS5VeZiRHZQE2vLtXVEAYcHNnZ5BwXLeP92g8jHIH12eCu+o7r T9wTcp/3qxo/sy68igtdEq6gKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwthK87 Em7rFrv0/WuNlvazQLPsMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkE4VltWge1UBzk6gmK7P4OTkNWPca0AtOJeT6xxy7KlsDf77L6w67 jroB5dHYKjAD0PafoirVGjUJB0id5ASTqq2OOKzxO60QxELn5jE4bHfmpvMK+t9m 9AqzDVhFPW7UM4wD2WKWAylapziN2CIaCqSEpfHnfmNFH34AMGkINLhhvdkPupOK WhdURC5gX+bnlMFULN7wFamCswsTDj6mO+ZJQwdTxXtIC7NmgOw3ccghjwhayMEQ y0vF5bQSOXmdyPtr3ITOQgIAsW6bYJNNeNky453o66QE1NS2tsytaGkJb0De1+e0 t33yNeLpCNtSOUeQOt5M1XTzzeQRFEOb -----END CERTIFICATE-----Generated at Sat May 31 17:07:46 2025 by rpki-client