$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json) Hash identifier: 8t1C81Jty+ry4QgJNmRNZ8hB4S9hnSF9z5aN/b3AlEM= Subject key identifier: 2E:A0:93:C5:EC:74:2D:4E:0D:5C:8D:44:E1:39:FB:51:59:66:69:6F Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft Manifest number: 016B Signing time: Sat 31 May 2025 03:31:54 +0000 Manifest this update: Sat 31 May 2025 03:31:53 +0000 Manifest next update: Sat 07 Jun 2025 03:31:53 +0000 Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: vWzGD29kPcZ8hXAgc+ka1aHhJjYsGwh7WxJQhcIiYbQ=) 2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: 1DTHOwSIeyOlP/85nvDSKsIu+CBj2ErQg5LShUWz4KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Validity Not Before: May 31 03:31:53 2025 GMT Not After : Jun 7 03:31:53 2025 GMT Subject: CN=683a7829-4b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:f4:b8:3c:41:63:e1:23:3f:b3:e9:9e:3e: b1:f9:51:26:a4:34:28:f4:8f:93:6a:9c:d7:9b:0e: d7:e3:5a:58:99:87:ca:71:6c:e7:07:3e:b8:b0:70: e7:33:e1:6d:a9:75:b7:ac:d0:24:7c:2b:f9:20:79: 33:79:9e:72:3d:66:7b:46:ba:8c:85:34:7d:5c:06: a4:55:01:19:d8:85:9e:04:b2:b7:e2:8b:50:47:0c: ae:61:84:9d:fe:2a:bb:88:fd:7d:f8:0f:8c:a9:10: 08:06:e6:70:41:85:b3:2b:5e:d3:53:9e:f1:d4:01: 23:e4:62:b5:f2:fc:9e:ed:70:e4:4e:d1:b2:eb:09: be:4c:b8:90:19:e2:71:ea:a6:a7:78:2c:0c:9c:86: af:5f:e9:77:8d:81:b8:de:ef:b9:93:39:4c:86:a8: 4d:47:a7:a1:08:5e:f4:b8:e0:5f:8e:90:21:d6:3a: b0:b1:e3:c1:9a:2c:80:82:3b:31:bc:5e:26:37:30: cb:d2:a7:63:41:ae:dd:9f:96:c3:aa:cd:93:a1:c5: 82:69:00:ec:10:84:c5:64:9a:b9:aa:c8:c3:ff:d5: 99:20:03:43:bc:b9:69:ce:47:c4:05:85:36:18:a8: c8:39:8b:1e:e2:06:6d:e2:bd:08:0f:5b:cb:93:e6: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:93:C5:EC:74:2D:4E:0D:5C:8D:44:E1:39:FB:51:59:66:69:6F X509v3 Authority Key Identifier: keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:3c:a6:4d:da:4b:d6:05:2a:70:8a:a8:65:a0:da:94:f2:2f: 29:ea:85:8a:35:d7:9c:39:fc:a5:16:58:b0:c0:02:0c:5e:5c: 3f:68:8f:c7:2d:d4:c7:47:d3:c4:3a:d7:20:5e:ba:bf:1d:bc: a8:68:15:a8:da:45:71:58:fa:8d:6b:03:5d:bb:89:b0:a5:23: a4:0a:ea:b6:aa:56:31:3d:0e:e5:1f:48:36:6d:4f:44:4f:03: fe:85:47:51:8b:78:f8:06:62:84:71:40:8d:11:be:8e:f0:3e: eb:1b:c1:c7:d4:5e:ac:e9:45:9d:55:7a:6c:d3:d7:05:3a:0a: 02:c5:e3:d8:82:80:c7:00:73:d8:fc:72:03:ee:80:c4:b6:a2: fd:cc:a9:30:1c:51:b5:c6:31:d8:76:5a:12:9a:ee:d4:0a:1d: bd:19:11:e4:54:cf:09:f5:af:8a:7a:d8:db:1e:6a:04:ae:f3: df:26:c1:31:05:ba:00:c8:90:c0:d4:84:9a:b0:96:31:bd:8a: af:73:69:96:63:35:20:bd:c0:df:cd:34:d4:cb:e4:51:7d:c2: da:2d:79:cb:7b:8c:f1:ff:10:60:22:70:1f:cc:a3:5e:24:d3: 9c:19:46:39:85:e9:ae:7f:ac:9e:00:08:d2:d3:fb:81:2b:5c: bf:1d:f3:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5 REM4NTI3RjIwHhcNMjUwNTMxMDMzMTUzWhcNMjUwNjA3MDMzMTUzWjAYMRYwFAYD VQQDEw02ODNhNzgyOS00YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs130uDxBY+EjP7Ppnj6x+VEmpDQo9I+TapzXmw7X41pYmYfKcWznBz64sHDn M+FtqXW3rNAkfCv5IHkzeZ5yPWZ7RrqMhTR9XAakVQEZ2IWeBLK34otQRwyuYYSd /iq7iP19+A+MqRAIBuZwQYWzK17TU57x1AEj5GK18vye7XDkTtGy6wm+TLiQGeJx 6qaneCwMnIavX+l3jYG43u+5kzlMhqhNR6ehCF70uOBfjpAh1jqwsePBmiyAgjsx vF4mNzDL0qdjQa7dn5bDqs2TocWCaQDsEITFZJq5qsjD/9WZIANDvLlpzkfEBYU2 GKjIOYse4gZt4r0ID1vLk+YNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6gk8Xs dC1ODVyNROE5+1FZZmlvMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf UXh3UnBZZWFuaTJkeUZKX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaPKZN2kvWBSpwiqhloNqU8i8p6oWKNdecOfylFliwwAIMXlw/aI/H LdTHR9PEOtcgXrq/HbyoaBWo2kVxWPqNawNdu4mwpSOkCuq2qlYxPQ7lH0g2bU9E TwP+hUdRi3j4BmKEcUCNEb6O8D7rG8HH1F6s6UWdVXps09cFOgoCxePYgoDHAHPY /HID7oDEtqL9zKkwHFG1xjHYdloSmu7UCh29GRHkVM8J9a+KetjbHmoErvPfJsEx BboAyJDA1ISasJYxvYqvc2mWYzUgvcDfzTTUy+RRfcLaLXnLe4zx/xBgInAfzKNe JNOcGUY5hemuf6yeAAjS0/uBK1y/HfM5 -----END CERTIFICATE-----Generated at Sat May 31 16:31:22 2025 by rpki-client