$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: OtOLW8OuPLwUzb8voHdOZ9H46oYkMNqAuAQWu/jVYao= Subject key identifier: 72:F9:D3:9B:C7:50:7F:A9:21:31:E1:A6:31:65:66:C8:AC:DF:37:69 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 02FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 02D8 Signing time: Sat 31 May 2025 01:36:25 +0000 Manifest this update: Sat 31 May 2025 01:36:25 +0000 Manifest next update: Sat 07 Jun 2025 01:36:25 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: +WnZsIstQ/zZPs7MqQhKhy2M8oXlXlWyMGeJek+1CcE=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: jre2vqEbptB4xJwOL59Axq+r7br5KETLkmyJEM9TLFk=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: AC9qL1JmCHG5dg0vjJNKY7KJG1pWhEheRkBl8uBeh7M=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 762 (0x2fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945, serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: May 31 01:36:25 2025 GMT Not After : Jun 7 01:36:25 2025 GMT Subject: CN=683a5d19-f2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:ef:d0:a5:90:00:1c:f8:bc:86:82:2f:36: ad:82:06:ab:16:3f:95:9c:57:41:5e:cc:6a:3c:56: d2:39:f1:9a:0a:a2:22:81:2c:60:61:1d:de:fd:80: 0d:5e:45:54:9a:ca:75:bc:53:30:bb:eb:c6:01:18: c0:fd:91:19:70:e0:fb:a5:e1:15:58:ba:af:64:c1: 9b:26:bd:19:f3:f2:66:e4:3a:e6:bf:fb:df:45:ac: bd:d0:42:9d:4e:70:70:57:60:d6:f3:e4:5c:2f:29: 36:8a:73:20:86:bf:40:8b:ea:22:89:1a:ca:57:57: 1a:9e:52:4e:bd:37:14:f0:55:be:d2:c1:1f:d9:5b: b4:79:df:16:9f:d5:45:a8:29:00:14:47:b5:66:17: 24:2d:a9:12:e4:d7:b5:93:dd:29:13:08:b8:fe:d4: 0b:f0:0f:ac:91:aa:dc:b2:68:93:b6:31:2f:c7:94: 6c:6b:30:59:32:ce:cd:a4:b4:dc:6c:6f:40:38:2b: 5c:0f:13:1f:7a:ea:35:53:5e:ae:7e:2b:28:c9:0f: f2:2a:fa:72:78:ec:90:d5:fd:49:e0:11:80:c3:a8: b0:7c:14:f8:3e:81:6a:a1:34:e1:cf:99:63:ed:e3: d5:8e:81:45:d0:69:d3:32:c2:0c:4a:f8:e4:39:b8: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F9:D3:9B:C7:50:7F:A9:21:31:E1:A6:31:65:66:C8:AC:DF:37:69 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3f:b8:f4:04:aa:42:ed:5a:f0:8a:36:c2:41:4e:1e:00:67: b4:3b:63:7d:99:4c:bf:c6:9b:0d:49:b8:34:40:73:69:4f:57: a2:2d:96:7f:56:cf:8f:a0:10:7b:fd:93:54:17:1c:cf:df:19: d6:dd:5a:62:45:7d:94:14:7c:10:a8:b7:7e:66:da:3f:00:53: 48:7a:41:00:91:09:1c:0b:01:6d:2b:86:40:05:a9:20:d3:79: f3:16:51:b3:aa:78:fe:2d:cf:f3:40:08:7b:58:84:72:94:9c: 33:c2:2b:58:d0:3c:40:85:0f:79:f8:0d:1e:80:58:84:c6:19: b8:29:ed:cd:f7:82:22:43:74:6d:51:d6:49:fa:18:a8:9b:c5: bc:8a:d9:cf:17:c2:8f:ab:86:4c:0f:4e:bb:40:77:a1:51:d3: da:b9:af:0a:bb:32:f8:2b:ae:77:dc:59:e5:c7:a7:39:36:23: d5:c3:6d:61:94:f4:25:10:6c:04:98:8e:b5:3b:f9:64:67:03: 18:34:60:8b:c1:15:b3:30:7f:64:fd:21:3b:21:58:eb:d8:d5: 87:46:bd:f9:3e:54:11:91:32:df:f0:84:0e:cb:25:01:5b:b6: cf:72:71:64:a3:de:36:dc:d7:6d:06:8d:ca:d7:07:05:ec:74: 91:1a:3b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNTMxMDEzNjI1WhcNMjUwNjA3MDEzNjI1WjAYMRYwFAYD VQQDEw02ODNhNWQxOS1mMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseXv0KWQABz4vIaCLzatggarFj+VnFdBXsxqPFbSOfGaCqIigSxgYR3e/YAN XkVUmsp1vFMwu+vGARjA/ZEZcOD7peEVWLqvZMGbJr0Z8/Jm5Drmv/vfRay90EKd TnBwV2DW8+RcLyk2inMghr9Ai+oiiRrKV1canlJOvTcU8FW+0sEf2Vu0ed8Wn9VF qCkAFEe1ZhckLakS5Ne1k90pEwi4/tQL8A+skarcsmiTtjEvx5RsazBZMs7NpLTc bG9AOCtcDxMfeuo1U16ufisoyQ/yKvpyeOyQ1f1J4BGAw6iwfBT4PoFqoTThz5lj 7ePVjoFF0GnTMsIMSvjkObgsUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL505vH UH+pITHhpjFlZsis3zdpMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsP7j0BKpC7VrwijbCQU4eAGe0O2N9mUy/xpsNSbg0QHNpT1eiLZZ/ Vs+PoBB7/ZNUFxzP3xnW3VpiRX2UFHwQqLd+Zto/AFNIekEAkQkcCwFtK4ZABakg 03nzFlGzqnj+Lc/zQAh7WIRylJwzwitY0DxAhQ95+A0egFiExhm4Ke3N94IiQ3Rt UdZJ+hiom8W8itnPF8KPq4ZMD067QHehUdPaua8KuzL4K6533Fnlx6c5NiPVw21h lPQlEGwEmI61O/lkZwMYNGCLwRWzMH9k/SE7IVjr2NWHRr35PlQRkTLf8IQOyyUB W7bPcnFko9423NdtBo3K1wcF7HSRGjvP -----END CERTIFICATE-----Generated at Sat May 31 17:16:10 2025 by rpki-client