$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: uIk8560YmZ/7NYF5Tto1oc1tCJxuuUWBh8RsOdKpXRc= Subject key identifier: 54:4D:3D:15:23:91:89:A9:84:EE:B5:30:07:95:AF:60:07:FC:B5:2D Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 018A Signing time: Sat 31 May 2025 03:24:12 +0000 Manifest this update: Sat 31 May 2025 03:24:12 +0000 Manifest next update: Sat 07 Jun 2025 03:24:11 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: aWSgKfRHhyfJvRLLLGUXdCH5NPhahy5us7kXvEBPt3o=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: mfE8FVHaGAKjd3z9L57ng4sztMrGr2OeILKa3QTIK7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: May 31 03:24:12 2025 GMT Not After : Jun 7 03:24:11 2025 GMT Subject: CN=683a765c-43be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b7:81:94:5c:c2:c1:19:2a:19:bf:ba:cd:36: 52:0f:52:20:58:39:05:32:24:ec:5f:fb:a5:d1:f4: ef:1f:7c:82:2d:90:e2:5a:3b:83:74:f2:1f:5d:df: 17:b5:4c:3e:da:72:95:50:9b:b1:1e:c8:1b:e2:d7: f5:29:d2:58:17:7a:55:50:c4:d3:64:42:b9:b6:38: 89:d0:a2:46:47:0c:5a:17:26:b4:87:05:56:aa:d5: d7:df:72:a6:7b:68:f3:ff:9a:bb:3b:79:2a:0a:cd: e7:3b:43:74:bf:84:67:59:a2:82:03:d1:e5:37:7c: 74:11:a4:02:d4:13:2b:a1:74:47:78:11:75:3c:0e: a1:39:f3:d8:e4:f2:a7:f0:74:49:fc:2b:58:1e:6c: 83:30:04:0e:d4:af:ec:b7:f8:ec:87:6d:67:60:aa: 2e:74:df:8f:6c:2c:77:6b:0b:50:e5:f9:20:89:d7: 8c:ce:73:24:f0:88:b2:6e:6a:16:83:16:13:68:1f: 23:e1:2f:8f:3d:53:06:92:fe:c5:53:1b:f5:8d:f1: 4a:eb:06:a3:39:db:13:d6:e7:96:65:e3:fe:a2:95: 84:6c:89:a7:06:e1:73:ae:a3:b0:08:bb:a9:73:56: ba:ae:76:e2:f9:a5:bb:b3:05:91:d0:c1:07:41:43: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4D:3D:15:23:91:89:A9:84:EE:B5:30:07:95:AF:60:07:FC:B5:2D X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f0:f3:27:e5:a0:fc:30:98:0f:08:e1:c5:c6:19:6a:09:bd: 47:11:40:c2:dc:69:1d:0c:cf:a5:ad:bb:f0:54:e5:15:2c:99: 3e:64:e3:93:b4:0b:20:6b:9c:1b:7e:16:77:88:22:2f:87:6e: 4a:b2:cc:37:a4:7e:6f:4d:6a:46:c5:c8:3a:e0:35:e7:ee:1c: e9:56:20:6d:c4:aa:78:37:91:94:24:85:39:ae:69:b6:e5:49: 79:e3:a5:3f:ea:de:51:6c:1f:70:ef:08:0f:03:94:80:d5:cc: fc:b0:c7:ab:f1:a2:f0:35:2f:8b:45:26:83:4d:84:17:62:37: 37:b7:7f:ac:df:aa:3a:94:15:03:6b:57:cb:c9:a0:46:45:d5: f3:7e:81:e3:b6:2a:da:c0:c9:b1:4f:fd:dd:96:5e:c1:b9:a3: e9:88:0d:c9:2a:9c:25:73:1e:d9:47:3e:70:50:96:10:e2:a4: aa:61:d2:4d:b2:ab:b2:95:b2:23:46:df:5a:4d:9b:09:e6:6e: f7:55:25:16:bf:3d:eb:d5:1e:08:4d:46:ff:3e:72:73:33:84: 43:75:a2:9d:bb:19:bd:dd:de:9f:d8:7f:58:29:fb:75:84:f9: e8:dd:8f:a9:63:85:6a:bb:d5:e0:e7:d8:0c:41:f3:dd:39:28: 6b:6d:0c:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUwNTMxMDMyNDEyWhcNMjUwNjA3MDMyNDExWjAYMRYwFAYD VQQDEw02ODNhNzY1Yy00M2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LeBlFzCwRkqGb+6zTZSD1IgWDkFMiTsX/ul0fTvH3yCLZDiWjuDdPIfXd8X tUw+2nKVUJuxHsgb4tf1KdJYF3pVUMTTZEK5tjiJ0KJGRwxaFya0hwVWqtXX33Km e2jz/5q7O3kqCs3nO0N0v4RnWaKCA9HlN3x0EaQC1BMroXRHeBF1PA6hOfPY5PKn 8HRJ/CtYHmyDMAQO1K/st/jsh21nYKoudN+PbCx3awtQ5fkgideMznMk8IiybmoW gxYTaB8j4S+PPVMGkv7FUxv1jfFK6wajOdsT1ueWZeP+opWEbImnBuFzrqOwCLup c1a6rnbi+aW7swWR0MEHQUMo0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRNPRUj kYmphO61MAeVr2AH/LUtMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD8PMn5aD8MJgPCOHFxhlqCb1HEUDC3GkdDM+lrbvwVOUVLJk+ZOOT tAsga5wbfhZ3iCIvh25Kssw3pH5vTWpGxcg64DXn7hzpViBtxKp4N5GUJIU5rmm2 5Ul546U/6t5RbB9w7wgPA5SA1cz8sMer8aLwNS+LRSaDTYQXYjc3t3+s36o6lBUD a1fLyaBGRdXzfoHjtirawMmxT/3dll7BuaPpiA3JKpwlcx7ZRz5wUJYQ4qSqYdJN squylbIjRt9aTZsJ5m73VSUWvz3r1R4ITUb/PnJzM4RDdaKduxm93d6f2H9YKft1 hPno3Y+pY4Vqu9Xg59gMQfPdOShrbQys -----END CERTIFICATE-----Generated at Sat May 31 17:08:53 2025 by rpki-client