$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: ngRMZDxajw8JSmlLJywEg1TA/5WXQUTrZVNESTW6tNU= Subject key identifier: 57:D9:D4:1C:65:00:9F:62:50:07:EA:16:A2:EC:AB:4B:D3:DA:FC:7B Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 027B Signing time: Sat 31 May 2025 01:52:15 +0000 Manifest this update: Sat 31 May 2025 01:52:15 +0000 Manifest next update: Sat 07 Jun 2025 01:52:15 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: dDNMxJmsNbO0xouKQU2iGKiaTqF3tQqbAAVZEWYpzFE=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: May 31 01:52:15 2025 GMT Not After : Jun 7 01:52:15 2025 GMT Subject: CN=683a60cf-9168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:7c:59:8c:75:d8:1f:99:e3:ab:a5:59:81: 63:78:38:5f:81:22:7e:77:a8:6f:55:c5:9b:48:1a: 73:68:41:e0:cd:95:91:6d:d4:35:24:f0:d0:c3:a4: e8:60:45:ea:2e:a0:79:11:1d:1a:0b:2b:e8:59:54: cd:b3:dc:6d:7d:0b:37:c8:88:df:1c:21:7a:d6:9d: fb:cf:0b:df:24:ef:7f:28:a4:99:e2:1c:08:62:be: c1:60:e7:16:6d:ea:27:a8:db:d2:d7:17:10:ef:8b: f3:3d:40:e2:48:ba:38:09:2b:fa:41:28:2d:53:d5: af:50:45:98:97:5a:2a:a3:73:79:2e:7a:10:19:f4: dd:dd:23:05:b8:19:47:16:2f:f9:0e:f2:4a:38:ab: 8e:59:4d:8d:0d:a1:b2:30:03:22:81:76:50:6f:a7: 9c:e0:01:fb:80:4b:ae:db:54:34:fc:0c:3f:e1:dc: b0:9b:d5:28:77:04:b3:99:4b:3d:76:0e:af:27:45: 23:a9:d6:0c:6e:4b:eb:59:3b:d4:95:d8:d9:4b:34: a1:cc:f4:a4:d5:d1:58:1c:85:c5:5a:66:17:9e:2e: b4:1e:93:c2:2d:03:ae:78:8b:ed:ed:0f:d4:2f:90: 78:fc:8a:d7:a0:ea:b9:48:28:0c:07:92:8d:28:e9: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D9:D4:1C:65:00:9F:62:50:07:EA:16:A2:EC:AB:4B:D3:DA:FC:7B X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b4:ed:24:18:93:4a:24:59:3c:bb:f7:39:e6:49:33:ac:77: 54:ea:d9:a8:70:bf:75:2c:cf:19:b5:9b:47:ad:af:f5:57:2d: 3e:8f:d5:1f:87:ab:ff:ab:96:76:20:5a:1c:2a:7c:6b:a6:ee: cd:31:14:f9:84:e3:5d:09:bf:59:5b:bd:75:d7:50:be:e3:27: 8b:b3:88:56:32:d6:98:33:68:7a:ee:67:ea:a8:4f:ef:af:d4: b2:b2:89:c9:d4:f7:69:ec:93:d1:73:75:b8:cd:d7:bd:28:d5: df:4c:7a:81:f0:17:fb:d5:25:87:e5:ab:00:fa:2b:ad:89:dd: 33:41:46:3e:26:39:ee:73:e9:da:4e:34:56:c2:ea:3d:1c:fa: b4:93:7c:32:85:f4:be:9e:35:77:b3:3b:ec:d2:0f:6d:9b:f9: 18:4c:e8:0e:ec:36:2a:a4:0a:45:47:7d:62:a6:2d:56:56:c0: 63:fc:5d:84:b7:cf:ee:e2:f6:fd:f4:83:e3:21:d1:76:b4:e7: 0a:3b:ce:5b:73:95:bf:76:12:98:5e:9f:c1:32:4c:98:3d:f8: bd:33:cf:ae:ec:8a:6b:ec:5a:90:e6:c2:75:68:0e:d6:31:78: 8a:0f:05:f4:73:07:72:73:88:19:ff:15:1d:b0:8f:a4:a4:df: 04:c5:f0:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwNTMxMDE1MjE1WhcNMjUwNjA3MDE1MjE1WjAYMRYwFAYD VQQDEw02ODNhNjBjZi05MTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5d8WYx12B+Z46ulWYFjeDhfgSJ+d6hvVcWbSBpzaEHgzZWRbdQ1JPDQw6To YEXqLqB5ER0aCyvoWVTNs9xtfQs3yIjfHCF61p37zwvfJO9/KKSZ4hwIYr7BYOcW beonqNvS1xcQ74vzPUDiSLo4CSv6QSgtU9WvUEWYl1oqo3N5LnoQGfTd3SMFuBlH Fi/5DvJKOKuOWU2NDaGyMAMigXZQb6ec4AH7gEuu21Q0/Aw/4dywm9UodwSzmUs9 dg6vJ0UjqdYMbkvrWTvUldjZSzShzPSk1dFYHIXFWmYXni60HpPCLQOueIvt7Q/U L5B4/IrXoOq5SCgMB5KNKOmY1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfZ1Bxl AJ9iUAfqFqLsq0vT2vx7MB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPtO0kGJNKJFk8u/c55kkzrHdU6tmocL91LM8ZtZtHra/1Vy0+j9Uf h6v/q5Z2IFocKnxrpu7NMRT5hONdCb9ZW71111C+4yeLs4hWMtaYM2h67mfqqE/v r9SysonJ1Pdp7JPRc3W4zde9KNXfTHqB8Bf71SWH5asA+iutid0zQUY+Jjnuc+na TjRWwuo9HPq0k3wyhfS+njV3szvs0g9tm/kYTOgO7DYqpApFR31ipi1WVsBj/F2E t8/u4vb99IPjIdF2tOcKO85bc5W/dhKYXp/BMkyYPfi9M8+u7Ipr7FqQ5sJ1aA7W MXiKDwX0cwdyc4gZ/xUdsI+kpN8ExfA7 -----END CERTIFICATE-----Generated at Sat May 31 17:10:20 2025 by rpki-client