$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: gPuW8lhWkPOEJZO6S5kUBohDKu+hjFtfgfqBsmx6j/o= Subject key identifier: EF:D6:09:9D:89:EC:58:4C:7C:02:DC:CB:3E:53:25:72:DA:16:28:F1 Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0D17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0D0F Signing time: Wed 04 Jun 2025 18:03:00 +0000 Manifest this update: Wed 04 Jun 2025 18:02:59 +0000 Manifest next update: Wed 11 Jun 2025 18:02:59 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: LCclYUWGmjSEEtW375W2qC99vuqa60Q30tTAQ913wRM=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: iNF26PQV2QDxZAqXThwlTn9eA9VPYLTtDdkUTHz7O7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Validity Not Before: Jun 4 18:02:59 2025 GMT Not After : Jun 11 18:02:59 2025 GMT Subject: CN=68408a53-32d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:e6:ed:e4:b9:4f:82:10:f7:48:b0:a6:6a: a5:6a:60:60:f2:7c:62:63:68:55:0a:f7:c0:78:b2: ce:d9:6c:02:30:70:75:e2:d6:c7:c0:43:3b:82:7e: 0d:35:06:99:3b:6a:8e:c7:51:e6:a5:b6:67:31:e1: 21:d1:fd:88:d8:b4:18:e9:18:b1:1f:8f:71:93:3a: 9e:69:f8:63:35:96:00:d2:35:2b:25:a4:1a:1d:18: ab:b0:eb:d9:66:56:b0:75:e3:fe:43:17:02:3e:bf: 73:49:76:1d:9c:6f:54:47:bb:b9:9c:69:66:17:47: 0a:d4:a8:44:6d:ca:a1:ea:d2:6b:32:37:a4:01:93: 5f:69:ad:20:3d:83:61:49:94:71:8e:99:1a:eb:29: 30:28:30:20:55:84:2d:c1:11:c3:f8:a6:ed:a7:0b: 1f:c9:35:7f:2f:36:e1:47:ce:73:91:2a:19:89:4a: cd:f9:1c:c8:6e:98:e5:30:53:69:f8:e7:1b:4b:c4: 16:a9:a2:f4:2b:cb:5b:ec:7e:c2:54:2f:da:3d:89: b6:bb:9b:c5:00:8d:54:8f:6c:01:ef:6a:4b:7c:fa: 32:da:cd:9f:5e:4b:57:00:a3:35:c7:4e:1d:05:6e: 34:ca:2b:c2:77:30:d8:59:88:84:a2:3b:86:3e:f3: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:09:9D:89:EC:58:4C:7C:02:DC:CB:3E:53:25:72:DA:16:28:F1 X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:b5:41:26:31:bb:a2:80:08:6c:88:92:26:80:97:34:b7: bf:81:09:3d:1e:bb:fa:cf:d9:d2:80:08:f7:89:ee:bd:02:b2: b0:ad:06:b8:46:79:c3:5a:94:0d:e7:b1:b6:4c:eb:56:a2:b9: d7:22:a5:78:fa:be:61:8e:f6:37:e3:34:3f:b0:de:ee:92:47: 8c:c9:2b:e0:cc:b0:32:4e:69:e2:2c:71:37:bc:bc:7b:48:2f: 51:89:ff:bc:b1:b1:13:ef:1f:92:a3:cf:5b:ff:f0:16:40:0e: bd:7e:7c:36:d3:7c:14:06:78:4c:8d:22:5b:b6:26:bb:c8:f4: a4:7e:80:73:64:79:bd:e7:44:cd:b1:44:9c:1c:a3:92:e5:98: e3:52:b9:c0:62:f0:4a:74:12:39:b4:58:6a:1b:2f:c3:74:2b: 2d:ed:e0:84:fe:16:4a:79:f4:8f:1a:73:0b:2d:75:10:75:49: 70:61:2d:e7:03:f8:eb:9a:82:44:78:29:6e:6b:3b:fd:48:7e: 59:16:2f:ac:95:1e:1f:09:0d:66:ea:31:ad:46:21:4b:85:81: f5:09:6d:9b:03:53:4a:f4:82:bc:02:9e:e3:d0:4d:d4:b0:83: 8e:48:30:3e:6d:9d:d5:a7:03:a8:b5:30:10:df:1e:28:06:92: 2a:4a:55:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjUwNjA0MTgwMjU5WhcNMjUwNjExMTgwMjU5WjAYMRYwFAYD VQQDEw02ODQwOGE1My0zMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8Lm7eS5T4IQ90iwpmqlamBg8nxiY2hVCvfAeLLO2WwCMHB14tbHwEM7gn4N NQaZO2qOx1HmpbZnMeEh0f2I2LQY6RixH49xkzqeafhjNZYA0jUrJaQaHRirsOvZ ZlawdeP+QxcCPr9zSXYdnG9UR7u5nGlmF0cK1KhEbcqh6tJrMjekAZNfaa0gPYNh SZRxjpka6ykwKDAgVYQtwRHD+KbtpwsfyTV/LzbhR85zkSoZiUrN+RzIbpjlMFNp +OcbS8QWqaL0K8tb7H7CVC/aPYm2u5vFAI1Uj2wB72pLfPoy2s2fXktXAKM1x04d BW40yivCdzDYWYiEojuGPvP/HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/WCZ2J 7FhMfALcyz5TJXLaFijxMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxjLVBJjG7ooAIbIiSJoCXNLe/gQk9Hrv6z9nSgAj3ie69ArKwrQa4 RnnDWpQN57G2TOtWornXIqV4+r5hjvY34zQ/sN7ukkeMySvgzLAyTmniLHE3vLx7 SC9Rif+8sbET7x+So89b//AWQA69fnw203wUBnhMjSJbtia7yPSkfoBzZHm950TN sUScHKOS5ZjjUrnAYvBKdBI5tFhqGy/DdCst7eCE/hZKefSPGnMLLXUQdUlwYS3n A/jrmoJEeCluazv9SH5ZFi+slR4fCQ1m6jGtRiFLhYH1CW2bA1NK9IK8Ap7j0E3U sIOOSDA+bZ3VpwOotTAQ3x4oBpIqSlWY -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:50 2025 by rpki-client