$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: NSWW5pediYmT0fIIxg63WR2+fptCnMFxyIYPDjMP+cA= Subject key identifier: D8:3E:FA:7D:15:21:A0:41:43:A2:C0:DC:FB:3B:B1:F5:AD:CF:09:B8 Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 0896 Signing time: Fri 30 May 2025 20:46:50 +0000 Manifest this update: Fri 30 May 2025 20:46:49 +0000 Manifest next update: Fri 06 Jun 2025 20:46:49 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: Jpn9b7DW0zR/YSzdyEXr5AFuOWt/y7/Jw2cyr6yR3Lc=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: pJopSUouAomRS7bBbLiExTbU2TzCWgsGbKH4r8LjMrI=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: NDjkgreHok48ic1Su9+HPGIeiSQ2Z7P+GcpTGnpZzHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: May 30 20:46:49 2025 GMT Not After : Jun 6 20:46:49 2025 GMT Subject: CN=683a1939-fd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:ee:cf:ff:ed:11:1d:7a:89:f2:56:48:3c: d5:4c:59:50:23:6f:39:2d:73:5e:37:6e:05:f6:47: 65:1a:8b:0a:5b:6b:1b:91:a4:a7:2b:b6:68:db:53: a4:23:af:ba:3f:08:03:97:f0:d7:0f:ec:2c:83:76: f5:ba:a4:d1:58:e5:d1:50:b0:f8:70:d6:68:0d:80: 3f:72:ae:51:72:fc:b1:7e:96:9c:dc:1d:7e:c8:1f: 75:f7:45:af:77:15:4c:0d:75:82:61:4c:f2:17:41: 3d:33:73:8c:a5:38:d5:5a:78:1a:66:d3:a1:f4:b3: bd:f5:38:ae:f3:6b:2c:11:a5:8f:7d:e9:20:d8:47: 53:6b:ba:b9:fc:7b:f7:05:8e:67:5d:bb:09:9e:68: 78:d7:54:9e:a9:66:e6:25:93:6a:7f:75:6a:3b:b1: d9:8f:61:fc:6c:b2:1f:95:4d:d0:f8:ce:06:f4:83: 10:cd:08:94:48:8a:ca:c1:3b:70:72:fc:ab:1a:a6: f2:c5:7c:01:59:e0:19:6a:d4:02:27:b6:45:0a:2d: 19:35:b4:bf:f1:21:4a:44:23:99:43:a7:fc:38:c7: dc:7a:ae:1d:22:ac:c0:44:a4:c4:af:2a:7f:8f:11: 63:99:b5:45:89:52:37:fd:4e:5d:22:7c:07:49:5b: f5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3E:FA:7D:15:21:A0:41:43:A2:C0:DC:FB:3B:B1:F5:AD:CF:09:B8 X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f5:9b:57:9a:51:04:3e:f8:0b:17:2f:4c:a2:cc:24:61:07: c7:c6:87:19:32:56:06:4d:fb:3e:1e:b3:c3:b0:c3:ba:94:bb: 34:a6:33:78:d4:b8:f9:48:99:73:55:76:e6:f2:1f:be:83:f0: b8:90:cb:45:08:5f:7c:fb:af:17:76:36:8a:86:4c:da:19:bd: 21:8e:f5:7b:d1:c8:06:91:0f:ce:19:9c:9e:ee:1c:65:27:19: f0:99:3e:f7:0b:4a:98:5a:9b:c6:af:e5:5e:23:f4:9c:56:44: 2c:67:3e:f1:d1:ad:de:bb:98:fc:98:f1:3c:7c:97:f4:1e:fe: 72:ca:03:9d:a7:6d:8f:e1:5a:b3:e3:3a:a0:94:fe:5c:04:5f: ba:3f:f0:66:98:30:59:52:22:54:e4:7d:45:58:46:b2:b9:f2: ba:ea:f9:e3:0a:e2:2f:ad:f8:7c:28:f3:29:67:25:11:2e:78: 12:b5:38:e4:7f:40:c0:d7:7f:ab:38:56:38:bf:fb:d9:83:37: 23:ef:ac:22:e3:dd:b2:eb:89:13:67:33:a4:ab:52:dd:a0:ad: 74:c1:f3:84:8b:be:1a:86:97:61:a9:1a:c1:fb:f9:2c:aa:21: 25:ef:4e:e8:fd:69:51:75:7d:46:4f:a7:eb:31:6c:73:9c:b7: a4:9c:69:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUwNTMwMjA0NjQ5WhcNMjUwNjA2MjA0NjQ5WjAYMRYwFAYD VQQDEw02ODNhMTkzOS1mZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XXuz//tER16ifJWSDzVTFlQI285LXNeN24F9kdlGosKW2sbkaSnK7Zo21Ok I6+6PwgDl/DXD+wsg3b1uqTRWOXRULD4cNZoDYA/cq5Rcvyxfpac3B1+yB9190Wv dxVMDXWCYUzyF0E9M3OMpTjVWngaZtOh9LO99Tiu82ssEaWPfekg2EdTa7q5/Hv3 BY5nXbsJnmh411SeqWbmJZNqf3VqO7HZj2H8bLIflU3Q+M4G9IMQzQiUSIrKwTtw cvyrGqbyxXwBWeAZatQCJ7ZFCi0ZNbS/8SFKRCOZQ6f8OMfceq4dIqzARKTEryp/ jxFjmbVFiVI3/U5dInwHSVv1YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg++n0V IaBBQ6LA3Ps7sfWtzwm4MB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx9ZtXmlEEPvgLFy9MoswkYQfHxocZMlYGTfs+HrPDsMO6lLs0pjN4 1Lj5SJlzVXbm8h++g/C4kMtFCF98+68XdjaKhkzaGb0hjvV70cgGkQ/OGZye7hxl JxnwmT73C0qYWpvGr+VeI/ScVkQsZz7x0a3eu5j8mPE8fJf0Hv5yygOdp22P4Vqz 4zqglP5cBF+6P/BmmDBZUiJU5H1FWEayufK66vnjCuIvrfh8KPMpZyURLngStTjk f0DA13+rOFY4v/vZgzcj76wi492y64kTZzOkq1LdoK10wfOEi74ahpdhqRrB+/ks qiEl707o/WlRdX1GT6frMWxznLeknGlm -----END CERTIFICATE-----Generated at Sat May 31 16:30:30 2025 by rpki-client