$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: oJm7rx0KLF0r9bSYdjQuKgCXnXgxZaWvqtpCuvjqyXY= Subject key identifier: 6E:56:1E:EF:8B:79:C4:6C:93:F0:BA:A9:2D:5C:6A:D3:73:5F:BB:BD Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:54:22 +0000 Manifest this update: Sat 31 May 2025 05:54:21 +0000 Manifest next update: Sat 07 Jun 2025 05:54:21 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: t+Y/FFzC43ktIgCePjF6RUgb2UBjCW+A9Yzvl5caFOs=) 2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: May 31 05:54:21 2025 GMT Not After : Jun 7 05:54:21 2025 GMT Subject: CN=683a998d-7c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:4a:7c:67:aa:15:7c:77:ee:e4:08:10:56: 0b:22:f7:19:ce:6b:af:00:eb:40:91:7e:d7:70:94: 34:32:4f:82:c7:62:29:3e:1d:5a:96:d2:21:ec:52: 29:21:70:f3:c9:a2:6d:8d:69:70:fe:bc:ee:53:76: 02:c5:29:9b:bc:e7:c2:e6:f6:f1:f4:88:05:77:90: 75:c3:7b:28:a6:0c:79:38:66:25:61:8c:b7:e1:9f: a6:80:e3:a7:10:de:75:ed:50:43:c3:d8:b4:be:ee: 1e:0b:03:1e:7c:2d:10:b4:32:50:01:50:a3:a8:16: 97:34:64:af:02:30:2f:22:f6:0e:d7:6a:bd:8b:34: 52:24:60:ca:b0:2d:a5:11:8d:55:06:9c:a7:84:e4: e7:9d:5c:a7:1f:ab:6d:a7:81:fc:b3:33:e1:36:6e: f6:a4:80:aa:2a:d5:dc:d6:44:ad:a8:db:90:93:cd: 78:3c:44:a1:b9:22:ed:1b:be:bb:a7:fc:6e:41:8c: 0e:22:ca:15:ad:38:3f:60:f8:c8:bb:a4:17:8f:3e: 23:e4:0b:b8:21:0f:24:4f:ca:46:fa:a1:cc:34:5a: 05:cb:b0:bd:15:49:dc:59:e1:9d:b9:e0:50:e3:06: 6a:2e:de:57:9d:97:eb:45:51:3c:3d:70:f6:3b:04: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:56:1E:EF:8B:79:C4:6C:93:F0:BA:A9:2D:5C:6A:D3:73:5F:BB:BD X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:11:9d:1b:e5:f5:b1:84:a9:18:57:92:a7:28:ad:7d:04:d8: b8:a9:70:88:62:52:28:4b:c5:71:79:7a:e2:ec:7a:00:2e:ea: 0c:58:59:1e:f4:15:7c:78:67:a4:d3:ff:7f:7c:20:8c:25:92: a8:1e:26:af:00:e7:ba:f0:07:72:fb:71:6d:c6:90:82:ee:43: 65:6d:df:39:cb:6c:75:2f:85:07:37:bc:3b:37:d7:dd:60:fa: 29:a5:ff:2c:2d:81:e3:2d:6c:ed:df:7f:58:0c:35:42:91:46: c3:e7:5d:84:22:71:04:10:9d:46:ee:e7:85:cc:15:98:19:82: 38:f5:54:50:7f:81:dd:29:e3:9f:2a:ae:1e:e3:a2:29:03:ba: 65:f2:a5:1e:42:68:7d:b1:66:b7:62:91:9a:a9:bb:b7:ec:7d: 85:ca:c9:50:41:67:69:81:0d:05:2b:8c:cb:e0:70:0b:24:0e: 7a:7f:a9:d0:1a:cc:23:eb:ec:c0:fa:60:11:2c:49:65:6c:f7: 08:8b:3c:7d:8a:fe:d1:f6:ef:e9:0b:2d:4e:e3:33:59:ea:06: 10:0d:63:96:df:b8:c3:30:6b:56:3d:57:20:44:27:60:da:31: de:d9:de:a8:df:21:a9:9d:c2:de:3d:ad:e6:c8:97:2c:49:75: 51:1c:1c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUwNTMxMDU1NDIxWhcNMjUwNjA3MDU1NDIxWjAYMRYwFAYD VQQDEw02ODNhOTk4ZC03YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B5KfGeqFXx37uQIEFYLIvcZzmuvAOtAkX7XcJQ0Mk+Cx2IpPh1altIh7FIp IXDzyaJtjWlw/rzuU3YCxSmbvOfC5vbx9IgFd5B1w3sopgx5OGYlYYy34Z+mgOOn EN517VBDw9i0vu4eCwMefC0QtDJQAVCjqBaXNGSvAjAvIvYO12q9izRSJGDKsC2l EY1VBpynhOTnnVynH6ttp4H8szPhNm72pICqKtXc1kStqNuQk814PEShuSLtG767 p/xuQYwOIsoVrTg/YPjIu6QXjz4j5Au4IQ8kT8pG+qHMNFoFy7C9FUncWeGdueBQ 4wZqLt5XnZfrRVE8PXD2OwQPvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5WHu+L ecRsk/C6qS1catNzX7u9MB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMEZ0b5fWxhKkYV5KnKK19BNi4qXCIYlIoS8VxeXri7HoALuoMWFke 9BV8eGek0/9/fCCMJZKoHiavAOe68Ady+3FtxpCC7kNlbd85y2x1L4UHN7w7N9fd YPoppf8sLYHjLWzt339YDDVCkUbD512EInEEEJ1G7ueFzBWYGYI49VRQf4HdKeOf Kq4e46IpA7pl8qUeQmh9sWa3YpGaqbu37H2FyslQQWdpgQ0FK4zL4HALJA56f6nQ Gswj6+zA+mARLEllbPcIizx9iv7R9u/pCy1O4zNZ6gYQDWOW37jDMGtWPVcgRCdg 2jHe2d6o3yGpncLePa3myJcsSXVRHBwl -----END CERTIFICATE-----Generated at Sat May 31 16:59:25 2025 by rpki-client