$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: NKiF9kw77jtidnNLApWLTgQIEz/YYtWZGA2GF8FXp4Q= Subject key identifier: 4C:86:DA:78:90:50:1B:C2:54:A7:E2:06:37:E0:B6:F2:30:AC:88:B8 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 08 Signing time: Tue 03 Jun 2025 08:03:19 +0000 Manifest this update: Tue 03 Jun 2025 08:03:19 +0000 Manifest next update: Tue 10 Jun 2025 08:03:19 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: hiprQ4e3mYj/4Nk5W/w/EvJXKejb/YwNub1Pkh2c0Bo=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Jun 3 08:03:19 2025 GMT Not After : Jun 10 08:03:19 2025 GMT Subject: CN=683eac47-90fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:58:d9:37:98:96:89:3c:74:c5:ec:75:9e: 7e:9b:dd:d4:5f:ba:11:bb:a8:82:0a:0a:64:52:02: 1c:5a:a8:a2:41:1e:63:95:df:7f:d2:48:cb:7a:90: cd:bc:71:0f:f3:ee:15:de:fb:2a:40:a3:a5:17:93: f6:20:34:59:57:41:33:9d:60:c8:3b:05:a7:a2:54: 44:80:2d:5f:d5:16:b5:b5:5a:31:d6:8e:58:5c:ec: 7b:b0:1a:f1:1a:b3:4a:6e:f8:2c:5c:fe:21:4c:cf: f2:6c:9a:08:7d:d3:ce:fe:d7:1c:5a:1e:93:bb:0a: 8e:fd:58:4b:9e:d1:21:07:60:d4:25:16:2b:54:8e: 76:5d:0f:c3:fa:93:7b:64:5a:83:99:ca:e3:72:f5: 82:56:74:38:85:39:fa:4b:a9:c9:b5:53:60:da:05: dd:08:9c:f1:23:89:b9:13:63:80:d4:82:29:96:19: 31:99:86:e8:48:8f:15:7d:a5:6e:4b:c4:76:64:8a: 49:36:55:e8:d9:38:5c:14:46:0f:fd:30:17:aa:41: b3:b6:e7:a4:86:2c:8c:05:c2:6c:7e:1f:25:28:a8: 6c:bc:ef:cd:ae:24:c9:22:d7:13:51:53:34:98:4c: 79:6e:5c:70:69:d8:04:b3:d7:43:0f:4c:2a:f9:be: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:DA:78:90:50:1B:C2:54:A7:E2:06:37:E0:B6:F2:30:AC:88:B8 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:34:5d:e5:8a:30:a4:45:3a:2c:91:7a:8f:cd:20:da:1d:17: 13:6b:ee:72:d0:81:96:0b:34:7b:4f:1a:51:18:11:df:7f:34: b2:93:e9:24:b6:48:e9:95:4f:10:ad:8e:11:69:35:6b:ef:c9: c6:95:de:f2:e9:3e:22:65:16:7d:80:75:ad:be:ea:9e:57:f4: 27:f2:23:e9:38:b9:1a:17:7a:5f:06:a2:d6:7e:75:df:ae:84: 36:e5:e7:b0:22:f0:31:02:4d:9a:38:2a:98:93:54:7f:61:a9: 97:5e:5b:21:56:e2:0a:2b:47:55:09:85:bf:2d:a6:4f:49:14: 8d:71:ef:d6:9c:55:9f:07:55:2a:90:97:1c:38:4e:d0:e1:d7: ee:b7:af:b4:c4:dd:0c:44:50:b0:0e:12:2c:d9:ab:4a:98:49: 42:99:a3:98:20:63:1b:60:c3:ff:27:72:e4:40:9a:55:ff:98: bf:db:2d:d2:03:2d:72:10:67:39:1b:ab:75:7e:47:0a:05:4e: bd:82:2d:9e:3b:24:94:57:47:83:80:85:64:5b:33:85:ed:87: 9f:d7:da:7b:ce:ef:db:7d:f9:eb:5e:fa:8e:d9:d6:33:74:14: e2:61:ed:10:13:ff:6e:64:29:3b:f0:05:d9:d1:cd:51:59:ce: e1:2f:15:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA2MDMwODAzMTlaFw0yNTA2MTAwODAzMTlaMBgxFjAUBgNV BAMTDTY4M2VhYzQ3LTkwZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCMljZN5iWiTx0xex1nn6b3dRfuhG7qIIKCmRSAhxaqKJBHmOV33/SSMt6kM28 cQ/z7hXe+ypAo6UXk/YgNFlXQTOdYMg7BaeiVESALV/VFrW1WjHWjlhc7HuwGvEa s0pu+Cxc/iFMz/Jsmgh9087+1xxaHpO7Co79WEue0SEHYNQlFitUjnZdD8P6k3tk WoOZyuNy9YJWdDiFOfpLqcm1U2DaBd0InPEjibkTY4DUgimWGTGZhuhIjxV9pW5L xHZkikk2VejZOFwURg/9MBeqQbO256SGLIwFwmx+HyUoqGy8782uJMki1xNRUzSY THluXHBp2ASz10MPTCr5vmGLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTIbaeJBQ G8JUp+IGN+C28jCsiLgwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE80XeWKMKRFOiyReo/NINodFxNr7nLQgZYLNHtPGlEYEd9/NLKT6SS2 SOmVTxCtjhFpNWvvycaV3vLpPiJlFn2Ada2+6p5X9CfyI+k4uRoXel8GotZ+dd+u hDbl57Ai8DECTZo4KpiTVH9hqZdeWyFW4gorR1UJhb8tpk9JFI1x79acVZ8HVSqQ lxw4TtDh1+63r7TE3QxEULAOEizZq0qYSUKZo5ggYxtgw/8ncuRAmlX/mL/bLdID LXIQZzkbq3V+RwoFTr2CLZ47JJRXR4OAhWRbM4Xth5/X2nvO79t9+ete+o7Z1jN0 FOJh7RAT/25kKTvwBdnRzVFZzuEvFd8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:47:36 2025 by rpki-client