$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json) Hash identifier: NB1mMJxUjw/L9pnzraGgusOcqVGg06wpsEY7TISARtY= Subject key identifier: CE:84:BD:BF:31:BC:B4:7C:0C:8B:41:0D:8F:91:02:63:73:AC:DC:88 Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 Certificate issuer: /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft Manifest number: 0187 Signing time: Sat 31 May 2025 03:51:50 +0000 Manifest this update: Sat 31 May 2025 03:51:49 +0000 Manifest next update: Sat 07 Jun 2025 03:51:49 +0000 Files and hashes: 1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: aYDw59y4CpFOqhsA9Jagn3IAhtvBthBJgi5bPzUMptU=) 2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: 7Nat9vEjm3uLFRu4zdaHZeOvfAimC/wAZ4j55cSSDsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Validity Not Before: May 31 03:51:49 2025 GMT Not After : Jun 7 03:51:49 2025 GMT Subject: CN=683a7cd5-f5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:18:24:4f:47:21:8e:5d:cc:c9:05:d2:92: 51:fc:50:c5:86:dd:45:a0:0f:ea:5b:59:8c:2d:43: 59:33:ad:27:43:4e:68:47:fe:16:1b:90:0c:b3:78: 01:07:42:52:d4:39:d3:44:65:60:84:49:e1:28:df: 37:c7:01:0b:4e:32:75:e7:e0:bf:a3:56:5c:36:26: 42:a8:3a:ad:b2:eb:9a:ff:76:d4:7b:38:f0:3d:51: 47:a3:06:e0:d3:2f:b0:a0:d0:4f:0f:f2:6c:39:e7: 9d:c9:35:2d:e8:c6:76:a4:2c:41:02:3d:ea:fb:fc: 25:38:fa:6f:da:06:dd:68:e1:15:1f:e3:ae:78:db: 5c:b1:65:ec:a4:cb:df:bf:d7:7f:89:95:40:b7:8b: b7:32:13:99:6d:34:a9:7a:f6:12:db:3b:9d:9e:63: eb:a9:c3:7d:33:fe:fe:88:04:e8:7e:66:82:70:99: 1e:8b:d8:17:c0:09:8a:8f:c4:0b:9c:c3:ba:25:f8: 0b:e9:51:22:1d:ab:3a:06:c8:47:91:c1:ab:80:f2: ce:fe:de:16:ee:96:40:63:1c:ba:3d:cc:a9:ee:af: 1e:f0:79:bb:aa:6b:da:1a:02:e5:a5:e9:2b:c7:e6: 05:da:61:9e:cf:3c:45:38:3f:86:37:44:fd:3d:2d: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:84:BD:BF:31:BC:B4:7C:0C:8B:41:0D:8F:91:02:63:73:AC:DC:88 X509v3 Authority Key Identifier: keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5f:34:17:6a:8a:dc:20:3e:a1:2a:3b:6a:5f:48:ab:7b:45: cd:45:42:41:f6:74:95:f2:3a:40:76:ae:0c:69:83:49:43:9b: 7f:ed:6f:2f:36:64:47:87:05:79:4c:fb:46:85:c1:67:cf:be: f0:aa:d9:05:37:fb:52:21:24:d7:9d:12:e2:61:9a:60:17:28: 31:a1:6b:83:07:be:bf:6a:56:93:7c:9c:3e:c4:4c:7f:f0:38: b7:f5:2d:e5:70:be:7d:3d:c2:2b:f6:cb:75:87:4f:92:3b:04: 21:bc:df:0a:8a:4d:36:83:27:95:16:75:47:c2:da:c2:9c:e2: 11:5e:52:03:a7:33:09:9e:62:5c:54:60:1e:ce:05:fd:b6:2c: d1:b2:7e:98:9a:73:f6:46:aa:66:bc:d8:f6:65:9e:31:12:55: b1:6f:e1:1a:79:4f:fa:97:33:03:81:d9:d7:60:79:78:7e:33: a2:5d:38:1a:92:d6:23:c4:86:46:32:f0:80:88:f9:10:15:56: 8a:01:ef:f5:c3:60:86:cb:00:64:ee:43:3f:b7:d2:8e:7d:da: b3:3f:4a:19:2f:d2:6f:99:34:8f:d2:e2:75:9b:1d:89:b5:23: d1:7e:e0:3b:77:c8:9f:76:9a:c3:42:d6:65:7f:38:26:30:33: 4d:24:f1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGQUYxMTAvBgNVBAUTKDFFODVBODYwRDYyRTI2MDc5MjMzQ0I3QTAxREIwQkFD QkIwMzY5QTYwHhcNMjUwNTMxMDM1MTQ5WhcNMjUwNjA3MDM1MTQ5WjAYMRYwFAYD VQQDEw02ODNhN2NkNS1mNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSwYJE9HIY5dzMkF0pJR/FDFht1FoA/qW1mMLUNZM60nQ05oR/4WG5AMs3gB B0JS1DnTRGVghEnhKN83xwELTjJ15+C/o1ZcNiZCqDqtsuua/3bUezjwPVFHowbg 0y+woNBPD/JsOeedyTUt6MZ2pCxBAj3q+/wlOPpv2gbdaOEVH+OueNtcsWXspMvf v9d/iZVAt4u3MhOZbTSpevYS2zudnmPrqcN9M/7+iATofmaCcJkei9gXwAmKj8QL nMO6JfgL6VEiHas6BshHkcGrgPLO/t4W7pZAYxy6Pcyp7q8e8Hm7qmvaGgLlpekr x+YF2mGezzxFOD+GN0T9PS08KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6Evb8x vLR8DItBDY+RAmNzrNyIMB8GA1UdIwQYMBaAFB6FqGDWLiYHkjPLegHbC6y7A2mm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0ZBRi9BOTBEMUI5NjQx NUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpnZVNNOHQ2QWRzTHJMc0Rh YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hvV29ZTll1SmdlU004dDZBZHNMckxzRGFhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0ZBRi9BOTBEMUI5NjQxNUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpn ZVNNOHQ2QWRzTHJMc0RhYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXzQXaorcID6hKjtqX0ire0XNRUJB9nSV8jpAdq4MaYNJQ5t/7W8v NmRHhwV5TPtGhcFnz77wqtkFN/tSISTXnRLiYZpgFygxoWuDB76/alaTfJw+xEx/ 8Di39S3lcL59PcIr9st1h0+SOwQhvN8Kik02gyeVFnVHwtrCnOIRXlIDpzMJnmJc VGAezgX9tizRsn6YmnP2RqpmvNj2ZZ4xElWxb+EaeU/6lzMDgdnXYHl4fjOiXTga ktYjxIZGMvCAiPkQFVaKAe/1w2CGywBk7kM/t9KOfdqzP0oZL9JvmTSP0uJ1mx2J tSPRfuA7d8ifdprDQtZlfzgmMDNNJPET -----END CERTIFICATE-----Generated at Sat May 31 17:23:39 2025 by rpki-client