$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: +uWsDv9Z9PybmNKP2g9G68viHCvU5w6TsAh8Iuyub2k= Subject key identifier: 23:29:7E:38:90:AB:A2:BC:96:56:EE:66:DD:7C:72:79:4E:6C:29:6B Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: E6 Signing time: Sat 31 May 2025 05:26:40 +0000 Manifest this update: Sat 31 May 2025 05:26:40 +0000 Manifest next update: Sat 07 Jun 2025 05:26:40 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: 0inBu4FS/9Z53nrJq5TG6YTk/ry7gbmn31Q66Ur5Siw=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: May 31 05:26:40 2025 GMT Not After : Jun 7 05:26:40 2025 GMT Subject: CN=683a9310-0342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:a2:6d:2a:7a:ab:40:d9:b6:3d:d1:d9:ba: 0c:ba:cf:12:7a:e4:06:07:32:85:af:5d:dc:c9:74: c9:14:5d:24:13:a7:5c:cc:b6:0d:b8:43:08:27:e5: b7:b1:49:6a:77:ee:f0:c8:1d:26:b9:93:be:09:37: f2:b4:2b:85:93:c1:42:09:25:c7:7a:76:cc:46:51: 90:e5:6c:01:2c:cf:dd:b4:c3:4e:24:ed:c3:ea:1e: 1e:58:d4:13:44:fd:ce:1a:6e:24:62:93:e0:7b:50: 7e:51:5a:45:c7:d3:41:4a:cb:3e:2e:50:d7:6d:aa: ab:7d:f6:81:82:36:e5:d3:8b:0d:66:fe:35:57:d0: a8:63:6b:a2:4f:1d:05:54:f4:59:08:9a:d2:63:8b: 9d:0b:5f:63:2c:d4:e4:fd:7e:4b:7c:62:21:4a:c3: 7f:10:56:c8:dc:b2:91:52:99:d7:e4:7b:a9:73:9f: e2:2b:bb:d5:8e:b9:3e:c0:d9:fc:8a:6f:f3:fd:0f: 52:13:2e:d0:86:95:eb:40:2f:3f:db:55:0f:f9:1f: 53:fb:7f:ce:94:81:48:18:12:b8:b5:f4:7d:18:43: 73:db:82:1f:cd:f0:84:60:9e:43:1f:03:76:ad:98: a0:8e:06:cc:03:5b:c1:20:18:84:fe:88:1c:c9:a1: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:29:7E:38:90:AB:A2:BC:96:56:EE:66:DD:7C:72:79:4E:6C:29:6B X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:81:31:f9:29:91:62:03:8e:8d:4b:b2:6b:d6:d8:0b:cb:9a: 16:0f:38:c5:26:0b:fb:e3:bf:a6:2c:1f:d7:a3:18:a5:78:3c: 0d:b7:86:25:d0:54:1d:b1:32:5e:a2:02:a2:34:29:e8:d9:c7: 19:ce:66:0e:ce:b7:0f:ac:a9:8f:ff:a0:0d:86:d2:05:b5:5a: e1:05:44:be:e4:2c:a8:11:78:f8:ab:6e:a7:6a:9b:6a:4e:58: df:e9:b9:a6:34:13:b7:04:e5:1c:75:a6:cb:98:82:87:84:68: 6c:de:67:7c:35:ec:ab:fc:19:62:17:47:cd:81:09:c6:33:72: df:a2:af:13:a7:a2:6d:11:14:9a:cc:c4:40:90:81:72:48:cf: df:32:81:8f:d6:ec:9f:6f:a6:24:9a:41:f5:c0:a2:51:bb:33: 77:38:2a:dd:16:3a:8f:ba:19:e0:8d:35:71:05:fb:c9:4a:c0: 5b:fd:05:61:57:da:ed:02:bb:d9:37:51:c4:45:8d:99:e2:1a: 11:29:cb:75:d5:0e:e1:4b:05:13:56:36:98:3f:a4:94:d9:bd: 44:6b:4b:33:18:1e:3c:23:c0:2a:a1:4f:8d:6f:3a:21:79:47: 69:d7:99:a5:27:e1:ce:0d:51:39:2e:24:e5:3a:9d:2d:48:f3: 83:4b:99:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjUwNTMxMDUyNjQwWhcNMjUwNjA3MDUyNjQwWjAYMRYwFAYD VQQDEw02ODNhOTMxMC0wMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsqibSp6q0DZtj3R2boMus8SeuQGBzKFr13cyXTJFF0kE6dczLYNuEMIJ+W3 sUlqd+7wyB0muZO+CTfytCuFk8FCCSXHenbMRlGQ5WwBLM/dtMNOJO3D6h4eWNQT RP3OGm4kYpPge1B+UVpFx9NBSss+LlDXbaqrffaBgjbl04sNZv41V9CoY2uiTx0F VPRZCJrSY4udC19jLNTk/X5LfGIhSsN/EFbI3LKRUpnX5Hupc5/iK7vVjrk+wNn8 im/z/Q9SEy7QhpXrQC8/21UP+R9T+3/OlIFIGBK4tfR9GENz24IfzfCEYJ5DHwN2 rZigjgbMA1vBIBiE/ogcyaGIQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMpfjiQ q6K8llbuZt18cnlObClrMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIgTH5KZFiA46NS7Jr1tgLy5oWDzjFJgv747+mLB/XoxileDwNt4Yl 0FQdsTJeogKiNCno2ccZzmYOzrcPrKmP/6ANhtIFtVrhBUS+5CyoEXj4q26naptq Tljf6bmmNBO3BOUcdabLmIKHhGhs3md8Neyr/BliF0fNgQnGM3Lfoq8Tp6JtERSa zMRAkIFySM/fMoGP1uyfb6YkmkH1wKJRuzN3OCrdFjqPuhngjTVxBfvJSsBb/QVh V9rtArvZN1HERY2Z4hoRKct11Q7hSwUTVjaYP6SU2b1Ea0szGB48I8AqoU+Nbzoh eUdp15mlJ+HODVE5LiTlOp0tSPODS5lo -----END CERTIFICATE-----Generated at Sat May 31 17:54:51 2025 by rpki-client