$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: MP5tXzEgIFjKIbmifV3C2WDTVDd8EABrSHXsXJDN/gA= Subject key identifier: 1F:B5:B0:3A:8B:61:3D:F5:F3:8E:D2:DE:B4:25:E9:3B:4B:2F:81:4D Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A22 Signing time: Wed 14 May 2025 19:54:51 +0000 Manifest this update: Wed 14 May 2025 19:54:51 +0000 Manifest next update: Wed 21 May 2025 19:54:51 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: 1vR3DRmyRLNF5oxpstkSkk6POC0UoRWlSB4/uDdr/pA=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: May 14 19:54:51 2025 GMT Not After : May 21 19:54:51 2025 GMT Subject: CN=6824f50b-acff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:36:02:e6:42:29:51:c1:13:34:7e:5d:fa:1b: d4:0a:73:18:77:d2:cc:e9:86:31:b5:65:53:08:c0: 2b:88:38:c3:5f:43:71:22:d6:ca:fd:cd:3c:df:a3: e1:cc:b9:46:57:8d:fe:95:f7:48:01:98:b2:39:ea: d8:0e:97:a0:90:77:95:c6:94:c5:d5:68:cf:c4:d9: 17:bf:6a:17:d8:b9:67:c7:af:34:6c:05:89:dd:64: 52:dc:0b:0f:63:f0:3b:45:a2:05:ed:31:08:77:ee: 47:83:4a:fd:c8:76:e6:e5:cd:03:db:51:77:7f:d7: 2d:cc:33:29:af:dd:3d:bf:6f:73:9d:1a:17:a4:be: 5a:8f:0a:85:e9:36:e8:87:c9:d8:aa:67:8d:f7:55: 4e:c3:98:4d:c8:ff:11:16:e8:b3:55:a7:a5:89:69: 20:95:43:a4:1f:cd:0d:75:62:28:fb:d4:bc:ed:4a: fb:08:38:d4:a3:b2:1a:22:e1:f1:0c:82:f4:05:43: 31:12:aa:64:05:ae:cb:66:e2:45:70:c7:d8:61:45: 98:2b:bc:d0:cc:ef:ab:eb:47:00:d2:25:cf:66:33: 5c:64:c0:42:45:e5:22:93:0c:61:e9:bb:a3:48:4f: 36:ae:d1:3b:62:a2:90:67:c5:cd:20:fe:0e:7a:95: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:B0:3A:8B:61:3D:F5:F3:8E:D2:DE:B4:25:E9:3B:4B:2F:81:4D X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:04:1f:ba:84:6b:e2:aa:88:01:92:42:97:0c:9a:35:aa:4f: 7d:ea:ee:36:4c:21:8f:64:ca:9d:4c:4b:7d:61:f8:d0:3d:1d: 32:d0:07:a7:8a:a3:2e:d0:11:51:f0:fa:41:c8:65:0e:80:91: 44:c6:62:a5:a7:7a:bb:70:24:f0:95:b3:2f:b9:c8:f7:21:76: fc:5f:56:58:b3:23:8f:94:a2:6f:9c:dc:67:2c:d9:4c:f7:8e: 3e:63:54:55:0b:38:b8:6f:ca:72:4c:e3:c4:97:f7:10:22:69: 3c:80:c3:5e:7a:43:e2:01:1a:75:88:67:35:8f:92:47:69:6f: 9e:e0:b7:1b:c6:eb:b5:41:94:3c:21:c9:21:e7:d6:5c:69:e1: 08:8d:fa:7e:e4:bb:10:c8:17:f8:8e:73:43:52:95:06:46:d7: 7d:dd:26:f3:27:da:1a:0b:50:78:9c:8e:6b:b2:b3:e6:a0:34: 7f:39:5e:63:4b:68:16:12:a6:ae:3a:c3:cf:13:be:14:f7:ce: 2a:b5:92:e1:ff:0c:ea:cc:22:b5:bf:9a:1c:0a:10:90:83:96: c9:f6:f3:1b:4b:f9:af:2c:c3:53:13:c9:00:d8:ab:95:4b:4c: bc:41:a3:d2:a6:91:39:ef:b3:45:f9:6f:85:8f:b8:81:e5:f6: 8f:c7:fa:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUwNTE0MTk1NDUxWhcNMjUwNTIxMTk1NDUxWjAYMRYwFAYD VQQDEw02ODI0ZjUwYi1hY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TYC5kIpUcETNH5d+hvUCnMYd9LM6YYxtWVTCMAriDjDX0NxItbK/c0836Ph zLlGV43+lfdIAZiyOerYDpegkHeVxpTF1WjPxNkXv2oX2Llnx680bAWJ3WRS3AsP Y/A7RaIF7TEId+5Hg0r9yHbm5c0D21F3f9ctzDMpr909v29znRoXpL5ajwqF6Tbo h8nYqmeN91VOw5hNyP8RFuizVaeliWkglUOkH80NdWIo+9S87Ur7CDjUo7IaIuHx DIL0BUMxEqpkBa7LZuJFcMfYYUWYK7zQzO+r60cA0iXPZjNcZMBCReUikwxh6buj SE82rtE7YqKQZ8XNIP4OepXRzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+1sDqL YT31847S3rQl6TtLL4FNMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaBB+6hGviqogBkkKXDJo1qk996u42TCGPZMqdTEt9YfjQPR0y0Aen iqMu0BFR8PpByGUOgJFExmKlp3q7cCTwlbMvucj3IXb8X1ZYsyOPlKJvnNxnLNlM 944+Y1RVCzi4b8pyTOPEl/cQImk8gMNeekPiARp1iGc1j5JHaW+e4Lcbxuu1QZQ8 Ickh59ZcaeEIjfp+5LsQyBf4jnNDUpUGRtd93SbzJ9oaC1B4nI5rsrPmoDR/OV5j S2gWEqauOsPPE74U984qtZLh/wzqzCK1v5ocChCQg5bJ9vMbS/mvLMNTE8kA2KuV S0y8QaPSppE577NF+W+Fj7iB5faPx/qt -----END CERTIFICATE-----Generated at Fri May 16 17:53:45 2025 by rpki-client