$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: cLn0wgRHG+5vMkeIHjCGspbhU++d8iuH/8nKZ0dGDv8= Subject key identifier: F9:BA:AC:0F:4F:AA:C2:11:1C:64:39:EE:30:9C:73:89:51:AF:21:F4 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 01D9 Signing time: Thu 15 May 2025 02:24:08 +0000 Manifest this update: Thu 15 May 2025 02:24:08 +0000 Manifest next update: Thu 22 May 2025 02:24:08 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: U4NCVsFN+aElxuhzmUb+zT/6l7YrDFCJrRHem8VTjJk=) 2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 3: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 4: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: cfEKqO3Kkr1IOuK1m9tr5GbLcR8ThlytGN+8R5F5cKc=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: May 15 02:24:08 2025 GMT Not After : May 22 02:24:08 2025 GMT Subject: CN=68255048-5a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:71:9f:07:10:96:5a:9a:65:fd:c6:18:f5: dc:73:8f:fd:2e:19:5f:a6:1b:24:5a:44:79:e4:78: 57:ea:0c:6c:8d:a3:85:5e:95:30:7b:84:bb:15:67: 74:7f:9d:2e:42:01:83:fa:7b:32:93:31:22:7e:ee: 59:ab:0a:24:11:43:ef:ef:3d:99:6a:48:5a:cc:63: a2:21:03:1e:84:f5:c8:3c:43:59:cc:ff:85:4e:0b: a2:2d:2d:31:b0:e2:a1:59:f5:a9:33:4d:74:7e:d2: b7:cc:10:77:fd:3e:e1:a0:18:68:f0:a3:54:d9:1e: 71:a5:b0:de:df:e1:97:db:95:b2:6e:8e:f2:84:9a: 04:a1:13:ec:e1:8b:cc:39:6a:36:6b:9d:1c:bb:10: b5:e9:dc:37:ae:39:98:98:10:04:3b:a7:45:dc:8b: 52:a0:77:a6:c2:44:8b:6b:37:cc:0f:d0:1a:aa:af: b1:d7:44:2f:10:5d:4a:3d:a9:60:bc:00:72:38:36: a8:d7:a4:16:a5:a8:dc:4d:24:31:1a:b1:22:54:e5: 25:97:c6:06:4a:59:05:ff:20:b6:e5:a7:b8:ed:97: 8e:18:10:2d:db:49:95:f5:b9:a1:01:fd:2a:71:bc: 12:c0:3e:98:c4:62:f6:13:88:26:15:74:19:f1:cd: 10:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BA:AC:0F:4F:AA:C2:11:1C:64:39:EE:30:9C:73:89:51:AF:21:F4 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:83:77:28:71:94:57:7e:4c:11:e4:27:01:b4:5f:f5:a1: c7:d2:c7:cc:c1:d0:eb:8f:f4:32:28:3c:cc:92:fd:41:c8:58: d7:39:48:36:37:aa:4b:e1:ff:c9:27:6b:b2:2f:ae:52:1e:f3: 24:d2:90:0f:8f:93:54:de:34:07:4a:6d:75:10:48:59:02:cf: 07:e2:80:0f:be:f6:d4:77:c2:1a:57:f3:4b:64:6a:ef:c7:1d: 51:f1:a4:95:e5:27:70:ca:1b:67:82:1a:9e:6f:dd:a5:8c:0c: b5:75:cc:37:23:73:f5:4e:60:36:e2:e8:90:93:50:86:a7:c5: 2d:2b:02:3b:20:52:22:d7:c0:19:1b:0b:59:36:dc:2c:7f:24: a0:da:a6:9f:f4:ab:4f:e1:e9:ad:f0:71:18:26:6d:ee:c6:e2: ef:9d:0a:62:22:c9:30:70:6b:42:06:33:45:0c:2d:37:3d:1f: ee:58:16:71:f5:3c:e6:92:02:3b:94:c8:ee:bc:da:2e:1b:fe: d4:eb:dc:27:60:e4:bf:70:52:6e:26:fa:75:f5:32:01:3a:63: e5:72:84:0f:dc:ed:91:53:38:57:5a:52:3f:a7:52:ff:72:f6: 1c:22:ca:b1:14:60:4b:83:31:0d:33:ac:ea:72:e3:32:16:ee: 94:94:cd:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNTE1MDIyNDA4WhcNMjUwNTIyMDIyNDA4WjAYMRYwFAYD VQQDEw02ODI1NTA0OC01YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnlxnwcQllqaZf3GGPXcc4/9LhlfphskWkR55HhX6gxsjaOFXpUwe4S7FWd0 f50uQgGD+nsykzEifu5ZqwokEUPv7z2ZakhazGOiIQMehPXIPENZzP+FTguiLS0x sOKhWfWpM010ftK3zBB3/T7hoBho8KNU2R5xpbDe3+GX25Wybo7yhJoEoRPs4YvM OWo2a50cuxC16dw3rjmYmBAEO6dF3ItSoHemwkSLazfMD9Aaqq+x10QvEF1KPalg vAByODao16QWpajcTSQxGrEiVOUll8YGSlkF/yC25ae47ZeOGBAt20mV9bmhAf0q cbwSwD6YxGL2E4gmFXQZ8c0QpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPm6rA9P qsIRHGQ57jCcc4lRryH0MB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwoN3KHGUV35MEeQnAbRf9aHH0sfMwdDrj/QyKDzMkv1ByFjXOUg2 N6pL4f/JJ2uyL65SHvMk0pAPj5NU3jQHSm11EEhZAs8H4oAPvvbUd8IaV/NLZGrv xx1R8aSV5Sdwyhtnghqeb92ljAy1dcw3I3P1TmA24uiQk1CGp8UtKwI7IFIi18AZ GwtZNtwsfySg2qaf9KtP4emt8HEYJm3uxuLvnQpiIskwcGtCBjNFDC03PR/uWBZx 9TzmkgI7lMjuvNouG/7U69wnYOS/cFJuJvp19TIBOmPlcoQP3O2RUzhXWlI/p1L/ cvYcIsqxFGBLgzENM6zqcuMyFu6UlM1t -----END CERTIFICATE-----Generated at Thu May 15 21:44:52 2025 by rpki-client