$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: ziHqgIKC9aXI6pVC5iQurOpTnXCUpPdvfxalb1H5v+U= Subject key identifier: 68:0A:D8:86:14:44:25:81:CB:5A:04:3D:11:7E:58:AB:77:A3:76:81 Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 84 Signing time: Tue 13 May 2025 05:53:52 +0000 Manifest this update: Tue 13 May 2025 05:53:51 +0000 Manifest next update: Tue 20 May 2025 05:53:51 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: nvPWRqu6AMQYLgPxpkzFp0/gqlS5fQlccpfzAc+QAXw=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: May 13 05:53:51 2025 GMT Not After : May 20 05:53:51 2025 GMT Subject: CN=6822de6f-4834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:32:eb:9e:83:43:68:f3:28:f9:e9:57:f9: 91:e3:73:18:a9:48:3c:b8:6d:e5:f9:0a:78:ba:cc: 97:d6:cc:fa:3a:a7:76:7d:86:7f:4e:64:1e:0f:72: 0f:fc:25:d2:48:55:71:9a:93:55:02:17:16:e9:c5: ba:20:c8:24:2b:1f:53:1f:ec:49:cf:64:a5:f5:ff: f9:56:b0:cc:6e:c3:fb:59:4a:40:e3:20:3c:be:34: 12:a0:81:c0:b7:de:14:9d:fa:90:c1:1f:b6:20:42: 09:45:d3:33:d4:b1:3b:84:70:89:46:39:06:8e:91: 81:ab:22:86:02:a8:a5:f1:55:af:38:b2:39:08:80: 3c:e1:6e:8e:12:6e:e8:bb:f9:5b:5e:5a:56:61:70: 7f:c8:1f:f7:b1:2f:c5:9b:1f:a0:eb:7e:a8:ee:e6: b0:4f:38:3b:ed:9b:25:55:aa:62:2c:03:00:ab:f2: f9:b6:02:fd:f1:5f:9b:78:94:66:e8:60:f0:3b:d4: b5:60:2a:2f:65:da:33:0b:51:e2:82:38:80:ab:fc: b9:eb:2a:68:2b:31:97:d6:7e:7c:7e:50:4e:6a:66: 17:63:a6:40:2c:ce:1c:07:3e:ba:50:6d:a0:5f:99: 35:78:fd:14:ef:42:20:6f:37:2e:49:78:dd:93:fb: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:D8:86:14:44:25:81:CB:5A:04:3D:11:7E:58:AB:77:A3:76:81 X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:68:17:f1:b6:c1:82:a5:24:31:40:9a:6d:30:63:d1:6a:25: c0:40:15:b3:bd:77:40:aa:29:13:a0:83:4d:6b:59:7e:01:fb: 8c:4f:92:bd:80:5c:a3:81:70:2c:77:60:5e:1f:f3:2b:eb:95: 01:cd:61:3d:89:00:d2:51:19:93:0f:a9:9e:52:cc:47:2e:64: 29:7a:4e:d5:d4:b2:ec:5e:2e:ef:98:11:27:c5:da:b7:24:f8: a3:31:a2:54:b7:f3:d8:12:06:6e:4a:54:84:19:2d:5d:c0:c9: 9e:ea:9b:f0:75:b0:b5:eb:e2:bd:6a:dd:50:0f:7c:cb:7c:0a: d9:19:be:7c:b1:3d:a2:b4:b7:27:6c:43:42:25:52:a1:a7:25: 61:8a:23:0a:c5:f3:55:e0:46:4f:d4:9e:ad:4c:81:56:90:20: 7e:3f:a3:82:2c:37:5d:76:e4:7b:02:2d:eb:91:06:b1:de:5c: cc:ca:09:ba:49:ce:21:b2:66:a7:f7:6e:f2:2c:06:ec:3f:42: 27:b3:2f:06:19:89:b8:16:0f:4f:94:10:ac:43:0f:a8:49:9c: b3:c8:40:ef:7e:da:36:fe:18:d5:43:03:65:6f:c6:cc:9c:7f: be:c6:38:a0:db:42:6a:4e:f8:d4:c0:e2:62:33:5b:40:68:f0: 7f:74:40:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwNTEzMDU1MzUxWhcNMjUwNTIwMDU1MzUxWjAYMRYwFAYD VQQDEw02ODIyZGU2Zi00ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnMy656DQ2jzKPnpV/mR43MYqUg8uG3l+Qp4usyX1sz6Oqd2fYZ/TmQeD3IP /CXSSFVxmpNVAhcW6cW6IMgkKx9TH+xJz2Sl9f/5VrDMbsP7WUpA4yA8vjQSoIHA t94UnfqQwR+2IEIJRdMz1LE7hHCJRjkGjpGBqyKGAqil8VWvOLI5CIA84W6OEm7o u/lbXlpWYXB/yB/3sS/Fmx+g636o7uawTzg77ZslVapiLAMAq/L5tgL98V+beJRm 6GDwO9S1YCovZdozC1HigjiAq/y56ypoKzGX1n58flBOamYXY6ZALM4cBz66UG2g X5k1eP0U70IgbzcuSXjdk/seLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgK2IYU RCWBy1oEPRF+WKt3o3aBMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdaBfxtsGCpSQxQJptMGPRaiXAQBWzvXdAqikToINNa1l+AfuMT5K9 gFyjgXAsd2BeH/Mr65UBzWE9iQDSURmTD6meUsxHLmQpek7V1LLsXi7vmBEnxdq3 JPijMaJUt/PYEgZuSlSEGS1dwMme6pvwdbC16+K9at1QD3zLfArZGb58sT2itLcn bENCJVKhpyVhiiMKxfNV4EZP1J6tTIFWkCB+P6OCLDddduR7Ai3rkQax3lzMygm6 Sc4hsman927yLAbsP0Insy8GGYm4Fg9PlBCsQw+oSZyzyEDvfto2/hjVQwNlb8bM nH++xjig20JqTvjUwOJiM1tAaPB/dECN -----END CERTIFICATE-----Generated at Wed May 14 14:45:04 2025 by rpki-client