$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: 4hER8DV2q5y06L/VYqizGWbXSxIntbiUjdiLI3CAKqY= Subject key identifier: 04:94:CB:6B:2A:AC:63:6D:DE:FE:69:67:95:82:30:C8:D7:A3:EF:3B Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 0343 Signing time: Sat 17 May 2025 01:20:37 +0000 Manifest this update: Sat 17 May 2025 01:20:36 +0000 Manifest next update: Sat 24 May 2025 01:20:36 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: Suvtg/oVe3LmYR29h9WUvxbaAqr4KOzie+2Axuo6/uo=) 2: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: UBiYNqcmtBfIzuh2rKChQRqBKv4o6kiL3PCKwJHHiWM=) 3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: 5vOwA9yYve8Rd0veqkKYknGLc6ONCvBt3X45gfOUijw=) 4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: SPcUKAYBAtziUJsb1+HLmMDC9dz+I+2POCJimexdaR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: May 17 01:20:36 2025 GMT Not After : May 24 01:20:36 2025 GMT Subject: CN=6827e465-cc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:16:96:a8:be:ed:33:d3:1a:c5:4d:ea:90: 7e:f2:c8:a2:01:2c:f0:9d:55:4d:d7:ba:3d:59:cb: 98:8d:a6:15:f0:17:50:d9:99:0b:8b:14:b8:3c:52: 0b:fb:82:47:9e:c0:ea:1f:12:99:21:20:91:11:ee: 93:74:fe:0f:04:31:71:83:95:b5:76:95:63:60:15: 4c:fc:3a:d0:59:2a:9c:87:5a:f4:5c:a5:f8:4d:28: cf:c2:77:2b:1d:9c:a6:92:69:85:a0:97:7d:a4:67: dd:36:ea:a6:b7:e7:e1:7a:6a:3a:44:d3:3c:2d:e1: 27:71:4d:e0:d7:cb:de:cc:2a:4f:0c:e9:4c:7c:76: 5e:f8:6f:56:0f:e5:e7:60:dc:45:f7:0b:3d:b6:8f: ed:1b:48:d8:f1:f9:a1:a4:d0:11:67:98:9b:56:6c: 67:8c:1e:ba:41:16:fd:7c:be:c8:c4:9b:5e:d0:c1: f7:93:01:38:09:01:41:91:2a:a4:de:9a:72:53:1f: ae:02:e5:e4:85:cd:f8:0d:d7:ef:a7:a1:71:6a:45: 20:11:99:0c:48:8a:aa:07:e6:ab:06:71:06:ac:69: a2:98:11:26:b9:d4:99:36:27:3a:31:1c:06:16:82: dd:f9:7e:c0:82:6f:29:5e:e3:da:19:b4:41:c8:05: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:CB:6B:2A:AC:63:6D:DE:FE:69:67:95:82:30:C8:D7:A3:EF:3B X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:41:fe:8a:aa:56:98:62:4e:fe:ec:60:5b:13:37:ee:5b:cf: 85:ea:e7:a3:c1:45:6c:f4:cc:2c:6d:cc:ab:1f:e6:f5:9f:6f: ae:dc:ba:42:9f:b3:7d:c9:dd:67:c7:ae:8f:60:49:4a:7b:7f: fb:ec:75:e1:8c:18:dd:e6:ea:aa:b1:12:36:31:73:64:5c:d5: b5:35:dd:b9:80:56:a3:ba:a9:42:8c:67:84:66:57:62:14:a1: 5a:5e:67:d7:82:66:21:b6:bf:dd:99:93:9c:93:43:29:fb:96: dc:46:ad:8b:19:aa:ce:90:d1:72:d4:2c:38:10:78:bd:a5:51: cc:66:8d:09:52:68:f9:38:52:05:f5:dd:f9:5a:58:ac:11:81: 13:cf:27:60:4d:8d:f8:2f:98:fe:c6:4b:42:fe:00:1b:3f:29: 7c:ae:7e:aa:b5:57:8b:3b:06:36:e6:12:d5:c9:98:ce:0b:36: 32:7f:ea:3c:d4:09:de:2b:3c:44:4e:1f:00:dc:e2:1d:fd:8a: 8d:0d:23:36:ca:67:0a:20:3b:5a:83:ef:07:1e:7f:ef:4e:f1: eb:0f:8d:c3:06:a8:78:62:f5:b8:e9:21:5f:6d:cf:2a:d5:ea: ca:56:e3:35:11:5d:6e:8d:30:12:1b:a6:13:cb:ae:f6:6b:47: 1d:87:60:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjUwNTE3MDEyMDM2WhcNMjUwNTI0MDEyMDM2WjAYMRYwFAYD VQQDEw02ODI3ZTQ2NS1jYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvwWlqi+7TPTGsVN6pB+8siiASzwnVVN17o9WcuYjaYV8BdQ2ZkLixS4PFIL +4JHnsDqHxKZISCREe6TdP4PBDFxg5W1dpVjYBVM/DrQWSqch1r0XKX4TSjPwncr HZymkmmFoJd9pGfdNuqmt+fhemo6RNM8LeEncU3g18vezCpPDOlMfHZe+G9WD+Xn YNxF9ws9to/tG0jY8fmhpNARZ5ibVmxnjB66QRb9fL7IxJte0MH3kwE4CQFBkSqk 3ppyUx+uAuXkhc34Ddfvp6FxakUgEZkMSIqqB+arBnEGrGmimBEmudSZNic6MRwG FoLd+X7Agm8pXuPaGbRByAVyNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASUy2sq rGNt3v5pZ5WCMMjXo+87MB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Qf6KqlaYYk7+7GBbEzfuW8+F6uejwUVs9MwsbcyrH+b1n2+u3LpC n7N9yd1nx66PYElKe3/77HXhjBjd5uqqsRI2MXNkXNW1Nd25gFajuqlCjGeEZldi FKFaXmfXgmYhtr/dmZOck0Mp+5bcRq2LGarOkNFy1Cw4EHi9pVHMZo0JUmj5OFIF 9d35WlisEYETzydgTY34L5j+xktC/gAbPyl8rn6qtVeLOwY25hLVyZjOCzYyf+o8 1AneKzxETh8A3OId/YqNDSM2ymcKIDtag+8HHn/vTvHrD43DBqh4YvW46SFfbc8q 1erKVuM1EV1ujTASG6YTy672a0cdh2CC -----END CERTIFICATE-----Generated at Sat May 17 15:39:28 2025 by rpki-client