$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: m3EEJhnVtAiaJRAKX3yvXUTgZKkSonNFvDvy9QaaUCI= Subject key identifier: 0F:BF:B0:76:AF:05:48:B1:2B:5F:2A:CA:01:E4:50:FA:90:54:8A:6A Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 037F Signing time: Sun 11 May 2025 00:28:22 +0000 Manifest this update: Sun 11 May 2025 00:28:22 +0000 Manifest next update: Sun 18 May 2025 00:28:22 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: UAZ92g3aQ7fCKF2YhLio9VqBnNMuku9i7FcfGsle8Rk=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: May 11 00:28:22 2025 GMT Not After : May 18 00:28:22 2025 GMT Subject: CN=681fef26-fbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:28:fa:fd:a3:84:8d:19:49:48:86:bf:89: a5:40:4b:81:bb:8e:4c:97:55:53:9e:1e:12:a0:aa: ef:23:cc:54:a5:29:e4:a2:be:94:38:19:da:4f:92: a6:b9:e8:52:68:77:a2:58:a0:f6:f9:f9:4e:5a:f7: 5c:d4:d8:74:b9:b0:b4:d6:6c:29:5a:3e:b1:bf:05: f3:35:91:98:5f:c1:c5:f0:a0:42:e2:44:98:29:4e: 1b:b5:36:b3:75:c2:4c:7c:a2:e3:8e:55:46:46:70: 48:d8:85:2b:58:ba:26:1e:ca:00:5f:c6:08:a6:d4: 69:67:d3:9d:ec:5e:9c:54:5b:50:1c:0b:7a:b7:be: 2e:57:3d:42:d2:0a:d6:fd:4c:f2:e8:0a:9c:e0:fd: 77:09:69:2e:39:ad:24:52:91:ba:a9:45:dc:fc:7f: 74:8f:73:ae:e9:bc:a2:06:9b:02:6b:33:89:48:76: 78:51:e3:25:2e:63:c6:21:bb:d3:64:bf:f5:dd:e0: ec:f9:8f:a7:13:86:8f:02:f1:97:cf:75:eb:65:1e: 35:42:79:10:d0:7b:a9:fb:b5:57:2e:1f:dd:40:e7: 04:aa:96:d6:66:9a:41:4a:f9:57:2b:49:a3:6a:31: 9f:7a:4d:c5:5c:c7:1f:3e:28:a2:8d:c1:a6:43:c9: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BF:B0:76:AF:05:48:B1:2B:5F:2A:CA:01:E4:50:FA:90:54:8A:6A X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d4:9c:02:d6:40:a4:df:a0:db:a6:49:f9:b4:f5:8f:36:6d: 4c:ab:d1:d2:b1:73:d0:26:4b:10:f4:98:22:e7:70:2d:41:c0: 77:8e:bc:df:1d:52:d2:6f:12:6b:45:d7:38:69:d0:47:b8:9d: 12:7d:ea:de:0b:6b:03:54:36:d2:c1:40:c8:e0:a7:e9:fa:3e: de:fe:f7:c4:e1:7d:76:7b:61:f3:be:db:7a:dc:19:6f:56:0a: bd:8a:fc:b2:87:0c:05:e6:93:d4:ed:ac:8f:51:67:19:70:e1: 09:35:70:25:87:08:6e:6d:7a:8d:92:65:f9:36:7a:c2:43:9f: 8c:f1:d9:1c:37:69:44:c8:25:9e:5c:fc:1a:f3:84:53:0e:aa: 5e:42:a2:52:5c:52:ac:c9:ed:91:4e:d4:2e:d6:58:ee:02:fa: 33:f4:8b:4b:e3:a6:b4:1c:cb:06:06:3e:c2:08:7f:6e:05:b7: ec:57:7b:6d:76:86:2b:a0:ab:fa:ee:dd:99:a3:7a:0e:f4:73: 55:52:7f:68:eb:74:50:34:1d:d6:c8:8e:8f:65:d5:fc:de:63: 58:54:de:b6:5d:43:7b:dc:d9:fc:bc:20:95:31:8f:e6:61:9c: de:3d:4b:39:e1:7f:0f:7f:c5:0c:17:ab:a1:26:41:aa:b8:8e: 1a:c5:13:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNTExMDAyODIyWhcNMjUwNTE4MDAyODIyWjAYMRYwFAYD VQQDEw02ODFmZWYyNi1mYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVUo+v2jhI0ZSUiGv4mlQEuBu45Ml1VTnh4SoKrvI8xUpSnkor6UOBnaT5Km uehSaHeiWKD2+flOWvdc1Nh0ubC01mwpWj6xvwXzNZGYX8HF8KBC4kSYKU4btTaz dcJMfKLjjlVGRnBI2IUrWLomHsoAX8YIptRpZ9Od7F6cVFtQHAt6t74uVz1C0grW /Uzy6Aqc4P13CWkuOa0kUpG6qUXc/H90j3Ou6byiBpsCazOJSHZ4UeMlLmPGIbvT ZL/13eDs+Y+nE4aPAvGXz3XrZR41QnkQ0Hup+7VXLh/dQOcEqpbWZppBSvlXK0mj ajGfek3FXMcfPiiijcGmQ8mVGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+/sHav BUixK18qygHkUPqQVIpqMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV1JwC1kCk36Dbpkn5tPWPNm1Mq9HSsXPQJksQ9Jgi53AtQcB3jrzf HVLSbxJrRdc4adBHuJ0SfereC2sDVDbSwUDI4Kfp+j7e/vfE4X12e2Hzvtt63Blv Vgq9ivyyhwwF5pPU7ayPUWcZcOEJNXAlhwhubXqNkmX5NnrCQ5+M8dkcN2lEyCWe XPwa84RTDqpeQqJSXFKsye2RTtQu1ljuAvoz9ItL46a0HMsGBj7CCH9uBbfsV3tt doYroKv67t2Zo3oO9HNVUn9o63RQNB3WyI6PZdX83mNYVN62XUN73Nn8vCCVMY/m YZzePUs54X8Pf8UMF6uhJkGquI4axRNE -----END CERTIFICATE-----Generated at Sun May 11 20:09:26 2025 by rpki-client