$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json) Hash identifier: 6x63K/ks6i/Vpik1Yij+PFPibOaq6fyYkNcNgpALtDQ= Subject key identifier: 7F:5E:0E:4D:31:ED:F8:4E:8E:AA:A3:22:97:21:D1:18:DD:93:AD:F6 Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft Manifest number: 04DE Signing time: Mon 12 May 2025 23:39:01 +0000 Manifest this update: Mon 12 May 2025 23:39:00 +0000 Manifest next update: Mon 19 May 2025 23:39:00 +0000 Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: kI3syBbpD012HVQXc8X50E/kV7t+HKe+r4tdxUwWsa4=) 2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=) 3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: May 12 23:39:00 2025 GMT Not After : May 19 23:39:00 2025 GMT Subject: CN=68228695-51c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:12:db:74:db:06:5c:b2:68:0c:b5:4a:4e: 8e:84:bb:7c:e9:5a:1e:52:f9:af:b4:63:70:1d:d5: 9f:27:e1:75:f8:73:33:19:1b:97:9b:08:7d:03:49: 58:8c:d0:55:ed:a8:f4:6d:c8:35:c5:87:92:96:e1: 49:c7:fa:b4:d4:32:da:1a:d8:16:17:91:54:85:52: 36:01:6b:d4:67:83:24:9f:84:cc:cb:c6:bc:d9:b9: 08:ae:0b:4c:58:69:e8:f7:03:7b:5b:8a:0e:c2:df: 5e:cc:42:37:86:17:1a:fa:e5:40:74:ba:dc:d4:6d: d2:79:60:17:b6:24:99:c4:48:f8:6c:12:2d:5b:4c: ca:e6:58:38:53:6a:f5:b4:8d:09:83:7f:2d:ab:62: 68:8a:80:d7:48:24:96:0c:6b:94:bb:57:a3:94:1f: 76:27:22:9a:da:51:7c:83:84:4b:a5:69:50:88:d3: a1:c6:93:f9:74:66:7f:2f:bd:07:31:0e:02:43:9c: c1:a3:f1:83:23:49:df:7c:74:34:7d:7c:1c:c2:c8: 22:db:a4:94:26:2b:42:f9:56:1a:ff:05:eb:81:09: ec:91:8b:b9:e0:82:e3:14:03:5e:cc:b8:6e:c1:5d: c3:b6:4e:c5:cf:7f:38:ce:d8:7d:f5:b2:23:2a:f3: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:0E:4D:31:ED:F8:4E:8E:AA:A3:22:97:21:D1:18:DD:93:AD:F6 X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:a4:cf:5a:c3:b1:09:84:9b:65:75:71:31:f3:58:0a:cc: 8a:b6:f2:f8:f0:af:80:ef:f2:6c:ad:44:ff:e1:31:77:14:82: 7d:0c:b0:3d:ab:ca:0d:dd:0d:fa:72:3e:77:3e:e1:84:c3:e1: b1:a2:f1:96:36:56:3c:d0:01:89:e1:22:82:a1:91:68:0e:90: e8:9f:9b:ab:3c:bd:7e:ad:e1:c1:09:94:b6:95:68:39:5d:eb: 0c:d6:f1:98:fe:5d:c8:df:b5:1a:ae:80:ac:bd:e0:70:a3:f6: 0c:3a:16:56:d2:f8:c4:a6:09:18:4e:ea:41:16:06:18:96:ab: 82:60:ba:3e:2b:49:60:7c:b0:22:fa:7b:da:b7:10:85:b3:ee: 4a:be:df:68:9b:2d:9b:0b:b4:5c:02:ff:9b:3f:b0:11:31:74: 66:07:6d:ce:d7:c1:66:65:e9:2c:2c:cb:f2:bd:6e:46:81:aa: 5c:bd:fd:b5:38:03:c2:eb:ec:2b:7f:09:7f:27:9e:60:01:32: b9:67:09:b6:b5:78:77:6e:c3:43:9d:fc:d4:56:8f:d3:69:2f: 8d:a7:a0:bc:37:c5:75:52:66:59:aa:cb:38:60:b5:10:a3:40: 81:40:e4:14:ad:52:74:c8:00:66:1a:94:f9:25:d3:60:1f:7c: 90:f5:1b:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUwNTEyMjMzOTAwWhcNMjUwNTE5MjMzOTAwWjAYMRYwFAYD VQQDEw02ODIyODY5NS01MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPUS23TbBlyyaAy1Sk6OhLt86VoeUvmvtGNwHdWfJ+F1+HMzGRuXmwh9A0lY jNBV7aj0bcg1xYeSluFJx/q01DLaGtgWF5FUhVI2AWvUZ4Mkn4TMy8a82bkIrgtM WGno9wN7W4oOwt9ezEI3hhca+uVAdLrc1G3SeWAXtiSZxEj4bBItW0zK5lg4U2r1 tI0Jg38tq2JoioDXSCSWDGuUu1ejlB92JyKa2lF8g4RLpWlQiNOhxpP5dGZ/L70H MQ4CQ5zBo/GDI0nffHQ0fXwcwsgi26SUJitC+VYa/wXrgQnskYu54ILjFANezLhu wV3Dtk7Fz384zth99bIjKvP3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9eDk0x 7fhOjqqjIpch0Rjdk632MB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJKTPWsOxCYSbZXVxMfNYCsyKtvL48K+A7/JsrUT/4TF3FIJ9DLA9 q8oN3Q36cj53PuGEw+GxovGWNlY80AGJ4SKCoZFoDpDon5urPL1+reHBCZS2lWg5 XesM1vGY/l3I37UaroCsveBwo/YMOhZW0vjEpgkYTupBFgYYlquCYLo+K0lgfLAi +nvatxCFs+5Kvt9omy2bC7RcAv+bP7ARMXRmB23O18FmZeksLMvyvW5Ggapcvf21 OAPC6+wrfwl/J55gATK5Zwm2tXh3bsNDnfzUVo/TaS+Np6C8N8V1UmZZqss4YLUQ o0CBQOQUrVJ0yABmGpT5JdNgH3yQ9RsQ -----END CERTIFICATE-----Generated at Tue May 13 19:39:58 2025 by rpki-client