$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft File: 276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json) Hash identifier: NMFGan1e1Zreb/2ewFjsB0mB+6dRH6fNItpo0jijvYg= Subject key identifier: D4:C3:D9:AF:B7:14:BC:A1:AC:B0:57:61:A2:36:CB:2A:45:AD:8F:AF Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft Manifest number: 0758 Signing time: Wed 14 May 2025 21:42:44 +0000 Manifest this update: Wed 14 May 2025 21:42:44 +0000 Manifest next update: Wed 21 May 2025 21:42:44 +0000 Files and hashes: 1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: rmRbeMaV39NGmYC90YYp2m9rf33lsr10IilWUOtCxro=) 2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: di3lTW+SGjtdOdKQhu7ngXS2N/Oh8YrYx17MC5hYJgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Validity Not Before: May 14 21:42:44 2025 GMT Not After : May 21 21:42:44 2025 GMT Subject: CN=68250e54-834a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:a5:3a:a1:a6:19:28:ae:78:c2:07:a0:81: 76:18:04:8e:c5:38:c4:f2:c8:69:88:d7:66:6f:f1: 30:29:73:3e:b6:c5:b3:f9:30:75:48:fb:66:f5:92: ad:0e:19:f8:d1:44:74:e4:0c:cc:57:36:4c:9f:9f: 5a:63:f0:4a:5b:ea:5f:9f:da:4a:9c:60:b0:a8:c4: ab:d9:9b:b6:a4:e6:6b:59:f9:fa:c2:be:35:87:68: 3c:53:f6:e4:6b:d1:75:7c:59:58:3a:44:f3:da:c7: d8:f8:2c:7c:b3:94:89:65:e4:78:5d:2e:5e:41:6e: 73:4b:fa:3c:77:a2:78:96:51:7e:ac:c2:eb:ec:c2: 28:96:31:83:ff:3b:c5:9f:d5:54:a4:ad:d7:23:71: 8b:f3:96:8f:5a:e0:9c:13:1a:70:60:cf:7a:f4:10: c0:c7:2e:f4:b9:44:0d:72:7c:dd:ca:33:2a:bc:7f: 1c:67:bc:25:40:00:d2:67:ab:3c:00:14:47:f3:21: d3:45:97:ed:e4:5b:b9:b1:04:c0:ee:21:b2:cb:3d: 49:37:9b:ff:80:74:ff:c8:d7:58:2e:e3:cc:a7:f8: c7:36:eb:29:94:c6:c8:c2:5f:de:1b:b1:e8:01:97: ed:1f:4d:62:3c:95:5e:09:41:1f:92:05:66:ce:c9: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:D9:AF:B7:14:BC:A1:AC:B0:57:61:A2:36:CB:2A:45:AD:8F:AF X509v3 Authority Key Identifier: keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fc:0f:09:8e:80:d2:5d:ef:1a:9f:1c:08:96:79:98:9d:7e: 55:3c:7c:9d:3b:bb:9c:c9:c1:c1:66:77:e6:22:b1:33:f8:55: c7:4a:95:26:96:67:e9:7c:58:da:ed:fa:05:42:a2:ee:ac:77: 8f:ec:58:46:d6:90:de:c7:51:04:f0:99:d3:13:f8:6d:3f:29: 21:ab:9b:01:79:cc:6c:c6:98:b7:d6:1e:60:fb:c1:e9:ec:78: 72:9f:71:fc:87:82:a1:8c:2f:3d:16:3c:ad:ad:4e:38:eb:41: 3a:98:9d:69:c3:5f:f8:97:84:2e:b1:03:d8:ba:be:90:d9:65: 79:e6:3b:06:1d:a8:8d:96:16:d8:b0:d3:81:2b:ed:7d:3e:64: b6:7c:94:29:28:78:47:ce:61:47:31:f6:6a:c0:32:7b:18:c9: 28:49:55:7e:a6:39:2f:f7:c5:ed:c6:6d:ea:68:73:02:bb:ac: e2:03:3f:2a:99:05:2a:67:e4:a0:1a:c1:14:79:69:9f:1b:33: 45:0b:e6:83:a9:4f:1c:18:ef:d0:c3:0e:de:9f:8c:b4:77:4a: b7:c8:ef:64:b8:40:73:9a:e9:51:2c:3e:a4:83:7a:26:9e:9f: 3f:e2:bc:a1:3b:3a:57:a4:46:15:aa:7d:60:fb:36:6d:c9:99: d8:c8:e8:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1 QkU5ODFCRjAwHhcNMjUwNTE0MjE0MjQ0WhcNMjUwNTIxMjE0MjQ0WjAYMRYwFAYD VQQDEw02ODI1MGU1NC04MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3mlOqGmGSiueMIHoIF2GASOxTjE8shpiNdmb/EwKXM+tsWz+TB1SPtm9ZKt Dhn40UR05AzMVzZMn59aY/BKW+pfn9pKnGCwqMSr2Zu2pOZrWfn6wr41h2g8U/bk a9F1fFlYOkTz2sfY+Cx8s5SJZeR4XS5eQW5zS/o8d6J4llF+rMLr7MIoljGD/zvF n9VUpK3XI3GL85aPWuCcExpwYM969BDAxy70uUQNcnzdyjMqvH8cZ7wlQADSZ6s8 ABRH8yHTRZft5Fu5sQTA7iGyyz1JN5v/gHT/yNdYLuPMp/jHNusplMbIwl/eG7Ho AZftH01iPJVeCUEfkgVmzsk+yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTD2a+3 FLyhrLBXYaI2yypFrY+vMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAzQS85MjZCNDNFODIxOTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BU dmdXN1cyQWg5MVJiNllHX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8/A8JjoDSXe8anxwIlnmYnX5VPHydO7ucycHBZnfmIrEz+FXHSpUm lmfpfFja7foFQqLurHeP7FhG1pDex1EE8JnTE/htPykhq5sBecxsxpi31h5g+8Hp 7Hhyn3H8h4KhjC89FjytrU4460E6mJ1pw1/4l4QusQPYur6Q2WV55jsGHaiNlhbY sNOBK+19PmS2fJQpKHhHzmFHMfZqwDJ7GMkoSVV+pjkv98Xtxm3qaHMCu6ziAz8q mQUqZ+SgGsEUeWmfGzNFC+aDqU8cGO/Qww7en4y0d0q3yO9kuEBzmulRLD6kg3om np8/4ryhOzpXpEYVqn1g+zZtyZnYyOhY -----END CERTIFICATE-----Generated at Fri May 16 00:52:42 2025 by rpki-client