$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: CkldS0UHUaBszlp76nysXGJEPZIrjaRUOyCmrGlNqyA= Subject key identifier: 39:7C:46:98:4D:CE:4E:B2:D1:4A:AF:11:03:F7:C3:AD:86:E6:96:B5 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 0193 Signing time: Tue 13 May 2025 02:44:38 +0000 Manifest this update: Tue 13 May 2025 02:44:37 +0000 Manifest next update: Tue 20 May 2025 02:44:37 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: y0jUt3G9lLgLGJlehXu8To2989T5oOnPpZUZp8JUFiw=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: wjMufEaDH/y4s6T5wRstNmQqRorcPZgCttuLv7sLSbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: May 13 02:44:37 2025 GMT Not After : May 20 02:44:37 2025 GMT Subject: CN=6822b216-d3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:d0:e6:52:0a:8b:83:48:3a:bf:0e:24:16: d9:cc:bf:fd:e8:d4:9d:14:34:a1:b2:d3:c6:a5:2d: ff:80:51:e5:af:e9:d0:95:92:5e:ea:d4:bc:c3:22: a6:fc:3e:74:ea:63:9f:f4:c7:e3:b7:b1:b0:e1:a1: 9b:6d:08:b8:fe:68:fd:e5:e9:21:cf:27:0a:0a:66: 96:83:c9:8e:a3:9f:a7:1a:f1:e3:b2:f8:5d:85:c2: 91:e6:f7:1c:d1:1c:9b:89:e9:4d:43:ec:63:3b:fe: a1:1a:96:d5:93:72:3d:4a:26:e2:6c:fa:0e:2f:91: ef:50:b1:1c:5d:e0:26:26:40:d4:b5:f8:81:f0:f3: 79:5d:c8:32:60:84:81:99:a0:3e:25:07:92:1b:b9: 48:d5:8f:33:c5:17:69:27:c1:09:54:0b:1c:89:95: 4c:b9:83:10:47:b9:a8:c7:ac:fe:c5:d1:27:7f:3b: 23:cf:49:b2:c2:4c:14:88:c9:35:0a:f8:94:d6:1d: a1:91:eb:38:d9:29:44:e5:45:df:82:3d:fe:b4:a8: 99:30:78:38:25:34:44:06:93:96:20:ff:c7:11:14: a4:a3:5f:b9:38:ef:57:01:31:0e:9e:38:ac:04:3d: 5d:a0:c9:74:9d:24:4a:3a:92:53:ba:c3:41:b3:72: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:46:98:4D:CE:4E:B2:D1:4A:AF:11:03:F7:C3:AD:86:E6:96:B5 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:41:d6:73:3f:d0:3c:96:c1:a2:6e:4f:6f:11:99:46:f9:e6: 5e:04:a1:54:85:ee:c6:8d:23:ba:97:66:64:17:34:4e:52:a6: fe:ca:e6:c9:9b:5a:f7:75:5f:b2:35:fe:f2:48:fd:21:c8:d5: 99:79:2c:06:2f:e2:69:82:80:58:f0:c7:f2:48:1d:65:59:22: c5:df:fd:d6:73:ef:06:4c:f9:92:47:80:9f:ab:15:60:3b:d6: 7d:c1:ca:13:e4:96:d0:3c:a5:a5:dc:34:85:97:2f:40:2e:be: 7f:30:95:51:d9:6d:a9:0f:03:ef:2a:1e:e7:37:ba:39:6b:06: 94:44:f7:c4:3a:a0:7b:1b:f3:41:2f:fa:2d:6c:83:87:a5:47: 3a:d2:98:2c:f2:ed:5f:d9:2c:f3:83:1b:33:2b:38:da:ef:51: 72:cd:f2:37:97:ab:a5:b9:82:ef:eb:66:64:97:b9:0d:40:ec: 57:70:b1:98:a0:95:69:3c:b4:76:df:2c:f9:13:bc:52:37:6a: 71:69:44:58:64:6a:bd:9b:87:f1:e2:dd:fc:98:d3:f5:df:8d: 6a:a6:7d:e5:ae:de:74:75:17:b5:2d:ac:04:dd:b2:c5:d4:57: 7a:d2:0b:46:5d:08:fa:4f:68:bc:8d:1c:9f:bc:22:3b:d4:d8: c3:22:61:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjUwNTEzMDI0NDM3WhcNMjUwNTIwMDI0NDM3WjAYMRYwFAYD VQQDEw02ODIyYjIxNi1kM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42fQ5lIKi4NIOr8OJBbZzL/96NSdFDShstPGpS3/gFHlr+nQlZJe6tS8wyKm /D506mOf9Mfjt7Gw4aGbbQi4/mj95ekhzycKCmaWg8mOo5+nGvHjsvhdhcKR5vcc 0RybielNQ+xjO/6hGpbVk3I9SibibPoOL5HvULEcXeAmJkDUtfiB8PN5XcgyYISB maA+JQeSG7lI1Y8zxRdpJ8EJVAsciZVMuYMQR7mox6z+xdEnfzsjz0mywkwUiMk1 CviU1h2hkes42SlE5UXfgj3+tKiZMHg4JTREBpOWIP/HERSko1+5OO9XATEOnjis BD1doMl0nSRKOpJTusNBs3K0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDl8RphN zk6y0UqvEQP3w62G5pa1MB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUQdZzP9A8lsGibk9vEZlG+eZeBKFUhe7GjSO6l2ZkFzROUqb+yubJ m1r3dV+yNf7ySP0hyNWZeSwGL+JpgoBY8MfySB1lWSLF3/3Wc+8GTPmSR4CfqxVg O9Z9wcoT5JbQPKWl3DSFly9ALr5/MJVR2W2pDwPvKh7nN7o5awaURPfEOqB7G/NB L/otbIOHpUc60pgs8u1f2SzzgxszKzja71FyzfI3l6uluYLv62Zkl7kNQOxXcLGY oJVpPLR23yz5E7xSN2pxaURYZGq9m4fx4t38mNP1341qpn3lrt50dRe1LawE3bLF 1Fd60gtGXQj6T2i8jRyfvCI71NjDImEV -----END CERTIFICATE-----Generated at Thu May 15 00:12:32 2025 by rpki-client