$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json) Hash identifier: udH68aBPvQpoERzJh5y6loS/gaqgzbnpEKNXFj9ODJU= Subject key identifier: 05:0C:FD:64:9A:7F:DA:EC:95:B2:87:4D:08:38:76:2F:C7:25:FB:01 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft Manifest number: 04D5 Signing time: Sat 10 May 2025 23:24:53 +0000 Manifest this update: Sat 10 May 2025 23:24:53 +0000 Manifest next update: Sat 17 May 2025 23:24:53 +0000 Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: +9vKodhGwys7QrvSq3TCCIefC630jM7zYQ8yj/a3XRk=) 2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: IAKK+mY8HFgS2YSMZrRmCEo9EyVF6c8NsaWFUI1Cy7U=) 3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: LVDrWJ6BXerl5rnm8vBbRTurQuWLvQoWiaKOgBW7x5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: May 10 23:24:53 2025 GMT Not After : May 17 23:24:53 2025 GMT Subject: CN=681fe045-3fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:3e:56:b7:22:a9:65:e5:00:f0:3e:08:18: dd:73:14:0c:20:67:e8:25:4a:ab:73:5d:2a:d1:2a: 32:83:a8:35:79:67:b8:8a:cd:cb:ac:ca:12:5a:50: 36:e2:21:df:51:b7:a5:48:67:89:f2:94:b8:15:e6: 9c:04:a2:31:3c:6c:c5:eb:8e:b3:82:0d:22:aa:e7: 1c:fb:70:df:71:de:a0:e2:eb:c7:85:7e:92:c9:7a: f2:6d:8d:b4:30:43:d4:df:53:bf:e0:ce:e4:e1:46: 45:30:36:bf:b1:5f:37:e6:d2:fb:16:55:ad:d7:03: d8:4b:a6:55:4e:bb:80:30:23:1e:ca:3f:3b:7b:08: c1:bc:46:d1:ce:fa:b9:7f:77:4f:64:a6:d1:dd:fd: 2f:32:5b:a9:c0:c4:2f:a7:2b:e4:d6:de:75:96:a0: 23:97:53:f4:ff:6d:73:4f:5b:45:89:ad:a9:71:ab: 21:0d:2a:33:71:c2:66:79:09:a8:5d:3d:ea:d6:d3: db:d4:a3:1b:bd:b0:13:d8:b2:09:86:1f:45:c0:98: e7:86:ba:bb:4b:5f:07:66:10:5a:11:3f:fe:88:a5: c1:f4:89:b3:ee:8e:50:2c:8e:76:e4:d0:cb:cf:d6: 40:14:f0:c7:02:49:aa:6e:05:d8:3c:51:67:da:e4: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0C:FD:64:9A:7F:DA:EC:95:B2:87:4D:08:38:76:2F:C7:25:FB:01 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ba:50:7d:b1:41:22:06:e3:95:ae:34:cd:e4:c2:c4:fa:ec: e5:4e:17:4b:b2:4d:25:a7:6c:ff:25:85:b7:35:fb:22:26:b5: 76:2b:d5:ee:29:19:79:b9:bb:f8:b0:38:6a:2c:2d:c2:c1:98: 85:f7:30:39:79:35:ce:a9:1b:4c:63:ca:07:61:0d:d6:fb:3e: 57:db:85:93:2d:e7:76:aa:65:05:d3:d3:f1:cb:54:b8:bc:70: 27:7d:0c:a6:9c:65:6b:ab:0a:0b:14:1d:39:5e:0b:ce:1a:c3: 34:17:f1:f4:96:d6:c1:8f:a6:ee:d2:b3:85:6f:4c:4b:06:5c: e7:cc:65:98:fa:88:39:6e:5e:e7:aa:74:2e:46:ea:96:b8:87: 3f:d0:53:92:26:25:49:91:b6:e7:c6:b3:34:b3:0f:37:20:78: 38:dd:87:98:28:5a:ec:92:6b:87:b9:56:0a:be:65:25:67:84: d0:a3:98:33:6e:64:35:8b:29:88:f5:97:60:68:ce:8f:23:f3: 69:e8:e5:93:7e:79:2b:eb:5c:c4:a6:99:64:dd:35:18:43:67: ba:71:ef:7d:ee:a0:8c:e7:4f:82:93:6b:31:57:e9:d2:5e:98: ee:58:c3:63:2b:e8:8b:08:dd:c2:b0:2c:78:e8:5b:34:f4:5e: 13:bf:17:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjUwNTEwMjMyNDUzWhcNMjUwNTE3MjMyNDUzWjAYMRYwFAYD VQQDEw02ODFmZTA0NS0zZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMs+VrciqWXlAPA+CBjdcxQMIGfoJUqrc10q0Soyg6g1eWe4is3LrMoSWlA2 4iHfUbelSGeJ8pS4FeacBKIxPGzF646zgg0iqucc+3Dfcd6g4uvHhX6SyXrybY20 MEPU31O/4M7k4UZFMDa/sV835tL7FlWt1wPYS6ZVTruAMCMeyj87ewjBvEbRzvq5 f3dPZKbR3f0vMlupwMQvpyvk1t51lqAjl1P0/21zT1tFia2pcashDSozccJmeQmo XT3q1tPb1KMbvbAT2LIJhh9FwJjnhrq7S18HZhBaET/+iKXB9Imz7o5QLI525NDL z9ZAFPDHAkmqbgXYPFFn2uQZFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUM/WSa f9rslbKHTQg4di/HJfsBMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3 eThoVTRfUU1oOHZQS2hXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdulB9sUEiBuOVrjTN5MLE+uzlThdLsk0lp2z/JYW3NfsiJrV2K9Xu KRl5ubv4sDhqLC3CwZiF9zA5eTXOqRtMY8oHYQ3W+z5X24WTLed2qmUF09Pxy1S4 vHAnfQymnGVrqwoLFB05XgvOGsM0F/H0ltbBj6bu0rOFb0xLBlznzGWY+og5bl7n qnQuRuqWuIc/0FOSJiVJkbbnxrM0sw83IHg43YeYKFrskmuHuVYKvmUlZ4TQo5gz bmQ1iymI9ZdgaM6PI/Np6OWTfnkr61zEpplk3TUYQ2e6ce997qCM50+Ck2sxV+nS XpjuWMNjK+iLCN3CsCx46Fs09F4TvxeU -----END CERTIFICATE-----Generated at Sun May 11 11:06:51 2025 by rpki-client