$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: OHheCu7gmWY6N8+k2srwaLDcXYltJiaApk/yoIH6VgM= Subject key identifier: 36:47:54:6D:34:50:77:E1:F3:AB:B6:CE:E6:FC:D5:FC:92:B3:A9:F3 Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 011D Signing time: Thu 15 May 2025 04:08:31 +0000 Manifest this update: Thu 15 May 2025 04:08:30 +0000 Manifest next update: Thu 22 May 2025 04:08:30 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: og5Z/fdckoAUbbL4jmhMbJxkOtdIsRRkSFrnNQip2Zc=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: qxZ80C2zZyx5cq4VROiHoH57qrwZSWdC3kAJGztpgCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: May 15 04:08:30 2025 GMT Not After : May 22 04:08:30 2025 GMT Subject: CN=682568be-4e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:02:ba:f0:54:ce:e1:37:bd:6e:a8:aa:75: a3:82:48:68:43:9f:12:a1:72:5e:54:b7:ea:fa:1f: e7:dc:ca:07:4d:00:08:26:2a:f8:61:c5:9b:ab:82: f0:d9:60:8b:05:38:5c:df:b9:77:a3:5d:d6:80:a3: f4:cf:8b:78:f5:01:01:9e:59:52:3e:13:2e:f9:f4: 32:a1:f2:81:8b:c0:f2:ae:b8:3f:39:e7:09:e7:ef: 12:a2:bd:44:9c:f7:73:66:45:f5:49:e6:89:aa:d8: 0f:2f:21:d6:b6:7d:fa:92:6a:73:de:f2:aa:42:55: 2d:13:15:b5:7a:cc:b4:61:36:f1:48:ca:90:7c:af: 76:25:2c:e7:d2:d6:6c:de:87:d8:82:a8:b5:6f:b2: af:c4:9a:12:1a:c7:0c:34:4e:2d:69:7a:14:bb:2d: 6b:1f:e4:c8:60:de:34:01:8c:af:0f:29:7d:47:6f: ac:04:44:70:9e:b5:45:00:e8:31:e0:d9:8f:a9:52: f5:f5:ae:32:a7:8f:65:82:84:7f:23:20:7d:37:92: 46:c3:a0:f8:e2:a0:90:5a:c6:da:17:0f:e3:a6:a7: 4b:f2:07:de:c5:90:0d:2e:d6:14:df:4a:6a:e7:ec: 01:b4:58:d6:33:e9:b3:2a:59:cc:64:0a:73:d0:92: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:47:54:6D:34:50:77:E1:F3:AB:B6:CE:E6:FC:D5:FC:92:B3:A9:F3 X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ae:8a:20:2c:89:9f:cd:e1:97:ec:d9:f3:50:49:f2:fe:4a: 5a:e6:50:76:13:44:85:18:02:a3:a5:f4:2b:5f:a8:11:2a:38: 27:d7:06:8f:a4:b9:21:b7:ae:cb:bc:f9:6d:dd:0e:91:e7:c5: 89:1e:88:5f:6e:80:8a:f5:fa:bc:b7:41:71:f3:00:58:e8:69: 52:94:d8:e8:40:e1:ee:b9:ea:82:7d:04:a0:58:55:9c:aa:a1: 78:c7:61:00:93:5f:14:b7:25:ee:10:4f:b1:0e:e8:78:f0:98: f1:cb:91:b4:da:26:31:33:72:db:f0:bc:52:bf:11:10:8a:f6: ab:d1:43:18:53:85:f3:1d:49:cd:9a:16:2f:73:c2:b7:91:91: a1:8e:cb:43:02:5e:56:44:fe:38:5c:65:da:11:6d:45:02:5e: 9a:d1:f3:10:2b:ba:98:9e:d7:ec:15:59:3d:af:69:8f:7f:a3: 7f:a8:a0:c6:9a:b1:b5:3c:a6:5a:e1:e0:b9:84:4d:83:69:0a: c6:48:70:34:dc:0f:6a:76:f7:d9:51:cc:62:aa:2d:02:e1:fd: 01:ba:d2:d2:57:c4:83:bb:54:8c:ea:34:fa:1a:19:d3:5c:ec: 1c:a0:8c:ec:90:87:99:c2:bf:fc:e9:ab:48:26:4a:2a:e3:0f: 21:40:f7:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjUwNTE1MDQwODMwWhcNMjUwNTIyMDQwODMwWjAYMRYwFAYD VQQDEw02ODI1NjhiZS00ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2wCuvBUzuE3vW6oqnWjgkhoQ58SoXJeVLfq+h/n3MoHTQAIJir4YcWbq4Lw 2WCLBThc37l3o13WgKP0z4t49QEBnllSPhMu+fQyofKBi8Dyrrg/OecJ5+8Sor1E nPdzZkX1SeaJqtgPLyHWtn36kmpz3vKqQlUtExW1esy0YTbxSMqQfK92JSzn0tZs 3ofYgqi1b7KvxJoSGscMNE4taXoUuy1rH+TIYN40AYyvDyl9R2+sBERwnrVFAOgx 4NmPqVL19a4yp49lgoR/IyB9N5JGw6D44qCQWsbaFw/jpqdL8gfexZANLtYU30pq 5+wBtFjWM+mzKlnMZApz0JILwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZHVG00 UHfh86u2zub81fySs6nzMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKroogLImfzeGX7NnzUEny/kpa5lB2E0SFGAKjpfQrX6gRKjgn1waP pLkht67LvPlt3Q6R58WJHohfboCK9fq8t0Fx8wBY6GlSlNjoQOHuueqCfQSgWFWc qqF4x2EAk18UtyXuEE+xDuh48Jjxy5G02iYxM3Lb8LxSvxEQivar0UMYU4XzHUnN mhYvc8K3kZGhjstDAl5WRP44XGXaEW1FAl6a0fMQK7qYntfsFVk9r2mPf6N/qKDG mrG1PKZa4eC5hE2DaQrGSHA03A9qdvfZUcxiqi0C4f0ButLSV8SDu1SM6jT6GhnT XOwcoIzskIeZwr/86atIJkoq4w8hQPfc -----END CERTIFICATE-----Generated at Fri May 16 02:32:20 2025 by rpki-client