$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json) Hash identifier: giCkGLfZ36go/Vyh01BMg4w6sPlsU7rpkYcyGGk2T+g= Subject key identifier: B7:09:AD:38:03:18:98:92:0B:9A:6D:3A:13:15:16:38:40:94:79:A2 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 1218 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft Manifest number: 1209 Signing time: Wed 14 May 2025 17:14:52 +0000 Manifest this update: Wed 14 May 2025 17:14:51 +0000 Manifest next update: Wed 21 May 2025 17:14:51 +0000 Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: boaMyCqte66LrVUEWIy/lCbOM69NVd2uSPVqGye+/e8=) 2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: IPMaIsA9uRnd6F5Aml0jreWHK2WPPMV0a6PLoDBBAuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4632 (0x1218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: May 14 17:14:51 2025 GMT Not After : May 21 17:14:51 2025 GMT Subject: CN=6824cf8b-dd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:e6:c7:9f:84:50:01:8b:d3:84:70:d9:50: 64:d3:15:02:4b:ca:53:ff:54:8a:3b:af:a2:b4:c8: 47:52:f3:b6:0a:e2:01:2a:72:7d:33:9d:66:ac:5f: 7c:fb:21:cf:57:2b:21:ac:41:60:ea:c2:9d:ce:48: c3:a0:e7:bc:dc:9d:91:ac:1d:ea:a9:66:05:1b:b5: 4c:0e:ac:9d:81:7f:ca:44:84:ce:dc:ba:d9:95:c0: 7b:fb:7d:0d:df:6f:d5:83:43:ec:57:e6:29:b2:0c: e4:f8:0c:54:4f:16:b9:ce:c4:2b:28:80:b5:1a:0e: 8e:2f:cd:c0:01:9f:0f:41:e7:29:80:9b:2f:6a:ff: 37:78:cd:35:7d:f6:82:07:0c:1a:24:15:6b:65:80: f3:75:d5:de:70:a0:87:cd:a5:89:8c:a4:59:6f:5e: 9b:4a:82:b6:c2:46:09:45:40:38:6b:ee:de:70:76: a5:8c:af:f7:5b:3f:87:c6:13:95:20:c7:4e:f7:b1: 05:1a:8b:63:b0:bc:2e:09:04:12:71:e9:1c:36:e7: 02:fc:c7:8b:75:b2:5d:10:b8:ff:40:22:8d:56:5f: 5a:ef:01:d3:d4:2b:f3:03:ee:27:1e:3f:ff:3b:29: 17:0a:23:b4:1b:75:52:c8:dd:47:54:41:29:95:e7: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:AD:38:03:18:98:92:0B:9A:6D:3A:13:15:16:38:40:94:79:A2 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5d:33:3e:f4:2b:21:2a:63:33:11:6e:0e:f7:6f:68:91:dc: 51:de:3d:22:b5:5c:9e:48:b1:ff:ef:19:3d:c8:71:23:e6:a2: 34:10:d5:bf:57:89:bd:8c:7c:80:27:e1:eb:69:1c:6d:e4:6f: 38:da:73:ef:36:d7:a7:46:e1:65:f8:56:c7:68:db:c3:92:47: 83:18:4d:25:69:c0:fc:8f:35:48:57:0f:ac:3b:b6:da:13:b7: 3f:7a:49:29:19:10:22:3a:4b:50:45:b3:3a:32:77:95:38:1c: 78:8b:24:ac:5e:b4:87:eb:c9:0c:a1:1f:67:33:53:cc:dd:11: 73:f6:44:ff:d5:b4:00:58:d7:a5:14:04:23:3b:02:10:66:6d: 37:ac:b7:bb:73:e6:82:64:dc:3a:fe:34:71:49:5c:43:7d:b4: af:42:14:6d:99:a9:85:85:50:2d:0a:fa:6b:d7:ff:4b:b6:62: 19:8f:63:30:7e:45:14:2d:06:66:43:91:cc:64:8e:79:10:84: 76:cd:5b:07:d9:5b:dc:3a:0b:41:78:26:bc:2c:c1:e9:3b:28: 65:0b:59:f1:34:72:37:54:7a:c3:22:90:7e:5f:83:06:e4:e7: 93:df:eb:f9:26:be:63:17:73:2b:de:5a:da:86:6b:6b:f3:95: ea:21:a4:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjUwNTE0MTcxNDUxWhcNMjUwNTIxMTcxNDUxWjAYMRYwFAYD VQQDEw02ODI0Y2Y4Yi1kZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszjmx5+EUAGL04Rw2VBk0xUCS8pT/1SKO6+itMhHUvO2CuIBKnJ9M51mrF98 +yHPVyshrEFg6sKdzkjDoOe83J2RrB3qqWYFG7VMDqydgX/KRITO3LrZlcB7+30N 32/Vg0PsV+Ypsgzk+AxUTxa5zsQrKIC1Gg6OL83AAZ8PQecpgJsvav83eM01ffaC BwwaJBVrZYDzddXecKCHzaWJjKRZb16bSoK2wkYJRUA4a+7ecHaljK/3Wz+HxhOV IMdO97EFGotjsLwuCQQScekcNucC/MeLdbJdELj/QCKNVl9a7wHT1CvzA+4nHj// OykXCiO0G3VSyN1HVEEpleeY9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcJrTgD GJiSC5ptOhMVFjhAlHmiMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM Sy1MZjIxWjhkSzlleTNXd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuXTM+9CshKmMzEW4O929okdxR3j0itVyeSLH/7xk9yHEj5qI0ENW/ V4m9jHyAJ+HraRxt5G842nPvNtenRuFl+FbHaNvDkkeDGE0lacD8jzVIVw+sO7ba E7c/ekkpGRAiOktQRbM6MneVOBx4iySsXrSH68kMoR9nM1PM3RFz9kT/1bQAWNel FAQjOwIQZm03rLe7c+aCZNw6/jRxSVxDfbSvQhRtmamFhVAtCvpr1/9LtmIZj2Mw fkUULQZmQ5HMZI55EIR2zVsH2VvcOgtBeCa8LMHpOyhlC1nxNHI3VHrDIpB+X4MG 5OeT3+v5Jr5jF3Mr3lrahmtr85XqIaSu -----END CERTIFICATE-----Generated at Fri May 16 13:51:31 2025 by rpki-client