$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json) Hash identifier: 2ELq9VKdrRygVu53OlMEqTbzist2rrCgt7QcWCZkQZA= Subject key identifier: A6:7A:D5:B8:FF:C8:F9:29:F1:84:BC:F9:FD:82:3C:8E:11:66:F8:C7 Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft Manifest number: 0AE0 Signing time: Wed 14 May 2025 19:32:56 +0000 Manifest this update: Wed 14 May 2025 19:32:56 +0000 Manifest next update: Wed 21 May 2025 19:32:56 +0000 Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: rsu92ciwb3pWaFlWPKMOV6XjZ6gGTEciAEWbr3zKhRM=) 2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: r9qAOJLFlfPr/FG83X+BXgaWnTUjc3HThRn1PkvKOaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Validity Not Before: May 14 19:32:56 2025 GMT Not After : May 21 19:32:56 2025 GMT Subject: CN=6824efe8-a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:1e:52:db:9f:11:b9:3c:aa:30:3e:15:2c: 0e:bc:5c:95:b3:e2:a0:5e:29:68:ff:71:f6:5c:34: 66:bb:b1:6c:2c:04:60:04:fa:a1:8b:9f:06:0e:df: 24:2c:6f:87:f8:c2:72:fe:c7:dd:85:f1:bd:f8:f4: 63:5d:0e:1d:ac:c3:bb:27:d6:7c:eb:79:d3:1c:b5: d1:b7:6d:8c:2d:c8:9b:b4:83:7a:cf:06:1c:b0:e9: 03:d5:ff:75:c2:80:18:ae:3f:64:9d:ff:7e:ec:3e: 8b:a7:cf:e7:e5:b3:3e:26:ae:ce:a8:ce:43:b1:02: 97:bd:07:c5:e1:ce:54:2e:97:8f:55:53:66:db:26: e1:e9:68:4f:73:9e:78:19:5c:56:9e:b0:dd:b8:69: a2:8d:d5:26:59:1c:72:c7:c4:a9:7b:e3:6a:c5:c6: 9e:71:18:65:92:c5:cc:37:3c:55:5a:1f:44:8d:0f: 79:1d:93:9b:80:b0:06:28:0c:49:59:14:66:32:63: e7:3e:bf:11:e6:a7:40:f3:44:a6:bb:f9:d7:af:82: 0f:ae:2d:82:22:4d:79:3c:5c:eb:3d:1d:f6:b0:80: 2b:53:f7:95:77:0d:32:49:a1:69:2b:f2:33:0a:cb: c5:94:ae:5e:98:92:d8:c1:7e:ed:b8:30:68:13:d4: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7A:D5:B8:FF:C8:F9:29:F1:84:BC:F9:FD:82:3C:8E:11:66:F8:C7 X509v3 Authority Key Identifier: keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2a:0e:e8:9a:1b:50:3a:91:f4:d4:04:38:c2:b1:81:12:8c: 50:c5:52:f7:50:c6:07:f1:9a:31:ec:b1:24:66:be:52:99:29: 11:b1:06:36:7c:b9:74:d8:9b:6b:02:d4:14:2e:46:f3:9f:ff: 84:93:80:fa:98:c5:76:bd:26:51:db:e0:76:fc:67:b6:88:cf: bd:09:9a:7c:63:0c:14:e5:d4:55:87:e5:35:d9:a0:9b:78:7e: 42:23:bc:5a:a2:41:13:32:0d:af:18:12:18:a9:1c:d9:38:31: aa:79:14:d4:8b:aa:9b:8a:73:89:1e:a9:ca:09:19:0b:ef:c2: 79:15:da:7e:89:d5:08:8b:d8:36:48:a8:95:7a:57:ea:9a:4a: 2c:c2:01:61:93:54:67:94:02:1a:71:cd:dd:63:96:97:87:f0: ef:8b:bd:56:19:fc:6d:4c:61:da:86:c1:b8:62:09:01:96:33: de:f9:8f:8f:8a:0f:ec:d2:73:b8:f4:27:05:33:07:68:44:49: 35:82:e1:85:2a:26:60:b8:9e:ab:36:c8:67:ea:60:e8:a2:43: a4:80:0f:0d:e2:08:02:96:fc:c0:b7:08:32:b4:8d:92:90:1f: 36:cc:68:7e:13:85:04:d9:8a:59:d9:15:37:10:b5:13:d0:08: 16:46:e4:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC NDA0OUU3ODYwHhcNMjUwNTE0MTkzMjU2WhcNMjUwNTIxMTkzMjU2WjAYMRYwFAYD VQQDEw02ODI0ZWZlOC1hODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNYeUtufEbk8qjA+FSwOvFyVs+KgXilo/3H2XDRmu7FsLARgBPqhi58GDt8k LG+H+MJy/sfdhfG9+PRjXQ4drMO7J9Z863nTHLXRt22MLcibtIN6zwYcsOkD1f91 woAYrj9knf9+7D6Lp8/n5bM+Jq7OqM5DsQKXvQfF4c5ULpePVVNm2ybh6WhPc554 GVxWnrDduGmijdUmWRxyx8Spe+NqxcaecRhlksXMNzxVWh9EjQ95HZObgLAGKAxJ WRRmMmPnPr8R5qdA80Smu/nXr4IPri2CIk15PFzrPR32sIArU/eVdw0ySaFpK/Iz CsvFlK5emJLYwX7tuDBoE9TJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ61bj/ yPkp8YS8+f2CPI4RZvjHMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4 RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi cnVMcGxJaEN6ckMwQko1NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvKg7omhtQOpH01AQ4wrGBEoxQxVL3UMYH8Zox7LEkZr5SmSkRsQY2 fLl02JtrAtQULkbzn/+Ek4D6mMV2vSZR2+B2/Ge2iM+9CZp8YwwU5dRVh+U12aCb eH5CI7xaokETMg2vGBIYqRzZODGqeRTUi6qbinOJHqnKCRkL78J5Fdp+idUIi9g2 SKiVelfqmkoswgFhk1RnlAIacc3dY5aXh/Dvi71WGfxtTGHahsG4YgkBljPe+Y+P ig/s0nO49CcFMwdoREk1guGFKiZguJ6rNshn6mDookOkgA8N4ggClvzAtwgytI2S kB82zGh+E4UE2YpZ2RU3ELUT0AgWRuTL -----END CERTIFICATE-----Generated at Fri May 16 13:07:22 2025 by rpki-client