$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: jvw2sa6yY5bxZ+tM2RXtt6Qw9ZgB6Zfm5VSYc1Q6+gw= Subject key identifier: 65:69:E7:49:7D:62:89:9F:89:30:CA:D1:1D:E8:BE:69:5F:FE:7F:A8 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 1122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 111A Signing time: Sat 10 May 2025 17:09:48 +0000 Manifest this update: Sat 10 May 2025 17:09:47 +0000 Manifest next update: Sat 17 May 2025 17:09:47 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: OgdTBufQOY+rQ1FMQH6xSv8LPkL95z5cLTGyZ65LDZ0=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4386 (0x1122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: May 10 17:09:47 2025 GMT Not After : May 17 17:09:47 2025 GMT Subject: CN=681f885b-66ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:74:0e:6d:b8:45:af:cd:92:2a:eb:0c:e9: 9d:b1:82:4c:22:14:fd:70:74:df:de:7f:2c:11:be: d9:f2:25:06:00:43:8d:68:c3:34:e2:d7:de:b9:ba: 70:a7:0d:c0:17:50:96:a4:c6:92:b4:33:fc:9c:e6: b3:59:ba:fa:92:94:82:f5:6d:4c:6c:30:81:ad:b4: 67:fd:ef:34:87:d6:b4:35:8b:4e:70:09:f3:94:59: 04:20:55:34:89:66:b4:5f:21:a5:5e:3d:ab:1b:2e: db:79:ee:88:03:33:74:53:85:61:28:80:1e:1a:e6: d7:75:f1:42:a0:9e:0b:81:d5:f3:92:d6:8f:31:5f: 32:ed:7a:6d:c0:cd:ee:d8:a6:f4:cf:b2:d7:dd:a6: 4b:00:11:b1:a5:c0:c2:84:d1:7a:c1:76:aa:d2:eb: 7a:19:db:5e:93:19:d6:61:9a:ac:e9:63:27:26:c6: 45:a3:71:4e:95:65:16:2a:60:b8:99:95:8d:1c:66: 40:7c:09:b2:4e:dd:61:8a:ff:69:82:f9:8d:7a:32: 42:4c:0d:a7:66:b8:52:e2:79:5c:ec:05:4a:3e:f7: 7a:db:f5:3e:c0:a4:ee:91:3f:40:4f:1e:05:ed:ba: c2:03:84:5c:42:20:46:45:3a:b8:5e:a4:c6:fa:6a: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:69:E7:49:7D:62:89:9F:89:30:CA:D1:1D:E8:BE:69:5F:FE:7F:A8 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:50:6e:cf:f0:bc:86:c9:27:e6:85:b2:a1:46:17:71:24:63: 7e:78:fd:8e:1f:57:ce:10:f3:77:d7:9f:67:98:a5:38:98:ab: c8:b9:a2:0f:b8:1d:f4:91:cd:f3:a8:2f:d1:80:73:34:83:52: 42:9d:12:21:92:ee:c5:e5:dd:35:db:a1:46:2c:d4:d7:21:1f: 3c:29:19:47:8f:4b:80:6d:c3:1d:a4:9f:05:d2:5e:ac:99:17: cc:90:0f:21:6e:d0:98:7e:4d:05:58:f5:1b:80:51:3e:73:a0: 52:0b:72:b2:de:cf:54:fb:e9:df:4d:fb:bb:a0:90:5a:77:6a: 99:38:6d:81:55:4a:8a:9f:f7:40:ef:00:10:7a:0b:f5:c1:69: 27:64:89:d0:1e:6f:e6:d1:b3:09:c0:6c:07:31:66:cd:8e:9f: 99:45:d8:2f:85:a0:4c:4b:b4:2b:21:9a:d2:9c:d4:c6:4e:e7: ed:1d:06:c3:52:79:b2:dd:c9:cf:07:48:65:a4:c1:4f:15:ed: 5d:07:a8:80:c7:c8:18:4b:39:ab:02:14:6b:68:72:4d:b7:47: fa:a4:a5:5f:ef:20:dc:91:b4:21:8a:4b:13:7e:71:1e:a5:65: 4b:19:cb:e5:de:d1:95:df:31:30:71:77:12:73:8e:c6:4d:b1: ba:2f:16:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUwNTEwMTcwOTQ3WhcNMjUwNTE3MTcwOTQ3WjAYMRYwFAYD VQQDEw02ODFmODg1Yi02NmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI10Dm24Ra/NkirrDOmdsYJMIhT9cHTf3n8sEb7Z8iUGAEONaMM04tfeubpw pw3AF1CWpMaStDP8nOazWbr6kpSC9W1MbDCBrbRn/e80h9a0NYtOcAnzlFkEIFU0 iWa0XyGlXj2rGy7bee6IAzN0U4VhKIAeGubXdfFCoJ4LgdXzktaPMV8y7XptwM3u 2Kb0z7LX3aZLABGxpcDChNF6wXaq0ut6GdtekxnWYZqs6WMnJsZFo3FOlWUWKmC4 mZWNHGZAfAmyTt1hiv9pgvmNejJCTA2nZrhS4nlc7AVKPvd62/U+wKTukT9ATx4F 7brCA4RcQiBGRTq4XqTG+mpblwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVp50l9 YomfiTDK0R3ovmlf/n+oMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQUG7P8LyGySfmhbKhRhdxJGN+eP2OH1fOEPN3159nmKU4mKvIuaIP uB30kc3zqC/RgHM0g1JCnRIhku7F5d0126FGLNTXIR88KRlHj0uAbcMdpJ8F0l6s mRfMkA8hbtCYfk0FWPUbgFE+c6BSC3Ky3s9U++nfTfu7oJBad2qZOG2BVUqKn/dA 7wAQegv1wWknZInQHm/m0bMJwGwHMWbNjp+ZRdgvhaBMS7QrIZrSnNTGTuftHQbD Unmy3cnPB0hlpMFPFe1dB6iAx8gYSzmrAhRraHJNt0f6pKVf7yDckbQhiksTfnEe pWVLGcvl3tGV3zEwcXcSc47GTbG6LxYe -----END CERTIFICATE-----Generated at Mon May 12 04:25:54 2025 by rpki-client