$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: jaAHJnN6AIgKM0Nobzar5cBTvdZJqP+cBvN6cy/QVFg= Subject key identifier: D3:6E:22:DB:46:50:71:90:B9:62:CA:AF:91:0F:15:E7:EE:87:DB:D4 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0B8D Signing time: Sat 10 May 2025 18:47:30 +0000 Manifest this update: Sat 10 May 2025 18:47:29 +0000 Manifest next update: Sat 17 May 2025 18:47:29 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: Qlz9RhebqXpHH8OIT6V6Vu0LfHEJ99XE/5zg5jytHNM=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: QngpTkCC8JSyoEjRCbNY7hFfX4Je7JGO3cicNA6+xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: May 10 18:47:29 2025 GMT Not After : May 17 18:47:29 2025 GMT Subject: CN=681f9f41-cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:86:e6:22:d0:28:c9:68:b8:50:85:61:63: 0b:ba:01:14:34:28:b2:a0:12:b4:3b:de:f1:f0:6f: b5:9c:c3:70:52:ec:ed:53:08:77:a4:9f:4f:f6:52: c6:40:63:76:50:ac:57:c6:f5:b9:dc:a8:7b:78:df: 6f:ff:40:cc:ee:ce:11:50:bb:c1:45:54:1a:5c:be: 0f:81:0c:3e:92:41:51:ad:d0:af:ad:9d:74:17:88: 18:f1:b3:85:40:39:98:df:71:23:ac:5d:95:cf:37: 0e:bc:33:b7:25:1d:80:c9:c2:3c:d1:b0:b3:fa:d8: 3b:44:7c:cf:88:05:84:bd:37:bf:2f:2c:95:44:d4: 2e:12:2f:45:20:a2:d1:79:e3:dd:c8:1e:ac:b7:df: 3d:fd:0a:ab:3a:e8:cb:5c:74:20:68:61:b4:e0:77: 7a:0e:db:ee:3c:46:67:04:b1:9e:0f:57:a8:35:1a: a9:d2:d8:87:25:c3:3a:f0:41:fd:5d:6b:1a:37:34: 7c:ff:a7:a6:0f:72:17:90:d9:a4:de:8f:ac:eb:9c: c4:8d:df:7f:3b:16:3e:3e:91:a0:ce:e3:61:58:f1: d7:26:7d:9e:82:63:bb:f2:20:37:08:75:38:76:7d: 09:f7:e9:cd:1a:06:5b:6b:e3:20:ce:dc:76:a0:83: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:22:DB:46:50:71:90:B9:62:CA:AF:91:0F:15:E7:EE:87:DB:D4 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:a6:1f:6a:be:43:65:fc:bd:73:b4:ae:c7:95:8f:b7:29: e1:b5:49:91:f8:47:35:cd:10:91:84:a5:78:fa:5d:7e:af:84: e2:ca:e9:c7:13:f1:e5:c7:8d:66:74:05:91:b5:1c:7c:fb:73: d5:60:6d:35:6a:07:83:19:9e:89:43:e5:a1:e7:99:3c:54:d1: 6f:14:92:79:82:7b:c7:a4:eb:56:a7:da:6f:06:5e:f6:cf:e4: a0:2b:4e:df:ff:9f:3f:1b:97:4b:95:4c:c7:5d:70:50:f6:3a: 3d:85:f2:c0:08:ac:1b:1d:b7:bb:ff:03:ad:ec:1a:18:8c:34: df:b5:49:48:ad:19:00:b5:0c:1f:b6:5e:a6:8c:57:9f:7a:62: 5c:37:fe:93:cc:99:14:c9:41:8a:d2:7f:0a:76:2c:07:b3:34: 43:88:ff:9e:3e:93:bf:64:ac:b5:28:04:bf:19:0a:77:4d:08: 67:74:1a:76:45:3b:dc:8d:1f:91:69:fa:76:a1:a7:f0:3f:45: de:ca:04:5d:93:34:21:7f:8c:cc:d3:e2:d9:8f:d2:66:13:33: 85:a3:19:9e:ff:d8:7a:6f:bb:34:b1:52:1f:7d:10:ab:2a:2c: 01:c4:83:82:4b:27:82:24:11:e0:67:f3:da:e3:e0:0f:52:8a: fc:04:df:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjUwNTEwMTg0NzI5WhcNMjUwNTE3MTg0NzI5WjAYMRYwFAYD VQQDEw02ODFmOWY0MS1jYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGOG5iLQKMlouFCFYWMLugEUNCiyoBK0O97x8G+1nMNwUuztUwh3pJ9P9lLG QGN2UKxXxvW53Kh7eN9v/0DM7s4RULvBRVQaXL4PgQw+kkFRrdCvrZ10F4gY8bOF QDmY33EjrF2VzzcOvDO3JR2AycI80bCz+tg7RHzPiAWEvTe/LyyVRNQuEi9FIKLR eePdyB6st989/QqrOujLXHQgaGG04Hd6DtvuPEZnBLGeD1eoNRqp0tiHJcM68EH9 XWsaNzR8/6emD3IXkNmk3o+s65zEjd9/OxY+PpGgzuNhWPHXJn2egmO78iA3CHU4 dn0J9+nNGgZba+Mgztx2oING2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNuIttG UHGQuWLKr5EPFefuh9vUMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi7aYfar5DZfy9c7Sux5WPtynhtUmR+Ec1zRCRhKV4+l1+r4TiyunH E/Hlx41mdAWRtRx8+3PVYG01ageDGZ6JQ+Wh55k8VNFvFJJ5gnvHpOtWp9pvBl72 z+SgK07f/58/G5dLlUzHXXBQ9jo9hfLACKwbHbe7/wOt7BoYjDTftUlIrRkAtQwf tl6mjFefemJcN/6TzJkUyUGK0n8KdiwHszRDiP+ePpO/ZKy1KAS/GQp3TQhndBp2 RTvcjR+Rafp2oafwP0XeygRdkzQhf4zM0+LZj9JmEzOFoxme/9h6b7s0sVIffRCr KiwBxIOCSyeCJBHgZ/Pa4+APUor8BN/j -----END CERTIFICATE-----Generated at Sat May 10 21:00:41 2025 by rpki-client