$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: zu7JhdCOqfntP79ShBj3d90yizOlBO520TUKtQf+FSA= Subject key identifier: AD:84:78:3B:04:34:9E:BA:C0:68:11:7D:CA:F2:B3:D8:C5:30:71:98 Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: 4B Signing time: Thu 15 May 2025 06:48:21 +0000 Manifest this update: Thu 15 May 2025 06:48:20 +0000 Manifest next update: Thu 22 May 2025 06:48:20 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: L/VxAdeC7V8kU7ZWaymUUQ7pru5dQ7UcSyjePm51zzQ=) 2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=) 3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: FHrz83TvBf0PQed/UPRQj7z6Reuifr4TTzu0H0Cz+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: May 15 06:48:20 2025 GMT Not After : May 22 06:48:20 2025 GMT Subject: CN=68258e35-c36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:73:76:5b:df:c4:02:2f:dc:c5:0a:46:db: a5:c3:e7:90:bf:5b:60:af:c9:59:13:e3:a3:04:56: a2:92:22:cb:b7:17:3a:32:a5:75:3c:91:0c:75:83: a0:0d:ea:43:6d:0a:3e:41:29:e7:b3:f3:97:55:86: b3:cb:51:17:59:29:57:01:97:c3:92:6d:7b:0c:46: 49:c7:4b:b1:57:e3:6e:a0:fc:c0:81:5b:56:fd:a9: 0b:2b:83:23:b4:9f:94:36:66:34:5a:bb:25:78:e8: 9d:a9:74:35:e4:e5:68:30:4d:0f:83:f3:f5:6a:e8: 65:3d:c8:c8:9a:c6:33:7b:9d:e8:c8:48:5d:1d:7f: 4b:3a:23:86:ee:0d:2b:f0:6f:62:93:a1:ae:cd:48: 72:2c:62:ed:eb:25:a9:ec:a0:bd:f8:9a:fb:c7:c6: e5:24:af:50:82:96:01:99:3b:c8:d5:9f:dc:b8:a8: 92:ac:03:c6:23:de:08:1f:40:c6:fd:cf:a9:fd:2a: a0:cb:66:c8:4f:67:26:b8:ee:af:72:8d:76:97:8c: 0e:90:d5:ef:bc:42:96:ba:9b:16:08:a5:da:e7:cd: ae:06:b4:58:52:4b:0b:96:88:4d:2f:76:62:4c:fa: 8d:d3:db:0c:38:a3:44:13:db:d7:6d:c0:72:08:8a: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:84:78:3B:04:34:9E:BA:C0:68:11:7D:CA:F2:B3:D8:C5:30:71:98 X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8d:d2:6a:7c:79:21:a8:78:b0:68:4a:ad:29:0d:c5:a7:e0: c6:86:03:b2:f1:23:97:fe:2a:ee:f2:62:a5:cb:0e:86:c5:d5: 4a:ce:8e:a4:c4:72:3a:68:e2:8a:22:12:53:f6:2e:80:a2:c9: 97:37:ff:bc:30:d4:a6:ae:50:b1:72:db:55:a5:03:f7:84:d8: dd:db:d4:24:29:d1:3d:60:90:2c:d9:ae:8e:90:a4:24:72:98: ba:c5:90:39:1b:12:5d:a0:79:c8:00:f8:58:86:70:42:a5:de: d3:67:de:c5:94:4a:4a:30:d6:5b:20:12:ee:d0:dd:7d:25:6d: 2e:68:ad:7b:06:1a:9a:58:83:f1:fb:48:c2:f1:29:d1:b1:6d: 64:fc:b2:77:ba:a4:81:e5:8b:56:59:3c:48:f9:bf:b3:46:03: 9c:04:5c:7c:fa:e0:3f:bd:95:b1:95:11:56:b8:7a:3c:af:89: eb:bf:1d:97:f3:6b:22:0f:19:54:00:95:be:99:ee:56:93:cb: 2f:52:b3:89:70:aa:39:c7:b6:7b:16:bc:eb:f4:1e:f9:e7:21: dd:c3:65:79:79:66:1e:5c:8e:2b:b5:8f:92:2e:cc:d0:3b:27: 7c:1a:02:dd:65:06:99:7e:81:55:1d:63:a9:42:37:84:15:15: e5:7e:a6:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDE4MDExMC8GA1UEBRMoODdEQTQ0QTRDRjgzOUMzODgxQzZCQzM4NjgzQ0NEQzMw OENBN0NFOTAeFw0yNTA1MTUwNjQ4MjBaFw0yNTA1MjIwNjQ4MjBaMBgxFjAUBgNV BAMTDTY4MjU4ZTM1LWMzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf8XN2W9/EAi/cxQpG26XD55C/W2CvyVkT46MEVqKSIsu3FzoypXU8kQx1g6AN 6kNtCj5BKeez85dVhrPLURdZKVcBl8OSbXsMRknHS7FX426g/MCBW1b9qQsrgyO0 n5Q2ZjRauyV46J2pdDXk5WgwTQ+D8/Vq6GU9yMiaxjN7nejISF0df0s6I4buDSvw b2KToa7NSHIsYu3rJansoL34mvvHxuUkr1CClgGZO8jVn9y4qJKsA8Yj3ggfQMb9 z6n9KqDLZshPZya47q9yjXaXjA6Q1e+8Qpa6mxYIpdrnza4GtFhSSwuWiE0vdmJM +o3T2ww4o0QT29dtwHIIitMrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrYR4OwQ0 nrrAaBF9yvKz2MUwcZgwHwYDVR0jBBgwFoAUh9pEpM+DnDiBxrw4aDzNwwjKfOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMTgwLzc3NDI4N0YyRDZD NzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDlwRXBNLURuRGlCeHJ3NGFEek53d2pLZk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MTgwLzc3NDI4N0YyRDZDNzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRp QnhydzRhRHpOd3dqS2ZPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2N0mp8eSGoeLBoSq0pDcWn4MaGA7LxI5f+Ku7yYqXLDobF1UrOjqTE cjpo4ooiElP2LoCiyZc3/7ww1KauULFy21WlA/eE2N3b1CQp0T1gkCzZro6QpCRy mLrFkDkbEl2gecgA+FiGcEKl3tNn3sWUSkow1lsgEu7Q3X0lbS5orXsGGppYg/H7 SMLxKdGxbWT8sne6pIHli1ZZPEj5v7NGA5wEXHz64D+9lbGVEVa4ejyvieu/HZfz ayIPGVQAlb6Z7laTyy9Ss4lwqjnHtnsWvOv0HvnnId3DZXl5Zh5cjiu1j5IuzNA7 J3waAt1lBpl+gVUdY6lCN4QVFeV+pr0= -----END CERTIFICATE-----Generated at Thu May 15 15:44:00 2025 by rpki-client