$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: 6Ox/I6OEZ61wWIbcDle06VlC+qhWuKh/jeMOgqtWwbI= Subject key identifier: C4:B8:D1:C5:F8:27:C9:B5:71:CD:70:85:23:6C:D9:BA:DE:07:5F:4B Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 079A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 0791 Signing time: Wed 14 May 2025 21:26:36 +0000 Manifest this update: Wed 14 May 2025 21:26:35 +0000 Manifest next update: Wed 21 May 2025 21:26:35 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: jLsZrQ9SPRmo4fvwqzmCyZhdvgfBeoX2QH+c+J6Mk68=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: a4ANf8uGuOcHttQZdM48a5efk77lhvSIMBktbozPiW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: May 14 21:26:35 2025 GMT Not After : May 21 21:26:35 2025 GMT Subject: CN=68250a8b-46ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:49:38:2f:b4:47:bd:7b:68:d0:1b:da:d0: cd:ad:34:1e:90:96:09:02:96:e8:87:6c:71:07:5c: f6:eb:ac:ee:40:fb:56:78:1b:9e:ae:f6:e1:38:81: 07:96:41:19:4e:37:df:ee:e1:d2:4a:f4:f3:9f:7a: 9e:27:44:3d:fd:24:b1:3d:d3:6c:2e:84:0f:ca:78: 32:32:d0:95:e2:cb:ba:0f:6b:72:d1:52:aa:e2:3b: 3c:7b:62:37:fa:15:fd:7d:2e:ff:7c:67:c4:a4:a1: 43:85:d4:31:a1:8f:1f:eb:2e:41:05:61:93:43:97: 33:a0:ec:d4:12:34:ea:ce:e3:38:4a:e9:8b:43:ca: bd:c3:7e:ca:3c:c8:19:3e:81:ea:40:bd:b1:30:1d: 25:7a:55:9d:70:bb:45:8c:22:61:5b:af:35:a0:76: e8:ee:37:a7:1e:0d:e5:8b:55:73:c4:76:78:28:d6: 3b:75:ab:03:10:f8:df:3e:de:28:da:73:6b:64:11: 0a:10:a6:f2:64:06:82:21:08:45:65:e4:e2:5e:88: 98:cc:ce:32:5e:40:04:fd:9b:0f:bd:2a:17:a7:6d: 86:f4:41:9b:0c:3c:51:42:2f:18:48:9d:71:0c:c0: eb:e5:d6:fb:0d:ac:ae:8b:e5:7a:78:a0:f5:6b:13: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B8:D1:C5:F8:27:C9:B5:71:CD:70:85:23:6C:D9:BA:DE:07:5F:4B X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:24:3b:99:e7:d4:c0:b3:57:4f:f7:81:44:08:16:4f:39:d9: 4d:bd:86:8b:b7:6f:93:66:9a:f3:1f:1b:84:0e:30:29:bd:39: c1:73:c7:18:4d:40:a3:a3:e3:b7:c4:47:bf:d8:65:cd:a2:d3: ed:11:e0:a3:34:05:56:d2:bb:a1:45:bc:a4:a4:2a:45:4b:24: aa:1d:8a:7b:39:e8:e0:56:d5:19:4c:e1:9f:df:ad:7f:a5:51: b7:68:78:43:d8:27:ba:9a:ec:db:11:d7:75:86:c7:5f:1a:68: 29:cf:70:76:2f:d6:62:ac:a6:65:4e:64:f6:25:f1:38:dd:a4: bf:6b:3d:99:68:a0:70:65:9e:44:46:82:27:58:cd:ed:13:e8: 65:b1:74:cc:3d:aa:64:5b:92:8a:a5:e8:7b:b2:af:a3:c6:93: d2:ad:38:c3:e2:a3:56:34:3c:fc:33:e7:1d:90:81:25:b3:10: 0f:ad:aa:03:a6:73:bb:11:52:e8:b3:65:4e:11:cb:f4:7b:b1: 78:9a:bd:61:c7:79:8d:29:f7:18:d4:58:4e:7b:5f:6d:f9:34: 7b:c1:52:72:e5:d4:4b:be:37:22:83:e8:22:3a:20:69:da:17: 68:52:a0:7e:79:a6:21:b4:a6:dd:87:b3:fb:e4:f5:72:a4:84: e9:ce:bb:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjUwNTE0MjEyNjM1WhcNMjUwNTIxMjEyNjM1WjAYMRYwFAYD VQQDEw02ODI1MGE4Yi00NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoolJOC+0R717aNAb2tDNrTQekJYJApboh2xxB1z266zuQPtWeBuervbhOIEH lkEZTjff7uHSSvTzn3qeJ0Q9/SSxPdNsLoQPyngyMtCV4su6D2ty0VKq4js8e2I3 +hX9fS7/fGfEpKFDhdQxoY8f6y5BBWGTQ5czoOzUEjTqzuM4SumLQ8q9w37KPMgZ PoHqQL2xMB0lelWdcLtFjCJhW681oHbo7jenHg3li1VzxHZ4KNY7dasDEPjfPt4o 2nNrZBEKEKbyZAaCIQhFZeTiXoiYzM4yXkAE/ZsPvSoXp22G9EGbDDxRQi8YSJ1x DMDr5db7Dayui+V6eKD1axP5vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS40cX4 J8m1cc1whSNs2breB19LMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADJDuZ59TAs1dP94FECBZPOdlNvYaLt2+TZprzHxuEDjApvTnBc8cY TUCjo+O3xEe/2GXNotPtEeCjNAVW0ruhRbykpCpFSySqHYp7OejgVtUZTOGf361/ pVG3aHhD2Ce6muzbEdd1hsdfGmgpz3B2L9ZirKZlTmT2JfE43aS/az2ZaKBwZZ5E RoInWM3tE+hlsXTMPapkW5KKpeh7sq+jxpPSrTjD4qNWNDz8M+cdkIElsxAPraoD pnO7EVLos2VOEcv0e7F4mr1hx3mNKfcY1FhOe19t+TR7wVJy5dRLvjcig+giOiBp 2hdoUqB+eaYhtKbdh7P75PVypITpzrt8 -----END CERTIFICATE-----Generated at Fri May 16 14:43:40 2025 by rpki-client