$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json) Hash identifier: S6KIdRGPK/GK588mrh2nM1f8Hn7IiTp0RMF7rrQYpO0= Subject key identifier: A3:C0:FA:6B:1B:BD:10:67:7F:0D:E8:48:FC:DC:03:34:C1:5E:0F:F5 Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft Manifest number: 44 Signing time: Sun 11 May 2025 06:08:30 +0000 Manifest this update: Sun 11 May 2025 06:08:30 +0000 Manifest next update: Sun 18 May 2025 06:08:30 +0000 Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: kBLzM5gaTiXQBCa8PBR4DL3yJ3djgXVMW8X1zpcGNgg=) 2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=) 3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Validity Not Before: May 11 06:08:30 2025 GMT Not After : May 18 06:08:30 2025 GMT Subject: CN=68203ede-cabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:67:89:4c:dc:ed:ba:6b:01:ab:a3:d3:aa: a9:a9:0f:a4:6e:d8:e6:ee:30:11:88:e2:10:6c:6c: 11:3d:7e:21:51:d7:ac:ef:bb:c6:07:21:63:ad:73: 58:5b:b8:98:09:8d:e4:c3:07:0c:60:59:9a:6b:25: af:29:6d:a4:ef:bb:34:36:80:fb:ed:05:6f:de:c7: 72:53:7f:12:13:90:80:9d:f0:c3:4f:07:ca:fd:0e: bb:9c:13:ff:76:8f:04:71:1d:53:73:9c:94:09:5d: 28:b9:e8:bd:23:f0:73:b3:95:f4:b7:7d:e8:a9:08: 45:9b:f2:b8:cb:65:bc:2a:d0:04:b8:ef:9a:2f:8c: c3:57:4f:76:25:92:22:71:1b:2b:20:91:a7:85:62: f7:2a:40:d3:46:bc:7c:be:57:14:10:ee:ef:d7:67: 5b:3c:54:2a:48:24:1d:79:e7:a3:52:e4:61:97:31: cd:e6:eb:4f:67:0c:5f:39:32:cd:38:a3:af:d0:17: fd:82:a0:84:69:7a:dc:8c:f4:61:59:ee:b1:c3:b7: fb:80:ff:0d:d0:2d:c8:b6:58:d7:87:cb:aa:d9:78: ec:e8:fa:a8:e3:97:e6:2c:61:3d:64:5c:8d:b5:d2: 53:39:15:03:21:61:2e:1b:3a:15:94:48:3a:7b:53: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:FA:6B:1B:BD:10:67:7F:0D:E8:48:FC:DC:03:34:C1:5E:0F:F5 X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:31:ba:b6:9f:d5:94:0c:73:1c:78:50:0a:1a:c4:fe:ac:c1: bb:f2:d4:59:5d:83:ec:b5:4e:94:bd:9d:50:93:df:dc:a8:0c: 11:d3:97:f5:fb:4d:ac:7b:1b:f7:f4:39:8d:d9:4a:61:2e:7e: ac:e6:ce:7d:d3:7c:5c:79:d5:79:3f:56:1f:c1:d5:0e:c3:b2: 05:30:2d:17:f6:4d:ea:c9:35:4b:0c:14:0e:2d:7e:8c:26:c9: 1c:19:fd:9c:d4:85:e4:b4:ce:f5:e8:0c:34:df:20:9e:ea:6d: 43:6c:a3:93:b8:26:62:aa:d7:41:0d:81:04:b6:6c:0f:d1:b0: 65:9d:58:fb:dc:2a:cf:15:c3:76:b5:58:4d:cb:62:11:82:28: 31:d5:26:70:a0:ea:3d:fc:7f:3e:5a:18:7e:28:06:6c:09:4c: a2:2d:c2:10:e0:44:a7:f0:d1:47:50:6a:72:d6:f8:83:9b:c3: 06:8b:92:77:ea:68:2d:f0:8b:48:2b:8b:52:41:23:6e:8a:0e: d6:94:4d:d4:9e:0f:d8:d8:e9:29:95:69:ca:ab:4a:73:46:13: 30:64:ef:1f:06:48:e1:6b:85:dd:35:47:66:a7:35:aa:8d:3f: c6:da:12:f6:4e:c0:e7:dc:ee:65:91:e5:f8:1d:7e:88:a1:4f: af:80:ad:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEzMjczM0Q2NTQw OTFFM0QyQjAeFw0yNTA1MTEwNjA4MzBaFw0yNTA1MTgwNjA4MzBaMBgxFjAUBgNV BAMTDTY4MjAzZWRlLWNhYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2eGeJTNztumsBq6PTqqmpD6Ru2ObuMBGI4hBsbBE9fiFR16zvu8YHIWOtc1hb uJgJjeTDBwxgWZprJa8pbaTvuzQ2gPvtBW/ex3JTfxITkICd8MNPB8r9DrucE/92 jwRxHVNznJQJXSi56L0j8HOzlfS3feipCEWb8rjLZbwq0AS475ovjMNXT3YlkiJx GysgkaeFYvcqQNNGvHy+VxQQ7u/XZ1s8VCpIJB1556NS5GGXMc3m609nDF85Ms04 o6/QF/2CoIRpetyM9GFZ7rHDt/uA/w3QLci2WNeHy6rZeOzo+qjjl+YsYT1kXI21 0lM5FQMhYS4bOhWUSDp7U78VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo8D6axu9 EGd/DehI/NwDNMFeD/UwHwYDVR0jBBgwFoAUvotHM7Guikc2t+kTJzPWVAkePSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzdCOEJENkNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdm90SE03R3Vpa2MydC1rVEp6UFdWQWtlUFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzdCOEJENkNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtj MnQta1RKelBXVkFrZVBTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGwxuraf1ZQMcxx4UAoaxP6swbvy1Fldg+y1TpS9nVCT39yoDBHTl/X7 Tax7G/f0OY3ZSmEufqzmzn3TfFx51Xk/Vh/B1Q7DsgUwLRf2TerJNUsMFA4tfowm yRwZ/ZzUheS0zvXoDDTfIJ7qbUNso5O4JmKq10ENgQS2bA/RsGWdWPvcKs8Vw3a1 WE3LYhGCKDHVJnCg6j38fz5aGH4oBmwJTKItwhDgRKfw0UdQanLW+IObwwaLknfq aC3wi0gri1JBI26KDtaUTdSeD9jY6SmVacqrSnNGEzBk7x8GSOFrhd01R2anNaqN P8baEvZOwOfc7mWR5fgdfoihT6+ArSE= -----END CERTIFICATE-----Generated at Mon May 12 07:15:06 2025 by rpki-client