$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: sE7h5Dy7MoJEoN3U+fG1OYfiKD7XxCRoyArUqcSg1IA= Subject key identifier: 5E:40:16:0F:75:7D:19:49:9F:01:12:2E:76:17:4C:A0:6A:B1:13:DD Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 0116 Signing time: Fri 09 May 2025 03:53:05 +0000 Manifest this update: Fri 09 May 2025 03:53:04 +0000 Manifest next update: Fri 16 May 2025 03:53:04 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: QXRAETU7XojqHkqVlBZR+n90JnYleKBTwUky45UI08Q=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: May 9 03:53:04 2025 GMT Not After : May 16 03:53:04 2025 GMT Subject: CN=681d7c20-a951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:19:0a:ae:52:07:9f:62:07:b3:d1:02:26: cd:01:1a:e8:5d:e1:6b:1c:cf:89:43:02:bc:6a:5f: 7a:dd:2c:ec:11:7f:c8:b0:7d:9c:39:33:c4:39:bd: f1:52:07:bb:ea:d9:de:4e:84:4c:de:7c:5a:06:23: f9:85:f6:47:a5:06:53:42:d6:91:2a:c2:35:66:67: ad:30:eb:cf:44:09:20:b5:9e:ca:1c:12:d3:62:7e: a1:09:a7:eb:07:37:81:20:9a:08:71:14:b9:5b:ca: 6b:5e:3c:43:3a:c9:2b:e6:b0:e1:e9:17:e5:00:e8: d4:5a:00:06:1c:b4:56:e1:31:3c:28:2d:93:e9:b2: 90:7c:aa:3c:51:3d:49:bb:4e:1b:e4:f2:9b:32:c2: 24:fd:89:80:ea:75:5b:94:b8:d5:ed:ec:c8:cb:39: e6:75:09:f7:eb:84:d9:01:5a:2d:b1:c5:c9:04:61: 40:2f:48:a1:56:2a:28:b4:1e:a6:85:9f:8c:66:8f: aa:bb:ff:40:a5:0f:bf:ac:30:e8:e2:4f:0b:24:c7: 6f:fe:9a:49:0d:e8:04:02:0e:5e:17:e8:58:19:cb: e4:72:55:e6:cf:7c:b6:9d:36:c2:c0:34:a4:2c:35: 13:a0:80:d9:26:7a:2e:66:b0:d0:a9:6f:f4:04:5b: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:40:16:0F:75:7D:19:49:9F:01:12:2E:76:17:4C:A0:6A:B1:13:DD X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3f:54:dd:18:4c:eb:b7:aa:bb:08:b9:74:6a:22:3e:91:88: 65:ea:e7:79:5e:f6:dd:65:af:29:ee:d8:d0:90:96:91:41:5c: 20:c0:0f:77:f2:f8:11:b7:19:e5:b5:fc:cc:48:e4:95:d7:cc: d2:98:9a:ac:db:5b:dc:26:34:6b:16:74:61:10:45:b4:f8:90: 30:07:cc:fc:61:b2:68:bf:c8:43:d1:6b:5a:58:93:b9:d6:fd: d5:59:88:a8:d8:07:47:03:09:c7:23:9e:0a:4e:bf:c2:4b:1a: 29:a5:40:37:9a:a7:79:5d:04:0a:9e:38:8c:3a:7c:68:e6:90: e7:da:49:24:4d:96:70:9e:5e:77:ef:81:92:54:e6:76:a9:91: 71:2e:08:b1:bf:8a:b2:47:d4:55:97:9d:4c:5a:e8:1b:f3:6f: c1:00:c3:97:f4:7a:ae:d5:39:ef:a5:cd:aa:93:82:2e:eb:a6: 54:f0:33:b4:69:27:f6:0f:72:03:74:ff:2f:2c:10:b2:c1:b7: 36:0d:e9:ce:89:27:30:69:0d:cb:6b:eb:cc:e3:b9:c2:7d:c2: a1:ca:16:a1:e6:ef:aa:11:18:7e:c0:29:14:61:bc:e0:97:bc: 2b:16:0c:fd:ce:66:61:ba:4a:3d:50:ba:84:4d:0a:c1:e3:2d: d7:07:2e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUwNTA5MDM1MzA0WhcNMjUwNTE2MDM1MzA0WjAYMRYwFAYD VQQDEw02ODFkN2MyMC1hOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaAZCq5SB59iB7PRAibNARroXeFrHM+JQwK8al963SzsEX/IsH2cOTPEOb3x Uge76tneToRM3nxaBiP5hfZHpQZTQtaRKsI1ZmetMOvPRAkgtZ7KHBLTYn6hCafr BzeBIJoIcRS5W8prXjxDOskr5rDh6RflAOjUWgAGHLRW4TE8KC2T6bKQfKo8UT1J u04b5PKbMsIk/YmA6nVblLjV7ezIyznmdQn364TZAVotscXJBGFAL0ihViootB6m hZ+MZo+qu/9ApQ+/rDDo4k8LJMdv/ppJDegEAg5eF+hYGcvkclXmz3y2nTbCwDSk LDUToIDZJnouZrDQqW/0BFt9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5AFg91 fRlJnwESLnYXTKBqsRPdMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsP1TdGEzrt6q7CLl0aiI+kYhl6ud5XvbdZa8p7tjQkJaRQVwgwA93 8vgRtxnltfzMSOSV18zSmJqs21vcJjRrFnRhEEW0+JAwB8z8YbJov8hD0WtaWJO5 1v3VWYio2AdHAwnHI54KTr/CSxoppUA3mqd5XQQKnjiMOnxo5pDn2kkkTZZwnl53 74GSVOZ2qZFxLgixv4qyR9RVl51MWugb82/BAMOX9Hqu1Tnvpc2qk4Iu66ZU8DO0 aSf2D3IDdP8vLBCywbc2DenOiScwaQ3La+vM47nCfcKhyhah5u+qERh+wCkUYbzg l7wrFgz9zmZhuko9ULqETQrB4y3XBy5S -----END CERTIFICATE-----Generated at Sat May 10 00:09:49 2025 by rpki-client