$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: MSeXNPcEkAtBLf4FaMbSjwxpDABSvwb0CxFPjTFkhfE= Subject key identifier: E1:DD:70:DA:87:B3:4E:D0:89:A6:02:55:9E:27:47:30:1B:15:C3:93 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0606 Signing time: Mon 12 May 2025 22:38:55 +0000 Manifest this update: Mon 12 May 2025 22:38:55 +0000 Manifest next update: Mon 19 May 2025 22:38:55 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: /wO7kRO4lUKi1mxsPQzLNk9dms5kQJFqSAIU5XWnx3s=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: May 12 22:38:55 2025 GMT Not After : May 19 22:38:55 2025 GMT Subject: CN=6822787f-fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:b1:ae:f8:26:71:f0:8a:80:2f:ff:2a:02: 55:bf:45:eb:fe:cb:80:76:54:14:78:1a:18:41:b3: bf:bb:8e:22:ef:65:75:cd:ec:27:66:50:b9:ae:5f: 91:8c:4c:9f:fd:85:59:d6:79:29:7a:0f:cf:d2:05: 09:18:0b:b3:57:3d:c6:b5:64:2d:fa:9d:0f:2d:50: 56:12:0e:a9:74:0f:a9:fb:f3:1a:12:03:42:26:6b: c3:6f:11:39:af:cb:14:e7:b0:29:1a:53:4d:a8:a4: e0:c9:ce:21:f4:3e:bc:73:af:12:31:5e:4f:54:aa: 2b:1b:84:9d:05:fa:78:08:c8:d1:a1:a8:15:5d:a7: f1:11:ce:72:28:61:9e:c1:c8:f2:9e:c8:34:3c:89: a0:f0:15:a7:c8:d4:06:e3:86:5d:c9:53:3f:b4:5a: dc:a8:a7:a4:d8:17:fd:2a:5f:9d:14:b5:34:9e:8c: 7d:ca:8b:34:76:35:2e:1c:71:97:62:65:83:82:d2: 4c:16:46:e9:bd:f0:9a:8f:ec:94:e2:21:62:fc:9d: c9:20:2e:ce:5a:5f:df:85:d2:35:9b:60:02:48:2e: f4:d0:6a:fa:8c:7a:33:66:2d:37:fd:cd:53:6e:8d: cb:7a:78:e5:bb:60:bc:08:41:07:79:99:f5:69:75: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DD:70:DA:87:B3:4E:D0:89:A6:02:55:9E:27:47:30:1B:15:C3:93 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7a:49:ac:08:09:5a:f3:ec:01:f8:7d:05:4f:18:8a:ed:48: c5:d4:5c:07:04:8f:87:e2:2f:3f:31:d1:2e:3c:e2:ed:22:84: 6c:c3:68:50:87:f9:a9:be:cd:d9:b2:e2:60:7d:80:f8:e9:28: b4:8e:a8:c4:1c:aa:f7:ec:38:bf:3a:87:ab:20:e0:9f:59:5b: 7c:f2:1f:e1:62:a9:46:c6:a9:64:f9:11:2e:4c:cb:d9:e6:4a: 51:2f:b6:44:e4:26:d5:85:23:9a:50:e8:13:03:89:b7:30:4a: 38:8e:16:b2:cf:fa:f8:08:d6:84:28:11:4c:13:be:72:e6:04: 9c:ca:7a:f1:a4:98:59:b3:43:0d:28:19:50:93:2d:21:f6:a5: 5e:d6:7f:f1:6d:52:de:05:9d:9f:fa:c3:71:64:5e:b9:e1:58: 86:d4:a8:d4:a5:eb:1d:13:26:7c:13:94:df:ca:4c:d7:5e:bf: fd:83:65:25:4f:35:18:06:8f:4b:e6:82:df:8d:d4:e6:b4:90: 60:52:20:2f:ad:1c:61:0a:a0:50:73:13:2b:18:4f:43:6e:3e: 3e:00:77:be:56:28:40:00:a3:74:61:b7:57:21:12:73:b1:b0: 07:09:a8:d8:d0:c3:e0:3e:de:8c:64:bc:fe:e6:6b:23:b2:98: 11:9a:b0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwNTEyMjIzODU1WhcNMjUwNTE5MjIzODU1WjAYMRYwFAYD VQQDEw02ODIyNzg3Zi1mZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttWxrvgmcfCKgC//KgJVv0Xr/suAdlQUeBoYQbO/u44i72V1zewnZlC5rl+R jEyf/YVZ1nkpeg/P0gUJGAuzVz3GtWQt+p0PLVBWEg6pdA+p+/MaEgNCJmvDbxE5 r8sU57ApGlNNqKTgyc4h9D68c68SMV5PVKorG4SdBfp4CMjRoagVXafxEc5yKGGe wcjynsg0PImg8BWnyNQG44ZdyVM/tFrcqKek2Bf9Kl+dFLU0nox9yos0djUuHHGX YmWDgtJMFkbpvfCaj+yU4iFi/J3JIC7OWl/fhdI1m2ACSC700Gr6jHozZi03/c1T bo3Lenjlu2C8CEEHeZn1aXXRdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHdcNqH s07QiaYCVZ4nRzAbFcOTMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsekmsCAla8+wB+H0FTxiK7UjF1FwHBI+H4i8/MdEuPOLtIoRsw2hQ h/mpvs3ZsuJgfYD46Si0jqjEHKr37Di/OoerIOCfWVt88h/hYqlGxqlk+REuTMvZ 5kpRL7ZE5CbVhSOaUOgTA4m3MEo4jhayz/r4CNaEKBFME75y5gScynrxpJhZs0MN KBlQky0h9qVe1n/xbVLeBZ2f+sNxZF654ViG1KjUpesdEyZ8E5TfykzXXr/9g2Ul TzUYBo9L5oLfjdTmtJBgUiAvrRxhCqBQcxMrGE9Dbj4+AHe+VihAAKN0YbdXIRJz sbAHCajY0MPgPt6MZLz+5msjspgRmrAP -----END CERTIFICATE-----Generated at Tue May 13 05:26:18 2025 by rpki-client