$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json) Hash identifier: nupyeciCVWpMeedRwhOryrpIigyqd22ttn4aJtw9iqw= Subject key identifier: 94:10:33:A7:FC:7A:EA:D9:C7:D3:0E:FA:0A:5E:CE:FC:C1:E3:2E:95 Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft Manifest number: 8F Signing time: Thu 15 May 2025 05:45:45 +0000 Manifest this update: Thu 15 May 2025 05:45:44 +0000 Manifest next update: Thu 22 May 2025 05:45:44 +0000 Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: gw49+YM72uAxbJCdwR0B2fVLDqEjfdWWE7ndmanTawI=) 2: D4FC5DAE5B9E11EF9205B45BC4F9AE02.roa (hash: 01FcOCzumKzY/vQ8wHIJFFKXgIpVBxtq1T3eDI1dtgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: May 15 05:45:44 2025 GMT Not After : May 22 05:45:44 2025 GMT Subject: CN=68257f88-eb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:da:c0:33:85:e6:65:db:f7:e2:39:86:28: 30:27:ed:86:f5:7f:c4:87:fb:2c:fc:4c:64:be:c0: 88:23:bf:fb:34:c6:57:71:62:25:48:08:78:fa:6e: a5:c8:80:fc:ba:ac:d2:dc:db:0e:bd:dc:1f:b0:98: 59:28:38:8f:e0:96:c7:05:f8:a2:97:02:2e:d3:1f: 16:bc:68:f3:58:92:56:5d:3a:07:62:f0:04:b6:d1: 40:bd:f7:6d:9b:b4:38:b4:7e:84:f7:96:fa:da:ad: b4:35:54:cc:3f:27:dc:ef:5e:c4:39:b0:1d:74:7b: 80:81:68:fd:c4:8f:c0:53:5b:af:fd:cb:71:a3:93: f4:01:32:15:e2:2f:6d:b9:f7:b5:48:a2:f2:4c:ee: 59:38:1d:d0:03:d3:8e:a7:05:f0:19:1d:24:9d:45: 27:de:21:eb:3a:70:a6:38:21:c2:a5:88:e6:22:72: f2:da:7d:0e:9a:9b:b9:b6:a1:8a:f6:1b:93:a0:42: 69:07:d2:c0:0a:de:f0:07:06:5a:dd:0f:32:41:50: 99:42:49:89:da:3a:86:f9:9f:40:1c:d6:77:04:ac: 49:74:d2:e0:49:d7:3f:99:e7:ae:28:99:6a:74:ab: f4:3f:12:99:1f:90:b4:5e:0d:66:f8:b6:8d:61:08: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:33:A7:FC:7A:EA:D9:C7:D3:0E:FA:0A:5E:CE:FC:C1:E3:2E:95 X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:90:34:14:e4:c1:8f:49:ba:49:0b:8f:7f:d1:95:07:3e:f8: 34:c2:e0:8e:a7:06:b9:84:70:8e:4f:77:db:1b:90:c7:36:90: 74:66:e8:0f:e8:1f:ef:89:49:3b:61:74:00:63:26:c4:7b:14: 4d:3a:3a:d3:1d:cb:60:53:d3:a3:da:3d:63:32:2e:4e:0d:7b: e9:25:03:9b:c4:8c:85:78:c3:96:69:c1:71:3c:0e:f7:24:d4: e6:23:f1:a4:11:db:cf:73:3e:6e:13:10:ea:2b:c3:8a:eb:0e: fe:0e:49:63:a6:9f:36:22:9f:07:93:0b:35:eb:ab:ea:e1:66: fe:41:19:72:f2:8f:b1:61:ce:84:39:05:43:de:35:19:92:3a: dc:95:db:46:13:84:47:fa:e3:e3:e2:3a:8a:9b:f0:f0:b0:6a: da:96:b8:99:fc:40:6e:e5:7a:1a:77:23:c3:b4:ec:57:53:c0: c2:9f:03:61:cd:af:a3:a5:aa:ab:59:b1:c7:8b:75:2e:ff:9c: c3:e7:a3:03:b7:21:e7:79:09:71:93:4d:eb:1f:f7:af:72:28: f2:77:b4:89:62:0c:2b:90:8e:aa:f4:f0:8d:87:88:2a:98:18: 21:af:bd:93:08:89:4d:1f:3f:7c:62:84:ee:3f:e4:3d:6a:b3: b6:69:32:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjUwNTE1MDU0NTQ0WhcNMjUwNTIyMDU0NTQ0WjAYMRYwFAYD VQQDEw02ODI1N2Y4OC1lYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMvawDOF5mXb9+I5higwJ+2G9X/Eh/ss/ExkvsCII7/7NMZXcWIlSAh4+m6l yID8uqzS3NsOvdwfsJhZKDiP4JbHBfiilwIu0x8WvGjzWJJWXToHYvAEttFAvfdt m7Q4tH6E95b62q20NVTMPyfc717EObAddHuAgWj9xI/AU1uv/ctxo5P0ATIV4i9t ufe1SKLyTO5ZOB3QA9OOpwXwGR0knUUn3iHrOnCmOCHCpYjmInLy2n0Ompu5tqGK 9huToEJpB9LACt7wBwZa3Q8yQVCZQkmJ2jqG+Z9AHNZ3BKxJdNLgSdc/meeuKJlq dKv0PxKZH5C0Xg1m+LaNYQgPMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQQM6f8 eurZx9MO+gpezvzB4y6VMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS b1JQeWVpcFU0c0M0MWEtelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJkDQU5MGPSbpJC49/0ZUHPvg0wuCOpwa5hHCOT3fbG5DHNpB0ZugP 6B/viUk7YXQAYybEexRNOjrTHctgU9Oj2j1jMi5ODXvpJQObxIyFeMOWacFxPA73 JNTmI/GkEdvPcz5uExDqK8OK6w7+Dkljpp82Ip8Hkws166vq4Wb+QRly8o+xYc6E OQVD3jUZkjrcldtGE4RH+uPj4jqKm/DwsGralriZ/EBu5XoadyPDtOxXU8DCnwNh za+jpaqrWbHHi3Uu/5zD56MDtyHneQlxk03rH/evcijyd7SJYgwrkI6q9PCNh4gq mBghr72TCIlNHz98YoTuP+Q9arO2aTId -----END CERTIFICATE-----Generated at Sat May 17 00:11:22 2025 by rpki-client