$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: 0C2nbWzFgEQNHq/Sx1eJo8djDXqM+rYyug1svTFHOy8= Subject key identifier: 37:E4:00:AA:28:88:C4:1E:3C:00:0B:0F:E0:79:B6:CD:B4:08:E6:D8 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 0273 Signing time: Tue 13 May 2025 01:30:16 +0000 Manifest this update: Tue 13 May 2025 01:30:16 +0000 Manifest next update: Tue 20 May 2025 01:30:16 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: jut10Pq6izdEwKGyFpQWB3mRCRZDsT4gKVp4/Q/Zx8M=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: May 13 01:30:16 2025 GMT Not After : May 20 01:30:16 2025 GMT Subject: CN=6822a0a8-c4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:d0:90:7c:0c:e0:5b:e8:52:dc:d7:e9:54: a4:0a:32:d9:15:f6:82:80:36:be:db:b4:85:ad:82: 62:85:91:dd:db:81:5e:df:69:4c:bf:84:a9:23:64: 8b:6d:9c:b8:10:6f:1d:82:4c:86:64:90:89:00:af: 47:ea:5f:c8:ff:07:0f:8f:09:10:f2:ce:80:7e:02: 0f:ec:54:b5:03:b3:27:51:f2:08:2f:b8:c1:30:f5: b2:ee:ee:5c:6a:43:e4:56:38:d4:16:16:7e:17:ec: 82:cd:29:f2:97:aa:9d:d9:56:43:71:d2:ce:44:ae: 38:dc:ee:57:ac:b0:37:bd:1b:a1:f9:b3:37:38:58: 84:74:e3:16:41:22:43:59:b0:2f:a6:85:54:f7:ed: 26:3d:48:3b:75:4f:cc:38:7b:9f:cf:9f:04:5a:d7: 14:88:bb:f1:3d:8b:bf:ce:de:5c:c1:fb:0b:3d:3f: 6d:35:9f:0e:15:8e:82:16:8f:d0:d7:62:ee:3a:4c: 0a:c5:4d:bb:7e:b0:95:1c:17:b5:a0:4b:55:20:79: a4:a9:ee:44:6d:a1:25:14:c5:c3:1a:8c:24:66:1f: a4:d8:f9:47:ca:59:74:72:42:9c:15:c7:c6:48:68: 44:81:4d:3d:01:fb:e4:ed:ec:de:43:f2:3a:de:8c: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E4:00:AA:28:88:C4:1E:3C:00:0B:0F:E0:79:B6:CD:B4:08:E6:D8 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:37:1d:33:99:fc:0f:b2:ad:05:dd:bc:6b:58:40:ce:db:f9: 9d:ed:06:9e:9a:11:cd:da:9f:f1:56:eb:93:4f:3e:ea:bd:7d: 6d:38:6c:d6:b3:2f:21:8f:ff:1c:0c:23:35:8c:2e:5f:f2:4f: 71:e7:62:a8:94:e9:b0:df:a7:9b:d8:58:c7:3c:61:81:5d:be: ef:da:bb:c8:54:fb:7f:3e:9a:b3:56:73:9f:28:fd:92:55:dc: 24:bf:9f:52:19:86:8c:3d:5a:f4:51:71:3a:ea:38:54:bf:60: 4b:4c:19:4d:df:ae:ed:07:07:41:ca:67:72:fb:3e:8d:2d:fc: 2c:18:a6:3f:96:d4:83:9f:f1:d6:fd:85:bd:b7:53:87:54:2d: 9e:8b:99:d1:a4:a5:0d:4b:0b:14:02:bc:a1:bc:55:e2:e1:43: 4c:93:26:df:67:01:d0:78:9c:6f:25:f8:d2:ac:71:eb:67:94: fc:22:a9:be:df:47:44:8f:d0:0f:ec:b2:49:b3:58:d0:9f:66: fa:71:4e:28:06:45:6a:a0:5c:04:ff:90:7e:2a:16:6b:f2:90: 22:30:f3:5d:a0:7e:17:1c:9b:af:e7:a8:b7:d6:e9:dc:3e:8c: 07:92:f2:d9:e7:8e:a1:d4:3a:1e:19:3c:c4:b7:06:34:96:76: 92:2a:cf:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwNTEzMDEzMDE2WhcNMjUwNTIwMDEzMDE2WjAYMRYwFAYD VQQDEw02ODIyYTBhOC1jNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnovQkHwM4FvoUtzX6VSkCjLZFfaCgDa+27SFrYJihZHd24Fe32lMv4SpI2SL bZy4EG8dgkyGZJCJAK9H6l/I/wcPjwkQ8s6AfgIP7FS1A7MnUfIIL7jBMPWy7u5c akPkVjjUFhZ+F+yCzSnyl6qd2VZDcdLORK443O5XrLA3vRuh+bM3OFiEdOMWQSJD WbAvpoVU9+0mPUg7dU/MOHufz58EWtcUiLvxPYu/zt5cwfsLPT9tNZ8OFY6CFo/Q 12LuOkwKxU27frCVHBe1oEtVIHmkqe5EbaElFMXDGowkZh+k2PlHyll0ckKcFcfG SGhEgU09Afvk7ezeQ/I63oy3EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfkAKoo iMQePAALD+B5ts20CObYMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Nx0zmfwPsq0F3bxrWEDO2/md7QaemhHN2p/xVuuTTz7qvX1tOGzW sy8hj/8cDCM1jC5f8k9x52KolOmw36eb2FjHPGGBXb7v2rvIVPt/PpqzVnOfKP2S Vdwkv59SGYaMPVr0UXE66jhUv2BLTBlN367tBwdBymdy+z6NLfwsGKY/ltSDn/HW /YW9t1OHVC2ei5nRpKUNSwsUAryhvFXi4UNMkybfZwHQeJxvJfjSrHHrZ5T8Iqm+ 30dEj9AP7LJJs1jQn2b6cU4oBkVqoFwE/5B+KhZr8pAiMPNdoH4XHJuv56i31unc PowHkvLZ546h1DoeGTzEtwY0lnaSKs93 -----END CERTIFICATE-----Generated at Wed May 14 09:34:33 2025 by rpki-client