$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json) Hash identifier: 2zuIXT+urtdHeJMAQOP9VOGiqXDS98oSja5YbxhNrMo= Subject key identifier: BF:83:1C:2C:D5:A2:1F:6B:59:9F:C8:21:55:FD:93:A5:CD:4C:21:60 Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft Manifest number: 01E5 Signing time: Sun 11 May 2025 01:41:00 +0000 Manifest this update: Sun 11 May 2025 01:41:00 +0000 Manifest next update: Sun 18 May 2025 01:41:00 +0000 Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: 0CL1xoGVBWnaR+2ctEPP9zw1PCEEYh+UTJ46bVnxiGc=) 2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: f6YvpcInK7aMZI/gTlnIjzNzS2LMqoG/bSzJ7lAf9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Validity Not Before: May 11 01:41:00 2025 GMT Not After : May 18 01:41:00 2025 GMT Subject: CN=6820002c-02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:20:da:bc:61:2f:a8:af:5d:fe:ae:ac:f0: c6:e1:d3:39:75:91:a1:60:d8:c4:20:65:a4:f8:fc: 75:68:07:57:8a:39:dd:f4:63:97:bc:d4:1a:39:e7: e0:0d:b3:5b:ff:dc:5e:03:c8:70:b7:d6:d1:e2:41: 4c:60:ed:78:19:95:17:8c:32:70:92:a3:37:99:54: b5:08:48:e2:3c:40:0c:09:45:26:f0:b3:82:47:2a: ea:0c:2e:9a:0b:6b:69:a4:de:23:a3:7a:74:95:2f: dd:83:7e:c6:61:ba:2a:b9:2e:59:99:8e:23:2b:76: 8c:af:e0:c5:e3:53:7c:e6:25:62:ce:64:f7:85:71: 6a:d9:14:f2:3a:18:fb:02:5b:71:6a:59:a4:6d:ce: b0:c4:e9:60:53:f2:28:7e:a1:56:f2:40:7f:3e:4b: 7c:af:6e:8f:c2:58:fa:31:22:f0:98:1c:70:77:6a: 85:79:97:00:35:59:26:d9:8c:29:60:91:35:af:35: c7:36:c9:79:0a:65:e9:de:bd:ac:81:8e:2b:0b:59: 9a:c9:8b:fc:c4:cf:f5:37:ca:d8:d2:c3:c9:63:0c: c5:a7:33:49:f9:af:30:74:43:ed:d9:00:1f:82:d0: 13:c0:4a:07:ba:46:9c:d9:f3:32:f2:d5:47:b3:ee: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:83:1C:2C:D5:A2:1F:6B:59:9F:C8:21:55:FD:93:A5:CD:4C:21:60 X509v3 Authority Key Identifier: keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d3:2a:ea:eb:72:42:9c:bd:cb:b1:09:1a:1c:89:55:67:e8: 89:ea:7b:74:c4:91:60:6b:45:93:a9:aa:89:19:6e:68:d4:00: 58:9a:20:8d:cf:67:b0:75:bd:5e:04:08:56:6e:ec:a6:2e:4c: c3:00:8a:eb:ed:8c:19:97:09:d7:73:a5:e4:bf:a3:22:ca:23: 1b:e4:63:f0:36:3c:42:b6:9a:f3:dc:ca:0c:b8:d2:0c:90:e2: cc:47:02:fe:9a:f1:f4:5b:5d:58:f6:5c:16:33:5b:a0:7c:7f: 68:a6:d0:4b:43:bb:4e:0a:df:03:3f:c2:2e:a5:f8:a4:7c:ed: 0b:d4:23:fd:86:44:bb:bb:12:05:7d:af:a2:fb:7f:95:ec:1d: c7:6e:49:0e:68:fe:ae:7b:0e:d9:30:c5:0b:88:b4:f5:3e:17: 2f:bc:ac:27:91:2c:c7:3b:89:79:2c:bd:32:cc:b5:d8:b7:e7: 09:4f:f3:bd:87:47:f5:9b:02:84:aa:ea:da:84:8a:c6:24:16: f6:9b:de:a0:b7:86:39:04:f8:bf:0f:df:ec:f1:11:ab:87:3a: d4:be:74:5f:29:0c:8b:99:20:c3:7f:f2:7a:15:2f:01:d1:a5: 36:48:f0:84:cb:33:0f:7f:85:10:c5:fe:2d:ae:10:b2:22:8d: cb:4d:c0:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5QzQxMTAvBgNVBAUTKDg0ODNGRDU0NTdEMTFFMDUxMzU1MjExMUY1QkEyRjM3 MTJFOTg1RjcwHhcNMjUwNTExMDE0MTAwWhcNMjUwNTE4MDE0MTAwWjAYMRYwFAYD VQQDEw02ODIwMDAyYy0wMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqMg2rxhL6ivXf6urPDG4dM5dZGhYNjEIGWk+Px1aAdXijnd9GOXvNQaOefg DbNb/9xeA8hwt9bR4kFMYO14GZUXjDJwkqM3mVS1CEjiPEAMCUUm8LOCRyrqDC6a C2tppN4jo3p0lS/dg37GYboquS5ZmY4jK3aMr+DF41N85iVizmT3hXFq2RTyOhj7 Altxalmkbc6wxOlgU/IofqFW8kB/Pkt8r26Pwlj6MSLwmBxwd2qFeZcANVkm2Ywp YJE1rzXHNsl5CmXp3r2sgY4rC1mayYv8xM/1N8rY0sPJYwzFpzNJ+a8wdEPt2QAf gtATwEoHukac2fMy8tVHs+7q5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+DHCzV oh9rWZ/IIVX9k6XNTCFgMB8GA1UdIwQYMBaAFISD/VRX0R4FE1UhEfW6LzcS6YX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzlDNC8xQTcwREM4NjRF OTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhnVVRWU0VSOWJvdk54THBo ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJUDlWRmZSSGdVVFZTRVI5Ym92TnhMcGhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzlDNC8xQTcwREM4NjRFOTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhn VVRWU0VSOWJvdk54THBoZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO0yrq63JCnL3LsQkaHIlVZ+iJ6nt0xJFga0WTqaqJGW5o1ABYmiCN z2ewdb1eBAhWbuymLkzDAIrr7YwZlwnXc6Xkv6MiyiMb5GPwNjxCtprz3MoMuNIM kOLMRwL+mvH0W11Y9lwWM1ugfH9optBLQ7tOCt8DP8IupfikfO0L1CP9hkS7uxIF fa+i+3+V7B3HbkkOaP6uew7ZMMULiLT1PhcvvKwnkSzHO4l5LL0yzLXYt+cJT/O9 h0f1mwKEqurahIrGJBb2m96gt4Y5BPi/D9/s8RGrhzrUvnRfKQyLmSDDf/J6FS8B 0aU2SPCEyzMPf4UQxf4trhCyIo3LTcDT -----END CERTIFICATE-----Generated at Sun May 11 15:26:35 2025 by rpki-client