$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: hYmav+2AybdU9pMLGwUQuYV2PC9Iaa1ftty7od87pbQ= Subject key identifier: 2B:F2:58:B5:A7:D2:C7:AC:D3:C6:8F:4F:08:E8:47:E7:C6:63:80:FB Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 0132 Signing time: Tue 13 May 2025 03:46:56 +0000 Manifest this update: Tue 13 May 2025 03:46:55 +0000 Manifest next update: Tue 20 May 2025 03:46:55 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: rKefKcMi2zeTtImrwZCK9i5yPOM7oAl3Fo5L1q1OAnE=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: Lj0YroS2X8LOR4hY25qUmswSSH1A4SRoLTfz7csDQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: May 13 03:46:55 2025 GMT Not After : May 20 03:46:55 2025 GMT Subject: CN=6822c0b0-ba52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:ab:97:d1:13:9e:0b:9a:74:92:a0:0d:78: 3d:c6:10:c7:14:40:aa:e1:48:f6:d5:d0:61:06:de: c9:9f:66:a8:75:50:be:c6:49:b1:e3:4d:0f:a9:32: 92:2c:24:ba:2a:cc:5c:55:8a:a3:4a:a4:b9:2b:e9: 35:aa:32:7c:36:35:9c:3a:8d:94:89:3f:63:19:cf: 58:e2:11:eb:c2:5e:fe:5f:b9:9b:42:28:67:48:df: d1:f5:a6:8f:08:1e:f9:86:81:05:05:e8:1b:e0:b1: 1a:93:24:e0:2f:b9:c1:d4:1c:49:d0:21:99:dc:2f: 6f:1c:8f:a1:c6:2b:f0:75:a5:85:41:eb:bf:be:19: d4:c9:b5:95:e5:29:58:15:bc:26:c8:05:00:59:70: 66:55:6f:3e:68:00:40:9e:57:69:8c:bd:08:3b:1f: 14:03:f9:b7:c0:19:c2:c8:14:b1:d4:8c:d8:a8:df: ef:e1:a0:e0:69:e5:ca:82:17:4d:cd:07:d8:4b:e5: 44:ad:ee:2a:01:03:ad:c1:b7:04:63:fd:cc:d5:51: 36:54:c8:71:c6:fe:b4:87:76:0e:45:f5:54:58:46: 91:ed:1e:e2:a3:90:07:6e:09:31:31:7f:43:fb:e3: 5e:ed:a4:18:50:d2:1f:50:22:65:df:8c:e5:e4:bc: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F2:58:B5:A7:D2:C7:AC:D3:C6:8F:4F:08:E8:47:E7:C6:63:80:FB X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2d:60:32:53:ff:ce:0c:cf:ae:b1:7d:d6:5d:35:27:a0:62: a4:4f:83:65:54:21:93:af:97:13:4f:e6:c2:1d:e8:bf:91:36: 7d:df:9f:05:ff:eb:f0:09:a4:ec:40:30:fe:64:10:ce:e9:9e: 12:d9:67:a1:5c:8d:5a:01:83:90:69:0b:47:81:48:44:02:27: e2:ff:fa:1f:eb:7a:95:48:56:53:dd:62:78:cd:51:ed:d5:cb: bd:b3:7d:ed:55:33:05:e3:e2:a8:c6:d0:fb:23:35:fb:ce:31: d9:cd:36:fb:2c:7b:40:1b:75:87:fc:c7:34:e5:d1:21:86:60: 68:67:57:17:61:54:37:15:74:13:b4:2c:f2:74:b6:62:36:eb: 0c:86:95:9b:29:2d:da:7e:2b:7e:c7:36:8b:76:da:f6:f5:4d: a4:b9:85:10:7e:d2:88:58:45:1e:4f:f4:2d:5c:42:94:bd:b4: 23:45:0a:30:05:3a:f6:b9:2c:18:f2:19:49:b8:6b:b3:a9:b4: c8:69:03:02:50:11:48:ed:c9:12:fb:5d:fb:fd:80:71:22:ed: 86:95:f2:1f:75:2e:b4:43:5a:39:20:88:f0:7f:78:18:4a:77: 6f:7b:36:8b:3c:e2:87:6e:e6:c3:f0:ef:5a:ce:9a:21:25:73: 8f:76:25:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUwNTEzMDM0NjU1WhcNMjUwNTIwMDM0NjU1WjAYMRYwFAYD VQQDEw02ODIyYzBiMC1iYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY6rl9ETnguadJKgDXg9xhDHFECq4Uj21dBhBt7Jn2aodVC+xkmx400PqTKS LCS6KsxcVYqjSqS5K+k1qjJ8NjWcOo2UiT9jGc9Y4hHrwl7+X7mbQihnSN/R9aaP CB75hoEFBegb4LEakyTgL7nB1BxJ0CGZ3C9vHI+hxivwdaWFQeu/vhnUybWV5SlY FbwmyAUAWXBmVW8+aABAnldpjL0IOx8UA/m3wBnCyBSx1IzYqN/v4aDgaeXKghdN zQfYS+VEre4qAQOtwbcEY/3M1VE2VMhxxv60h3YORfVUWEaR7R7io5AHbgkxMX9D ++Ne7aQYUNIfUCJl34zl5Lz2ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvyWLWn 0ses08aPTwjoR+fGY4D7MB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrLWAyU//ODM+usX3WXTUnoGKkT4NlVCGTr5cTT+bCHei/kTZ9358F /+vwCaTsQDD+ZBDO6Z4S2WehXI1aAYOQaQtHgUhEAifi//of63qVSFZT3WJ4zVHt 1cu9s33tVTMF4+KoxtD7IzX7zjHZzTb7LHtAG3WH/Mc05dEhhmBoZ1cXYVQ3FXQT tCzydLZiNusMhpWbKS3afit+xzaLdtr29U2kuYUQftKIWEUeT/QtXEKUvbQjRQow BTr2uSwY8hlJuGuzqbTIaQMCUBFI7ckS+137/YBxIu2GlfIfdS60Q1o5IIjwf3gY SndvezaLPOKHbubD8O9azpohJXOPdiV5 -----END CERTIFICATE-----Generated at Wed May 14 04:51:16 2025 by rpki-client