$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: RuiBA9PzSLFxt8fpXF2McoIE5v4xeHiBc54HCXJFkOQ= Subject key identifier: C5:57:61:6E:0D:97:B0:50:9B:31:F0:F6:BD:BA:CA:01:AD:5E:0C:EA Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: 8D Signing time: Sun 11 May 2025 05:12:39 +0000 Manifest this update: Sun 11 May 2025 05:12:39 +0000 Manifest next update: Sun 18 May 2025 05:12:39 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: Gst5G+e5Xt7TvvcJ8/GEWS7xGjszRM4IZMlu2Dc5JTg=) 2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: May 11 05:12:39 2025 GMT Not After : May 18 05:12:39 2025 GMT Subject: CN=682031c7-8d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:22:ad:1f:ff:e2:16:75:8f:96:d8:92:30: 45:89:9b:39:c4:e7:91:12:86:8a:05:f7:06:df:7d: f2:18:90:d5:91:2c:28:84:5c:fb:9a:06:d5:d7:74: 05:ba:46:84:9a:48:65:45:23:7c:39:c1:7f:e3:1e: 9d:5e:64:d7:c8:b2:47:df:de:fe:da:58:c1:64:4c: 61:fd:ae:20:d6:10:24:66:3c:21:b0:4b:e9:a5:6a: 14:c1:b6:20:98:e2:d5:a8:a5:94:67:56:84:cc:61: 2d:ec:fa:47:42:c4:37:e4:23:28:66:78:92:b9:e6: 2b:65:3c:68:a9:01:25:50:ba:13:a6:af:49:d3:eb: db:f3:77:25:95:c7:3c:fa:65:ac:68:74:6f:42:e9: b8:92:ae:ac:be:dd:0c:ba:4a:c7:29:32:43:d6:0d: 76:aa:93:53:a2:bf:4b:27:5e:45:e7:5d:6e:58:8a: 6b:2b:39:0c:3b:68:86:f4:4d:69:8e:07:1a:32:d8: 44:d7:83:5d:bf:ee:7e:f4:fb:b7:8f:08:a3:5c:58: ca:64:1b:28:cf:b9:7f:b0:bc:33:21:80:fc:50:f7: d0:83:c7:66:ca:35:b9:da:73:df:14:07:4a:ad:e3: 87:5e:51:3c:98:bd:87:b9:5e:c4:05:5e:c4:e0:1c: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:61:6E:0D:97:B0:50:9B:31:F0:F6:BD:BA:CA:01:AD:5E:0C:EA X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e6:1b:eb:33:8c:4e:c4:84:5a:45:81:ec:da:0d:20:c0:36: 17:2e:2e:8e:9c:ca:db:4b:bb:db:6b:77:0b:74:83:4a:12:7f: 2a:56:f0:c9:91:f5:14:c6:31:82:71:90:00:ee:58:97:91:22: 71:ec:2a:cc:87:5d:9c:2f:87:ae:b2:50:cf:e4:0e:87:cd:3a: 96:07:5c:e8:69:0c:25:bf:25:09:18:87:df:49:59:89:0b:92: fd:76:62:cc:32:b8:e7:05:60:34:3a:83:99:c4:71:3e:a8:c3: 7e:b1:6e:a5:09:0f:16:70:18:80:6c:51:f8:38:a3:8d:30:e8: b0:08:06:2f:3f:f0:d1:76:43:06:83:b4:a3:ca:f0:df:13:b4: c9:56:ab:ad:2b:6d:ff:dd:ce:76:74:78:10:1f:83:5d:8c:8e: 02:84:05:d3:ed:fa:4f:39:0b:0b:a8:73:b2:5c:20:ca:08:45: 00:59:8e:9f:7e:73:a5:cc:a6:65:c0:c1:75:4b:1f:fb:14:54: f4:4a:78:a0:d8:67:5a:b5:a1:bf:fa:6a:bb:cf:6d:5d:a8:f5: ea:b1:27:91:8d:3f:b2:4e:36:53:47:b5:ac:e0:e8:59:07:1b: 26:34:71:07:1c:b3:97:c8:12:70:f9:e0:cc:5b:19:bd:70:11: b1:3f:c6:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUwNTExMDUxMjM5WhcNMjUwNTE4MDUxMjM5WjAYMRYwFAYD VQQDEw02ODIwMzFjNy04ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHUirR//4hZ1j5bYkjBFiZs5xOeREoaKBfcG333yGJDVkSwohFz7mgbV13QF ukaEmkhlRSN8OcF/4x6dXmTXyLJH397+2ljBZExh/a4g1hAkZjwhsEvppWoUwbYg mOLVqKWUZ1aEzGEt7PpHQsQ35CMoZniSueYrZTxoqQElULoTpq9J0+vb83cllcc8 +mWsaHRvQum4kq6svt0MukrHKTJD1g12qpNTor9LJ15F511uWIprKzkMO2iG9E1p jgcaMthE14Ndv+5+9Pu3jwijXFjKZBsoz7l/sLwzIYD8UPfQg8dmyjW52nPfFAdK reOHXlE8mL2HuV7EBV7E4BxgKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVXYW4N l7BQmzHw9r26ygGtXgzqMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA45hvrM4xOxIRaRYHs2g0gwDYXLi6OnMrbS7vba3cLdINKEn8qVvDJ kfUUxjGCcZAA7liXkSJx7CrMh12cL4euslDP5A6HzTqWB1zoaQwlvyUJGIffSVmJ C5L9dmLMMrjnBWA0OoOZxHE+qMN+sW6lCQ8WcBiAbFH4OKONMOiwCAYvP/DRdkMG g7SjyvDfE7TJVqutK23/3c52dHgQH4NdjI4ChAXT7fpPOQsLqHOyXCDKCEUAWY6f fnOlzKZlwMF1Sx/7FFT0Snig2GdataG/+mq7z21dqPXqsSeRjT+yTjZTR7Ws4OhZ BxsmNHEHHLOXyBJw+eDMWxm9cBGxP8YU -----END CERTIFICATE-----Generated at Tue May 13 02:36:11 2025 by rpki-client