$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: Wvol2feq1Lqn6v4c7u95a4KdUTkOr7QF4O/f/Kl+FDU= Subject key identifier: D8:1B:88:CA:C3:54:92:0E:A1:F2:63:E4:9C:71:55:27:49:48:0C:88 Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 45 Signing time: Tue 13 May 2025 06:39:56 +0000 Manifest this update: Tue 13 May 2025 06:39:56 +0000 Manifest next update: Tue 20 May 2025 06:39:56 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: q8UVawzU+CB8q7Rln/HgUFJoQubhJ52UkJHAhBwgDMo=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: May 13 06:39:56 2025 GMT Not After : May 20 06:39:56 2025 GMT Subject: CN=6822e93c-42f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:6d:4c:b4:95:62:66:e6:0d:6b:88:13:d7: 4e:e5:f6:6d:d7:2d:3e:1b:de:31:77:e3:95:76:78: 71:ee:90:e4:4e:12:01:fc:9f:75:89:17:57:38:53: ea:a1:71:98:ea:7b:a6:cd:bc:41:94:62:9f:02:86: fd:8b:2a:ea:b8:10:18:65:fd:39:87:9b:75:67:86: c4:5e:fa:b8:dd:4f:a2:95:64:78:89:65:95:5d:5e: 58:24:b0:41:b0:ef:6b:1a:c5:8b:54:db:2d:1c:b3: b9:82:67:14:b3:93:02:49:44:54:fa:c7:b5:26:14: 5b:d6:93:88:d2:da:1b:d8:bd:1e:30:2e:d9:19:5c: c8:4a:79:6e:08:ac:18:af:eb:b5:2f:94:ce:03:1d: 10:85:44:54:d1:7d:5a:a8:fd:9d:9c:4c:19:6e:17: 24:21:47:ff:e6:6f:d3:3b:35:1f:24:be:39:13:46: 85:fe:f5:83:be:3f:70:7a:7c:4c:c0:b5:e2:a9:79: 8a:08:01:c5:97:53:62:3a:34:a0:c5:4e:1b:37:17: 41:7e:db:5a:f3:2a:98:01:dd:4b:9f:64:76:6f:64: 2a:ac:22:e4:cd:50:29:95:d1:8e:4c:39:77:78:5e: 60:b6:37:24:ab:2c:10:ce:b9:fc:fe:8f:41:bf:f5: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:88:CA:C3:54:92:0E:A1:F2:63:E4:9C:71:55:27:49:48:0C:88 X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d6:c2:b1:d2:bf:34:07:7d:f9:19:91:6d:43:07:63:fb:dd: 48:17:62:43:7d:d3:12:51:c4:9d:e3:36:7a:9f:84:b9:8b:cc: 90:af:e0:46:3b:36:70:6c:34:a2:b5:10:b1:7a:f5:ab:21:ea: ad:38:db:39:8d:05:d2:aa:08:63:73:c9:28:7e:43:52:4c:e4: c3:e5:7d:1b:c5:14:79:c5:2b:12:48:ec:a2:19:33:94:4b:66: 07:a5:90:46:68:36:9d:af:08:a0:2b:d6:23:af:43:fa:6d:1d: 59:48:4e:12:c4:96:b4:90:35:b4:7f:eb:de:a5:76:9d:6a:3d: 0d:3c:1a:2a:a5:be:b2:5e:37:e0:ee:cd:18:2d:b1:38:cf:ae: e7:4b:e6:9f:0a:6c:1d:98:27:56:31:ee:a3:51:d0:f6:a2:46: 55:ed:74:15:82:f5:53:71:52:de:1a:cd:78:fc:ce:98:10:02: a3:3c:d3:ba:ff:c2:df:c6:8c:14:30:38:fc:7c:ab:6c:a7:09: e3:fd:b8:d7:f1:ed:4a:db:a1:a2:e6:16:fc:c1:f8:bf:4c:c9: 5d:d8:06:0b:95:5d:6d:1b:b0:6f:e8:4c:ad:da:af:f9:43:ab: 5e:55:92:49:c8:0a:4f:30:71:d1:d6:b6:a7:27:dd:67:c8:28: 07:df:88:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTA1MTMwNjM5NTZaFw0yNTA1MjAwNjM5NTZaMBgxFjAUBgNV BAMTDTY4MjJlOTNjLTQyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDURm1MtJViZuYNa4gT107l9m3XLT4b3jF345V2eHHukOROEgH8n3WJF1c4U+qh cZjqe6bNvEGUYp8Chv2LKuq4EBhl/TmHm3VnhsRe+rjdT6KVZHiJZZVdXlgksEGw 72saxYtU2y0cs7mCZxSzkwJJRFT6x7UmFFvWk4jS2hvYvR4wLtkZXMhKeW4IrBiv 67UvlM4DHRCFRFTRfVqo/Z2cTBluFyQhR//mb9M7NR8kvjkTRoX+9YO+P3B6fEzA teKpeYoIAcWXU2I6NKDFThs3F0F+21rzKpgB3UufZHZvZCqsIuTNUCmV0Y5MOXd4 XmC2NySrLBDOufz+j0G/9TR9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2BuIysNU kg6h8mPknHFVJ0lIDIgwHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzAwM0E3OURBQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQ dDM4c2ExY1RDTld4WHJlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDWwrHSvzQHffkZkW1DB2P73UgXYkN90xJRxJ3jNnqfhLmLzJCv4EY7 NnBsNKK1ELF69ash6q042zmNBdKqCGNzySh+Q1JM5MPlfRvFFHnFKxJI7KIZM5RL ZgelkEZoNp2vCKAr1iOvQ/ptHVlIThLElrSQNbR/696ldp1qPQ08GiqlvrJeN+Du zRgtsTjPrudL5p8KbB2YJ1Yx7qNR0PaiRlXtdBWC9VNxUt4azXj8zpgQAqM807r/ wt/GjBQwOPx8q2ynCeP9uNfx7UrboaLmFvzB+L9MyV3YBguVXW0bsG/oTK3ar/lD q15VkknICk8wcdHWtqcn3WfIKAffiL4= -----END CERTIFICATE-----Generated at Wed May 14 20:56:17 2025 by rpki-client