$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: SNpiAYzKe+VOH7ADqCQ5HGhNtEtQKrPczNZnLOPlSTk= Subject key identifier: 23:F2:BD:E6:B1:75:4C:F6:E2:20:D3:CD:D9:5D:28:02:1A:68:76:C5 Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: DF Signing time: Thu 15 May 2025 05:15:07 +0000 Manifest this update: Thu 15 May 2025 05:15:07 +0000 Manifest next update: Thu 22 May 2025 05:15:07 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: uBonZiNCHShiunYMuv2n3E+cZPQB6rPxvehR64or0tY=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: May 15 05:15:07 2025 GMT Not After : May 22 05:15:07 2025 GMT Subject: CN=6825785b-4a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:06:a6:26:da:eb:24:7b:63:8c:54:2f:b4: 88:69:90:45:58:23:22:fb:d6:ec:a4:1e:c1:f9:dc: db:c7:8f:ec:11:bd:ef:55:8e:8a:20:a4:96:2f:0d: 1c:36:23:69:7a:67:25:42:7a:a3:84:4e:d5:e7:5a: 52:84:06:af:b0:6c:2a:ff:dc:65:b5:1d:62:4f:4b: 6d:b0:5b:80:44:9f:86:9a:17:51:a7:75:49:e0:bc: a5:86:ea:85:0e:c0:4a:14:9f:9d:f3:6b:8d:e1:6c: 32:82:a3:9b:7d:78:57:6a:6d:e5:66:70:09:7d:82: 41:bf:9a:6c:51:43:91:34:8f:26:58:95:26:52:04: b9:5f:fb:bc:d3:6e:af:78:6b:96:25:75:0b:a0:b7: ab:57:b0:a5:f5:e0:fa:78:41:ea:85:ea:ea:b1:e5: a6:f8:b2:0d:ca:a4:4e:48:65:b5:56:0c:51:5a:b5: 41:37:0a:b2:d5:21:63:6b:01:b4:3a:90:1c:77:7f: c5:df:cb:f1:39:73:70:07:25:dd:ad:62:89:d9:43: 33:7c:67:7a:14:7b:89:5a:6d:b3:d2:15:29:6f:48: 36:39:97:73:20:77:39:04:b6:34:f6:0e:df:3f:9b: 12:56:2c:ad:40:0a:90:93:07:b4:de:e9:f0:44:fc: bd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F2:BD:E6:B1:75:4C:F6:E2:20:D3:CD:D9:5D:28:02:1A:68:76:C5 X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b6:63:6f:8a:b3:ab:29:61:eb:c4:86:eb:e6:e5:09:f6:48: a4:55:c6:5a:8b:28:13:aa:45:5e:18:59:34:83:50:dd:38:f4: 37:b5:5d:33:b8:2c:ba:eb:14:1a:d7:69:4b:a3:f4:6e:bf:69: 0f:c8:2b:71:b5:51:e3:ce:d2:54:8a:71:09:ec:cd:6e:d3:fe: 29:4a:85:ed:66:05:0a:76:b3:05:ea:9f:bd:3a:86:f3:d9:ae: 75:ad:d0:76:b8:30:89:dd:a8:6c:a9:a9:73:21:b4:58:ad:0a: 44:a3:01:09:bb:66:28:97:c9:76:56:08:f5:0f:bd:31:41:27: 8d:8e:1b:47:97:2a:29:c0:8c:e6:c2:ad:1a:d3:ca:af:1f:99: 67:90:cf:6f:51:ac:57:84:35:a3:13:2d:c1:0c:19:7d:b5:d1: a2:ea:68:26:dc:3e:ed:68:53:a0:75:a4:2f:fc:7b:46:a2:cf: 2a:09:65:15:42:a3:01:13:1b:36:10:ec:66:3a:47:0b:45:c4: 7a:f2:48:60:61:4e:64:70:48:72:cb:85:b6:ea:1e:0c:a9:23: f7:59:69:a1:0a:37:93:dd:6f:bd:68:b7:ea:06:e1:12:4a:1b: 1b:29:58:f4:2c:7d:6e:85:13:f9:91:57:02:69:9c:47:5b:4a: af:42:dc:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjUwNTE1MDUxNTA3WhcNMjUwNTIyMDUxNTA3WjAYMRYwFAYD VQQDEw02ODI1Nzg1Yi00YTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l8Gpiba6yR7Y4xUL7SIaZBFWCMi+9bspB7B+dzbx4/sEb3vVY6KIKSWLw0c NiNpemclQnqjhE7V51pShAavsGwq/9xltR1iT0ttsFuARJ+GmhdRp3VJ4LylhuqF DsBKFJ+d82uN4WwygqObfXhXam3lZnAJfYJBv5psUUORNI8mWJUmUgS5X/u8026v eGuWJXULoLerV7Cl9eD6eEHqherqseWm+LINyqROSGW1VgxRWrVBNwqy1SFjawG0 OpAcd3/F38vxOXNwByXdrWKJ2UMzfGd6FHuJWm2z0hUpb0g2OZdzIHc5BLY09g7f P5sSViytQAqQkwe03unwRPy9xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPyveax dUz24iDTzdldKAIaaHbFMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTtmNvirOrKWHrxIbr5uUJ9kikVcZaiygTqkVeGFk0g1DdOPQ3tV0z uCy66xQa12lLo/Ruv2kPyCtxtVHjztJUinEJ7M1u0/4pSoXtZgUKdrMF6p+9Oobz 2a51rdB2uDCJ3ahsqalzIbRYrQpEowEJu2Yol8l2Vgj1D70xQSeNjhtHlyopwIzm wq0a08qvH5lnkM9vUaxXhDWjEy3BDBl9tdGi6mgm3D7taFOgdaQv/HtGos8qCWUV QqMBExs2EOxmOkcLRcR68khgYU5kcEhyy4W26h4MqSP3WWmhCjeT3W+9aLfqBuES ShsbKVj0LH1uhRP5kVcCaZxHW0qvQtwA -----END CERTIFICATE-----Generated at Sat May 17 03:35:16 2025 by rpki-client