$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: jpsjogA39fgPmdBFi06zTUE1NTXq8j+18ZSe7qoxuAg= Subject key identifier: 63:21:01:47:2C:62:27:9D:CE:9C:92:A7:5D:36:8C:63:D2:6A:1E:F5 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:35:15 +0000 Manifest this update: Fri 25 Apr 2025 05:35:15 +0000 Manifest next update: Fri 02 May 2025 05:35:15 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 08uMZN2QxvO30mc6I+eAQgYRogJsJZaOxrqrKf0Gu/c=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: Yhh6V+gIv+Ld1DK0VM67Fxc3c5mvFHS895j33+/A8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Apr 25 05:35:15 2025 GMT Not After : May 2 05:35:15 2025 GMT Subject: CN=680b1f13-44b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:2f:58:eb:24:38:5a:4e:d4:96:26:cf:d6: 81:fd:63:45:6f:37:63:fb:91:61:0e:6c:fa:e7:78: 1e:b6:ef:21:fd:1c:1b:5b:8b:c6:13:19:ec:9b:85: ba:1e:1c:9b:51:3e:2a:af:a5:cd:82:ff:64:32:58: 9f:a4:31:5c:3b:e2:5f:51:c4:d9:54:ff:32:1e:57: 0d:e6:2a:bf:f2:5b:f6:14:6a:63:37:62:50:c1:84: b4:74:94:19:6c:9d:22:89:83:d5:99:49:a3:1d:95: 6a:a3:cf:a7:e1:5f:75:5c:21:f7:55:73:cc:19:b5: cf:f1:fe:a5:27:f1:b7:3b:b4:63:2c:fa:02:52:93: a1:0f:40:a0:8d:74:16:09:52:85:e1:60:81:7c:c8: b4:42:a8:14:42:d3:00:ad:b1:90:1f:16:06:f9:18: cc:c5:19:de:d4:bd:58:00:12:eb:03:54:ae:46:99: f4:fc:0a:86:01:c2:aa:8b:bf:a2:49:1c:66:c6:25: bc:46:7d:28:01:25:32:8a:8c:59:b3:9b:5f:03:3d: 78:b0:1a:5c:1c:28:b9:15:85:b7:3e:2b:67:ce:77: 9e:40:d3:0b:b5:eb:b2:86:96:15:f0:a4:16:ee:e3: 3d:3c:27:78:3a:42:48:b9:9c:75:06:8e:e6:61:48: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:21:01:47:2C:62:27:9D:CE:9C:92:A7:5D:36:8C:63:D2:6A:1E:F5 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8d:d2:88:4e:4d:58:a0:7a:32:22:84:89:84:b2:19:dd:4a: 54:a7:70:94:a3:bf:7e:36:5f:c4:c3:10:30:08:94:61:94:b0: 45:36:8e:a5:88:56:b2:38:32:38:c0:20:09:c1:1d:6d:6d:e4: 0a:ef:15:21:c0:2b:6d:88:cf:6c:b2:62:ce:c9:f3:98:34:7b: c3:ee:ff:bc:50:bf:48:36:27:88:4b:0d:81:f0:19:55:ff:b5: 9d:ac:90:4e:09:f3:4b:82:e0:f8:9b:8b:77:a2:6f:b0:82:6b: e3:f8:57:a9:aa:22:bb:c4:ef:30:d0:f3:a9:93:fc:77:0f:48: c8:fc:de:a1:f3:5b:a4:ea:a8:2f:90:f5:2c:4e:e8:7d:c6:ba: 4d:66:e0:b3:9f:d5:68:04:c1:16:0c:f3:d5:c6:e9:f4:c0:a5: b2:5a:4f:ad:4f:e1:1f:38:9e:13:42:1b:fb:2d:2a:e5:28:0b: 1a:45:f1:b8:38:bd:81:2f:a7:6b:47:56:09:7c:f8:c1:24:bc: 62:c3:7d:b0:f6:7f:22:0b:32:fd:c4:7c:c9:54:de:c5:4e:fe: 14:2c:53:7c:98:f1:40:40:11:10:df:28:3e:fc:94:bb:3d:b1: ff:4b:18:21:bb:9d:18:9c:3b:f2:42:96:0e:99:67:cf:50:a5: 06:b9:d0:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUwNDI1MDUzNTE1WhcNMjUwNTAyMDUzNTE1WjAYMRYwFAYD VQQDEw02ODBiMWYxMy00NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaMvWOskOFpO1JYmz9aB/WNFbzdj+5FhDmz653getu8h/RwbW4vGExnsm4W6 HhybUT4qr6XNgv9kMlifpDFcO+JfUcTZVP8yHlcN5iq/8lv2FGpjN2JQwYS0dJQZ bJ0iiYPVmUmjHZVqo8+n4V91XCH3VXPMGbXP8f6lJ/G3O7RjLPoCUpOhD0CgjXQW CVKF4WCBfMi0QqgUQtMArbGQHxYG+RjMxRne1L1YABLrA1SuRpn0/AqGAcKqi7+i SRxmxiW8Rn0oASUyioxZs5tfAz14sBpcHCi5FYW3PitnzneeQNMLteuyhpYV8KQW 7uM9PCd4OkJIuZx1Bo7mYUigRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMhAUcs YiedzpySp102jGPSah71MB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqjdKITk1YoHoyIoSJhLIZ3UpUp3CUo79+Nl/EwxAwCJRhlLBFNo6l iFayODI4wCAJwR1tbeQK7xUhwCttiM9ssmLOyfOYNHvD7v+8UL9INieISw2B8BlV /7WdrJBOCfNLguD4m4t3om+wgmvj+FepqiK7xO8w0POpk/x3D0jI/N6h81uk6qgv kPUsTuh9xrpNZuCzn9VoBMEWDPPVxun0wKWyWk+tT+EfOJ4TQhv7LSrlKAsaRfG4 OL2BL6drR1YJfPjBJLxiw32w9n8iCzL9xHzJVN7FTv4ULFN8mPFAQBEQ3yg+/JS7 PbH/Sxghu50YnDvyQpYOmWfPUKUGudCn -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:25 2025 by rpki-client