$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft File: H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json) Hash identifier: Quh5EkEJysSnYv2W5wtf24pZl6KHIefiVMhBufrtlNo= Subject key identifier: 62:96:02:B7:E7:82:23:BE:72:89:DF:E2:31:AA:C6:F4:C3:9F:97:28 Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B Certificate issuer: /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft Manifest number: 057D Signing time: Thu 24 Apr 2025 23:05:34 +0000 Manifest this update: Thu 24 Apr 2025 23:05:33 +0000 Manifest next update: Thu 01 May 2025 23:05:33 +0000 Files and hashes: 1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: x4HFmp0HfX44LJhltImhDA4bfAmi4cKwjiTYhV0laTM=) 2: 8DA93CBEBDDD11EFB1946851C4F9AE02.roa (hash: 0+1YoEpfMajvg53SL4gOebhqOGyRHlx7OSHPjEcp7CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916732F, serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B Validity Not Before: Apr 24 23:05:33 2025 GMT Not After : May 1 23:05:33 2025 GMT Subject: CN=680ac3be-773b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:87:49:89:5c:fd:5e:05:a7:29:d7:52:e3: 8e:b1:44:7d:27:a6:47:31:af:a8:60:aa:88:ac:c1: 48:42:bf:f5:b4:4d:e3:63:ee:c3:88:c6:4f:5b:60: ce:46:2e:a3:36:b2:bc:10:ba:e4:29:2a:9d:b7:d9: 33:94:e7:0f:11:ce:86:90:d7:1d:54:66:38:1d:9e: 59:ed:f7:3a:14:2d:c2:2d:37:df:b4:a0:ef:f2:32: a0:9a:e7:f1:a8:a9:e7:f6:51:4c:b8:db:29:4e:20: 50:b8:51:d9:88:0f:81:80:eb:a2:5a:62:b9:be:6a: 6a:36:64:ce:3a:c0:88:68:f4:ab:e8:22:97:d5:d1: dd:db:e0:cd:c0:c1:2c:56:71:7e:51:ea:84:f8:b8: f3:5b:ee:dc:b7:33:42:cb:73:6f:fa:ce:77:f7:54: 62:8f:c9:dc:8f:fa:75:be:a9:bb:44:ff:34:f7:50: eb:d5:ee:63:69:d6:fb:bf:85:cd:82:b0:b2:f6:03: 54:6d:c3:74:49:53:d0:4f:84:1a:a9:a8:b6:8b:c8: 59:fe:c1:bf:e4:e7:71:87:ad:cf:95:69:69:81:0e: 33:cd:5e:5e:82:94:70:3b:33:25:90:ad:30:18:86: 27:f1:a3:63:23:20:4f:5d:5a:eb:f6:91:97:97:01: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:96:02:B7:E7:82:23:BE:72:89:DF:E2:31:AA:C6:F4:C3:9F:97:28 X509v3 Authority Key Identifier: keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ce:9a:6a:05:bd:2a:6e:ad:bb:20:04:65:7d:fb:be:69:3a: 6a:2a:1f:38:ee:b5:74:ed:bb:ab:cb:94:b2:66:ed:17:94:4b: 63:36:64:64:cb:23:59:ef:cd:b2:a4:ac:54:7f:b0:d2:fd:c8: 2d:d1:8f:1e:1a:a6:e6:e8:9f:52:be:32:a5:ac:d4:2b:8c:35: 47:95:bf:17:62:4a:b3:ed:b0:be:46:0c:ff:2b:18:c8:a0:71: aa:83:84:14:fc:9b:91:04:55:ad:69:09:eb:0a:ea:84:04:d9: 0b:2b:cf:32:a5:92:7e:ba:e4:5a:8c:58:37:1e:8f:08:fd:f5: 02:97:fa:57:56:fb:d6:74:98:39:c9:f4:b8:b6:2b:42:da:d2: 14:15:55:41:85:aa:4c:fb:10:dd:e3:9c:b5:d3:b7:82:c9:d9: c3:20:ee:60:a5:cb:5e:5f:76:aa:e0:1f:3a:fd:15:de:b6:08: 49:55:5b:f7:f9:1e:d4:65:04:c9:96:66:cb:ab:5d:01:ee:b0: fa:32:87:f7:f6:70:f0:70:ef:e2:80:a8:6e:ee:7e:fd:e8:a4: 05:44:6d:c4:d7:82:87:6d:ea:38:41:67:f6:28:bd:b1:1a:d7: 8a:53:f4:82:23:8d:b4:e6:95:17:df:b2:b5:c8:09:78:24:4b: 80:f4:ee:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMkYxMTAvBgNVBAUTKDFGQjRDM0M1Nzk2RjE0QjM5REY1MUVGQkE5REFEQUZE NUNFQkQwOUIwHhcNMjUwNDI0MjMwNTMzWhcNMjUwNTAxMjMwNTMzWjAYMRYwFAYD VQQDEw02ODBhYzNiZS03NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/OHSYlc/V4FpynXUuOOsUR9J6ZHMa+oYKqIrMFIQr/1tE3jY+7DiMZPW2DO Ri6jNrK8ELrkKSqdt9kzlOcPEc6GkNcdVGY4HZ5Z7fc6FC3CLTfftKDv8jKgmufx qKnn9lFMuNspTiBQuFHZiA+BgOuiWmK5vmpqNmTOOsCIaPSr6CKX1dHd2+DNwMEs VnF+UeqE+LjzW+7ctzNCy3Nv+s5391Rij8ncj/p1vqm7RP8091Dr1e5jadb7v4XN grCy9gNUbcN0SVPQT4Qaqai2i8hZ/sG/5Odxh63PlWlpgQ4zzV5egpRwOzMlkK0w GIYn8aNjIyBPXVrr9pGXlwEjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKWArfn giO+conf4jGqxvTDn5coMB8GA1UdIwQYMBaAFB+0w8V5bxSznfUe+6na2v1c69Cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMyRi8wNkI1NjE1MEQ5 MTcxMUVCODk5MThEN0RDNEY5QUUwMi9IN1REeFhsdkZMT2Q5Ujc3cWRyYV9WenIw SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3VER4WGx2RkxPZDlSNzdxZHJhX1Z6cjBKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMyRi8wNkI1NjE1MEQ5MTcxMUVCODk5MThEN0RDNEY5QUUwMi9IN1REeFhsdkZM T2Q5Ujc3cWRyYV9WenIwSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtzppqBb0qbq27IARlffu+aTpqKh847rV07bury5SyZu0XlEtjNmRk yyNZ782ypKxUf7DS/cgt0Y8eGqbm6J9SvjKlrNQrjDVHlb8XYkqz7bC+Rgz/KxjI oHGqg4QU/JuRBFWtaQnrCuqEBNkLK88ypZJ+uuRajFg3Ho8I/fUCl/pXVvvWdJg5 yfS4titC2tIUFVVBhapM+xDd45y107eCydnDIO5gpcteX3aq4B86/RXetghJVVv3 +R7UZQTJlmbLq10B7rD6Mof39nDwcO/igKhu7n796KQFRG3E14KHbeo4QWf2KL2x GteKU/SCI4205pUX37K1yAl4JEuA9O6F -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:16 2025 by rpki-client