$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: SHcOhfEaveOrwfrR8CyptxpNlOjsRnVJaxP9iMWD54Q= Subject key identifier: 95:AB:36:A9:29:2A:57:5B:CE:B4:D1:AB:BE:AC:4C:AE:DF:4B:A3:E7 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C34 Signing time: Thu 24 Apr 2025 18:26:59 +0000 Manifest this update: Thu 24 Apr 2025 18:26:58 +0000 Manifest next update: Thu 01 May 2025 18:26:58 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: AmjHNPLLg1XeB1x7s9ZfaLpNlkRqO1ghrZVc5Rf3enU=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Apr 24 18:26:58 2025 GMT Not After : May 1 18:26:58 2025 GMT Subject: CN=680a8273-e0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:d9:87:f0:18:c9:2c:82:12:73:84:2d:78: 20:3d:84:8e:1c:50:d9:42:3d:95:9c:04:7a:9f:e5: 91:6b:b5:cf:1b:fe:be:57:47:cf:40:ef:eb:90:fc: 4d:9c:ad:4a:ab:88:09:4f:2f:0d:8f:5b:df:37:6a: 44:1e:46:22:99:71:22:12:57:cb:1b:c8:bd:21:98: 6f:9e:30:27:26:ef:42:a3:7c:56:d2:bd:fa:b0:15: bb:94:f5:75:1b:9a:d7:f7:cc:f4:11:2d:e2:36:c2: 72:c0:21:db:b8:03:33:23:44:48:87:af:7d:3a:6c: a3:f4:ea:18:a4:d3:3e:6a:f4:04:ad:13:cc:6b:1f: bc:e8:60:44:c2:99:6d:8b:41:d4:9f:24:61:86:17: 19:4d:36:3a:87:5b:42:24:01:9a:cf:3e:68:63:66: 52:9c:da:ba:18:68:11:8c:90:8c:81:96:0d:43:62: 91:a8:6e:b5:7a:bf:cc:e0:3a:b9:84:58:1b:8b:32: 48:05:a1:a2:80:14:3b:c6:a1:b4:d9:af:d2:37:a2: 2a:5e:8e:7e:05:72:b5:cd:27:d1:3d:bf:0c:ae:a1: ad:f5:06:43:80:84:bd:87:6d:58:91:2f:fe:28:26: 18:33:2e:b9:fe:0a:36:70:b2:80:78:b1:22:14:36: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AB:36:A9:29:2A:57:5B:CE:B4:D1:AB:BE:AC:4C:AE:DF:4B:A3:E7 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:21:ac:bd:50:05:16:55:81:60:bf:29:c3:d7:7d:fc:7b:aa: 07:00:0f:c8:48:22:ee:5d:13:e6:18:18:44:3e:43:ef:51:93: fc:b8:56:c4:88:5a:81:20:be:ee:45:fa:be:02:29:d0:7f:29: 3b:b7:11:15:e4:54:02:23:99:f3:3c:d7:57:12:59:d6:92:37: fe:21:cb:e6:14:fb:05:66:fb:e1:6b:d0:be:18:ee:8f:06:c6: d1:92:c0:b7:51:ea:15:f2:6e:27:a9:0d:df:9f:1a:f9:6f:d1: ab:79:75:d7:27:c2:85:da:60:aa:2c:18:59:d3:15:a8:58:8b: b2:ec:73:90:29:46:9f:c2:df:04:60:e8:1b:e6:89:6a:67:ed: aa:73:3e:2a:8b:70:41:84:af:b4:0b:b6:bc:0b:28:1c:4b:52: c9:cb:67:10:25:f5:57:9c:6c:6b:61:13:0a:c9:96:9d:b2:f8: b3:88:64:39:2f:93:79:9a:84:f9:78:18:a4:0c:c2:b0:32:4b: 84:fa:6f:6b:8e:64:a1:1f:a8:e1:b9:d0:d0:60:ac:60:f2:2e: ad:f8:90:18:28:f1:b7:32:95:2e:55:36:9f:a5:01:a6:ee:14: 60:83:06:56:3c:b4:aa:0d:ed:06:4b:c7:1f:f6:24:a7:a5:a3: 9a:82:94:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwNDI0MTgyNjU4WhcNMjUwNTAxMTgyNjU4WjAYMRYwFAYD VQQDEw02ODBhODI3My1lMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4f/Zh/AYySyCEnOELXggPYSOHFDZQj2VnAR6n+WRa7XPG/6+V0fPQO/rkPxN nK1Kq4gJTy8Nj1vfN2pEHkYimXEiElfLG8i9IZhvnjAnJu9Co3xW0r36sBW7lPV1 G5rX98z0ES3iNsJywCHbuAMzI0RIh699Omyj9OoYpNM+avQErRPMax+86GBEwplt i0HUnyRhhhcZTTY6h1tCJAGazz5oY2ZSnNq6GGgRjJCMgZYNQ2KRqG61er/M4Dq5 hFgbizJIBaGigBQ7xqG02a/SN6IqXo5+BXK1zSfRPb8MrqGt9QZDgIS9h21YkS/+ KCYYMy65/go2cLKAeLEiFDbu+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWrNqkp KldbzrTRq76sTK7fS6PnMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhIay9UAUWVYFgvynD1338e6oHAA/ISCLuXRPmGBhEPkPvUZP8uFbE iFqBIL7uRfq+AinQfyk7txEV5FQCI5nzPNdXElnWkjf+IcvmFPsFZvvha9C+GO6P BsbRksC3UeoV8m4nqQ3fnxr5b9GreXXXJ8KF2mCqLBhZ0xWoWIuy7HOQKUafwt8E YOgb5olqZ+2qcz4qi3BBhK+0C7a8CygcS1LJy2cQJfVXnGxrYRMKyZadsviziGQ5 L5N5moT5eBikDMKwMkuE+m9rjmShH6jhudDQYKxg8i6t+JAYKPG3MpUuVTafpQGm 7hRggwZWPLSqDe0GS8cf9iSnpaOagpTs -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:28 2025 by rpki-client