$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: VYApQgV9FRV0oya6XjOnPSsbE7g8ojMJqAjQxVmRN+I= Subject key identifier: E9:F8:E1:74:E9:4A:76:E1:A3:38:78:E1:7A:78:7C:C2:BE:A3:AD:D5 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C4E Signing time: Sat 14 Jun 2025 18:20:59 +0000 Manifest this update: Sat 14 Jun 2025 18:20:58 +0000 Manifest next update: Sat 21 Jun 2025 18:20:58 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: tf//N51k48NfRyF5qbv1K2QTE5TlAOVQs+hcAPONpEQ=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Jun 14 18:20:58 2025 GMT Not After : Jun 21 18:20:58 2025 GMT Subject: CN=684dbd8a-a9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:b2:de:f6:16:3e:85:6f:f5:2f:78:b2:94: d6:c9:30:e8:4d:1b:64:f5:50:36:6c:cc:91:91:2c: 6d:da:46:0a:94:8c:13:9c:92:0c:e0:e0:3a:c4:74: 52:0d:a9:d6:d8:9a:0a:52:45:8a:dc:5e:5a:d0:fb: 1e:57:3d:2d:95:1a:01:f7:57:25:4f:7f:ed:19:f5: de:55:21:12:85:7f:87:b8:e4:bc:79:b7:2b:6e:9a: fd:7d:1b:c1:17:ad:f8:db:2d:ce:9a:ac:95:de:b8: 56:8e:de:d8:a9:3e:7e:c4:31:23:ec:64:e0:8e:d4: 5b:2e:5a:c3:84:f5:b8:96:50:c2:34:f3:49:a6:bf: 8e:55:6e:7e:4a:bb:b0:64:93:20:72:ca:11:d2:95: a0:e4:67:c4:ea:32:fb:00:d5:d7:6a:f1:81:0e:d4: d4:5b:c1:aa:a7:48:12:c0:17:07:18:f7:4a:b9:97: 80:ab:10:db:35:9f:82:4b:b5:49:8f:69:0d:36:04: 6c:e9:e4:99:b1:03:b9:69:71:7d:d6:f6:db:ef:c3: 88:e1:fe:2f:df:1b:9c:a5:79:17:55:37:82:61:ce: 1a:4f:e8:38:2e:6d:24:54:da:fd:c5:57:81:da:4c: bd:18:eb:70:31:72:03:dd:a3:0a:4d:c5:7f:75:ca: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F8:E1:74:E9:4A:76:E1:A3:38:78:E1:7A:78:7C:C2:BE:A3:AD:D5 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:61:2f:e8:0d:2e:f5:34:5d:8f:5e:ed:b2:4b:51:3f:7f:7c: e2:5d:84:fb:c4:7a:bd:eb:14:01:75:9b:36:2a:4e:17:bb:48: 2b:f2:ea:19:1f:c7:89:02:37:6f:a2:96:80:47:d8:95:d7:d7: ea:bc:b1:1a:a3:66:1e:d4:6c:01:4e:02:8f:b3:2d:ca:1e:d3: 9c:b5:b6:d4:0f:d7:73:63:da:54:6b:d0:0b:8c:1b:99:26:d1: 2f:72:a4:de:9c:8f:f7:63:52:3b:ab:5e:c2:42:05:ae:ab:31: 13:4e:a3:66:c7:f8:4d:ef:50:a9:71:bb:fb:77:49:22:9c:1f: ee:ca:77:0f:0b:08:53:45:ef:bf:48:6a:06:53:e2:bf:2d:00: c8:cd:de:c0:3c:83:de:cc:26:4e:6f:bd:a0:55:4e:bb:58:08: f6:b5:0f:61:45:8c:c0:33:71:49:de:fa:bc:a6:e8:67:cc:5b: 12:3a:8a:b5:44:cf:6d:57:2d:1a:46:85:11:b4:b0:fe:a8:08: 84:5f:ae:42:11:61:9e:c9:34:ea:45:c4:32:65:04:e3:ae:8d: 16:82:34:cc:bf:68:8d:2e:29:87:92:84:de:be:d7:32:a3:3f: a4:b0:0b:98:26:79:94:88:1f:50:59:7c:37:3b:96:a8:dd:02: bd:1b:1b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwNjE0MTgyMDU4WhcNMjUwNjIxMTgyMDU4WjAYMRYwFAYD VQQDEw02ODRkYmQ4YS1hOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Bqy3vYWPoVv9S94spTWyTDoTRtk9VA2bMyRkSxt2kYKlIwTnJIM4OA6xHRS DanW2JoKUkWK3F5a0PseVz0tlRoB91clT3/tGfXeVSEShX+HuOS8ebcrbpr9fRvB F6342y3OmqyV3rhWjt7YqT5+xDEj7GTgjtRbLlrDhPW4llDCNPNJpr+OVW5+Sruw ZJMgcsoR0pWg5GfE6jL7ANXXavGBDtTUW8Gqp0gSwBcHGPdKuZeAqxDbNZ+CS7VJ j2kNNgRs6eSZsQO5aXF91vbb78OI4f4v3xucpXkXVTeCYc4aT+g4Lm0kVNr9xVeB 2ky9GOtwMXID3aMKTcV/dcoWEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn44XTp Snbhozh44Xp4fMK+o63VMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwYS/oDS71NF2PXu2yS1E/f3ziXYT7xHq96xQBdZs2Kk4Xu0gr8uoZ H8eJAjdvopaAR9iV19fqvLEao2Ye1GwBTgKPsy3KHtOctbbUD9dzY9pUa9ALjBuZ JtEvcqTenI/3Y1I7q17CQgWuqzETTqNmx/hN71Cpcbv7d0kinB/uyncPCwhTRe+/ SGoGU+K/LQDIzd7APIPezCZOb72gVU67WAj2tQ9hRYzAM3FJ3vq8puhnzFsSOoq1 RM9tVy0aRoURtLD+qAiEX65CEWGeyTTqRcQyZQTjro0WgjTMv2iNLimHkoTevtcy oz+ksAuYJnmUiB9QWXw3O5ao3QK9GxuU -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:30 2025 by rpki-client