$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json) Hash identifier: CWtuOM4yaA1TQjPfysr2rZ+Y8qcwCC4XKgqjBkQQYec= Subject key identifier: 76:FA:FD:EA:11:A2:C4:D5:73:DF:75:0B:0F:C6:7B:BF:87:6E:DA:66 Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft Manifest number: 0173 Signing time: Sun 15 Jun 2025 02:59:00 +0000 Manifest this update: Sun 15 Jun 2025 02:58:59 +0000 Manifest next update: Sun 22 Jun 2025 02:58:59 +0000 Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: Sgww9tEMbIGI/LfPP6AmFakljIbD58ImUnko6ShDWQ8=) 2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: 1DTHOwSIeyOlP/85nvDSKsIu+CBj2ErQg5LShUWz4KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Validity Not Before: Jun 15 02:58:59 2025 GMT Not After : Jun 22 02:58:59 2025 GMT Subject: CN=684e36f3-6306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:dc:05:f0:71:4c:08:c7:15:33:b9:df:7d: a5:f6:c4:0e:f8:24:62:8c:32:45:b8:3b:d2:15:4e: b5:a8:fa:3b:e7:bd:3e:fb:12:22:93:02:23:4e:96: 5c:2a:f1:86:e8:3e:8d:af:d2:59:37:7d:38:51:1b: e3:32:d9:8b:a0:92:04:07:5d:c7:8a:5f:a7:41:24: 97:c0:ab:be:89:a3:19:05:f3:a0:11:1f:63:d9:73: f6:b2:45:05:ac:9a:bc:a5:81:81:52:5c:ca:89:19: f7:8a:c3:b1:20:c3:84:70:d5:89:4d:a1:06:10:78: 61:05:f8:19:46:54:96:9f:42:85:68:88:9f:c6:14: cc:f8:1f:19:a7:0b:3c:5a:23:7b:01:48:7f:9b:d4: 4d:5a:c9:c8:92:41:19:9f:d5:44:4a:9a:12:eb:a7: f1:26:35:2b:c3:ce:13:8f:f0:a8:a3:cd:5c:10:fe: 25:99:15:78:39:5c:6a:2c:75:00:91:de:bf:db:8b: 16:10:43:40:02:65:54:22:d1:fc:bf:e2:b0:ce:65: 83:4e:b8:ea:16:93:76:51:17:1c:1d:d0:52:f6:f9: 4c:63:39:81:5a:0c:ca:ee:6c:6f:93:68:0d:4e:a2: 66:db:14:63:86:1c:a9:b0:14:ea:75:4a:6c:f2:81: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FA:FD:EA:11:A2:C4:D5:73:DF:75:0B:0F:C6:7B:BF:87:6E:DA:66 X509v3 Authority Key Identifier: keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d1:bf:0b:5d:79:46:1d:71:4f:66:86:22:e6:1b:12:16:eb: 29:f0:e9:34:1d:d4:7c:a5:ec:8a:24:f3:5a:4b:48:c6:3a:8c: e5:20:8d:e4:c0:88:9d:00:3e:ac:66:30:37:9a:ce:8e:b9:40: 9e:56:fe:6e:10:cc:9f:9d:7a:2d:03:81:c0:09:63:03:77:af: cd:3b:64:80:02:53:ca:ff:37:1e:3a:89:a0:31:cd:e5:bd:f0: e4:20:61:49:d8:5e:6d:2c:c6:d7:0e:90:9c:b2:59:16:d5:ea: 0f:f4:3a:58:5a:7c:70:b8:0f:a4:f8:f9:2e:2c:7a:fd:5b:5d: b1:ad:02:d9:9c:4a:14:86:24:f8:d2:02:ad:f8:57:53:da:c1: b3:f6:7d:d0:86:5d:6a:2f:8c:02:fb:40:d3:09:f5:3d:4c:08: 24:f6:ed:df:84:c7:e5:9b:fb:6d:9b:ac:87:1c:14:0b:8d:74: 63:19:f0:66:e9:5d:1b:c9:3e:e9:a3:c5:db:b6:6e:d9:32:98: 8c:e0:7d:3f:af:8e:3e:b1:ee:44:df:f1:85:60:39:fc:21:be: 07:24:5f:5d:61:25:a6:b1:ad:c6:88:90:74:7a:22:00:0b:ed: 47:4b:2d:3c:d0:1c:c6:64:11:74:b5:34:75:66:14:f8:ca:8b: 98:a6:3d:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5 REM4NTI3RjIwHhcNMjUwNjE1MDI1ODU5WhcNMjUwNjIyMDI1ODU5WjAYMRYwFAYD VQQDEw02ODRlMzZmMy02MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFLcBfBxTAjHFTO5332l9sQO+CRijDJFuDvSFU61qPo7570++xIikwIjTpZc KvGG6D6Nr9JZN304URvjMtmLoJIEB13Hil+nQSSXwKu+iaMZBfOgER9j2XP2skUF rJq8pYGBUlzKiRn3isOxIMOEcNWJTaEGEHhhBfgZRlSWn0KFaIifxhTM+B8Zpws8 WiN7AUh/m9RNWsnIkkEZn9VESpoS66fxJjUrw84Tj/Coo81cEP4lmRV4OVxqLHUA kd6/24sWEENAAmVUItH8v+KwzmWDTrjqFpN2URccHdBS9vlMYzmBWgzK7mxvk2gN TqJm2xRjhhypsBTqdUps8oGfGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb6/eoR osTVc991Cw/Ge7+HbtpmMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf UXh3UnBZZWFuaTJkeUZKX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA00b8LXXlGHXFPZoYi5hsSFusp8Ok0HdR8peyKJPNaS0jGOozlII3k wIidAD6sZjA3ms6OuUCeVv5uEMyfnXotA4HACWMDd6/NO2SAAlPK/zceOomgMc3l vfDkIGFJ2F5tLMbXDpCcslkW1eoP9DpYWnxwuA+k+PkuLHr9W12xrQLZnEoUhiT4 0gKt+FdT2sGz9n3Qhl1qL4wC+0DTCfU9TAgk9u3fhMflm/ttm6yHHBQLjXRjGfBm 6V0byT7po8Xbtm7ZMpiM4H0/r44+se5E3/GFYDn8Ib4HJF9dYSWmsa3GiJB0eiIA C+1HSy080BzGZBF0tTR1ZhT4youYpj27 -----END CERTIFICATE-----Generated at Sun Jun 15 20:43:28 2025 by rpki-client