$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: grUtt1njQLOt095dc1JMI75q+rHJ9oO2wpX5cNZM2rM= Subject key identifier: 5C:17:2D:0B:51:3B:69:D1:1E:F1:50:BE:F6:17:C8:8D:BB:C3:AC:76 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 0129 Signing time: Fri 25 Apr 2025 03:46:13 +0000 Manifest this update: Fri 25 Apr 2025 03:46:13 +0000 Manifest next update: Fri 02 May 2025 03:46:13 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: jBbru9Ep4OYKkrr7IsoacrcMG7b/p8FEeLWP1uvFMNw=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: Lj0YroS2X8LOR4hY25qUmswSSH1A4SRoLTfz7csDQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Apr 25 03:46:13 2025 GMT Not After : May 2 03:46:13 2025 GMT Subject: CN=680b0585-ba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:57:55:b1:ca:89:53:06:9c:06:ce:5f:09: 5f:f5:f1:8c:bd:50:64:6c:40:a3:bc:da:89:14:99: 33:92:5a:6a:d4:6d:4c:72:0f:d8:c6:bc:17:8a:c4: 5f:db:82:9d:79:ca:c6:ab:e2:34:c2:ac:6e:08:1e: 5b:77:34:d3:9a:d5:1f:7e:6f:f8:c9:30:08:ec:20: 0b:dc:e5:af:bc:b7:c1:f3:55:7a:cc:87:64:1d:3d: fd:f5:fa:e8:87:99:14:9c:97:7f:82:32:23:33:3c: 1a:fd:57:20:b8:fb:4b:13:27:d9:62:22:c0:ba:c7: 0d:cb:c8:74:82:93:65:70:f2:d6:e8:4a:38:24:5c: 47:d1:86:ce:f4:ca:a1:0b:57:82:67:69:7f:84:c0: 9c:e4:6b:79:bd:aa:d9:12:45:46:c5:7a:f8:43:ae: 14:5b:00:95:e5:2c:e7:dd:ac:89:b9:3b:f5:ff:e3: 39:d9:09:5e:db:2c:b8:7e:23:d8:17:78:7b:92:87: 70:53:9a:0a:f8:22:39:02:5d:36:32:55:d6:d0:03: 9b:94:31:e7:16:6a:53:75:5f:f2:1b:a8:2c:16:20: 2a:f6:1e:8c:46:da:3f:22:75:23:7f:e7:27:69:69: b9:3b:a4:1e:ce:9c:98:04:ae:85:7d:cb:bf:6f:54: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:17:2D:0B:51:3B:69:D1:1E:F1:50:BE:F6:17:C8:8D:BB:C3:AC:76 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:17:c1:86:a8:08:21:51:a3:d4:bc:2c:e0:f4:f5:70:8e:a6: 28:f7:24:b2:7b:d7:bd:a9:8d:84:d6:ae:26:06:7a:9f:91:81: ca:f6:50:5a:81:12:90:c1:84:69:c3:cf:f9:96:c5:d7:46:de: a7:3b:86:7d:2a:2c:7c:9e:59:14:77:de:ae:e3:6d:83:3a:3c: 47:64:4c:8f:71:81:ae:ba:c9:3c:c0:96:87:0c:44:fd:76:be: 7d:11:81:b8:42:97:8a:d6:bb:ad:12:b1:50:61:5b:cc:38:e5: c4:22:22:67:ff:95:09:46:0a:1e:7d:49:39:ab:99:85:50:26: 7a:71:c3:4c:2c:9c:54:46:b3:43:2c:39:5d:16:cc:44:68:f5: d8:ff:bf:92:de:f8:85:90:15:d8:da:5c:d5:50:f1:27:29:a1: 34:20:e3:4b:aa:2d:c8:f5:a8:84:d0:3c:ff:89:39:a4:ce:03: 6c:e8:3b:c5:e4:b7:27:9b:87:78:6a:ae:62:ba:09:bf:75:81: a2:b8:cf:43:ed:f9:7c:6f:ef:92:31:74:5f:49:0b:e4:18:93: 9a:3d:59:f3:5e:0a:a7:53:f4:d0:8b:10:11:ca:d4:cf:5b:62: dc:6c:b1:4f:5a:25:fb:c7:fe:0b:67:25:61:fa:d3:29:c0:da: 7a:a9:f1:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUwNDI1MDM0NjEzWhcNMjUwNTAyMDM0NjEzWjAYMRYwFAYD VQQDEw02ODBiMDU4NS1iYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZRXVbHKiVMGnAbOXwlf9fGMvVBkbECjvNqJFJkzklpq1G1Mcg/YxrwXisRf 24KdecrGq+I0wqxuCB5bdzTTmtUffm/4yTAI7CAL3OWvvLfB81V6zIdkHT399fro h5kUnJd/gjIjMzwa/VcguPtLEyfZYiLAuscNy8h0gpNlcPLW6Eo4JFxH0YbO9Mqh C1eCZ2l/hMCc5Gt5varZEkVGxXr4Q64UWwCV5Szn3ayJuTv1/+M52Qle2yy4fiPY F3h7kodwU5oK+CI5Al02MlXW0AOblDHnFmpTdV/yG6gsFiAq9h6MRto/InUjf+cn aWm5O6QezpyYBK6Ffcu/b1S2awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwXLQtR O2nRHvFQvvYXyI27w6x2MB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUF8GGqAghUaPUvCzg9PVwjqYo9ySye9e9qY2E1q4mBnqfkYHK9lBa gRKQwYRpw8/5lsXXRt6nO4Z9Kix8nlkUd96u422DOjxHZEyPcYGuusk8wJaHDET9 dr59EYG4QpeK1rutErFQYVvMOOXEIiJn/5UJRgoefUk5q5mFUCZ6ccNMLJxURrND LDldFsxEaPXY/7+S3viFkBXY2lzVUPEnKaE0IONLqi3I9aiE0Dz/iTmkzgNs6DvF 5Lcnm4d4aq5iugm/dYGiuM9D7fl8b++SMXRfSQvkGJOaPVnzXgqnU/TQixARytTP W2LcbLFPWiX7x/4LZyVh+tMpwNp6qfHX -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:58 2025 by rpki-client