$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: bK2n2WyIlt+hERDBzbouvxgPDZ89On6TgmqK64KSbcU= Subject key identifier: 00:A0:3A:2B:05:59:0A:0D:CE:1C:76:11:F5:74:03:86:38:E8:2B:21 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 0144 Signing time: Thu 19 Jun 2025 03:46:23 +0000 Manifest this update: Thu 19 Jun 2025 03:46:23 +0000 Manifest next update: Thu 26 Jun 2025 03:46:23 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: UbfOTr/6RrIgXcaSxidutVEFb8NEMHgBxXWVhM5VJcY=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: Lj0YroS2X8LOR4hY25qUmswSSH1A4SRoLTfz7csDQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Jun 19 03:46:23 2025 GMT Not After : Jun 26 03:46:23 2025 GMT Subject: CN=6853880f-3910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:21:f2:54:85:bb:da:96:34:a7:60:16:14: 35:fa:4e:77:08:a8:a8:22:be:2e:59:19:40:42:7e: fa:2a:49:a9:67:4a:17:15:83:a6:0e:71:ab:0f:5a: 10:db:98:8d:a3:0f:e5:44:1d:d6:3d:20:1b:2a:06: cd:15:ec:f8:4d:91:e7:98:f7:dd:45:c6:0f:51:52: ac:d7:0b:a1:bd:65:17:61:9f:d1:c9:e4:32:4e:81: f3:73:82:b7:44:6e:5f:6d:39:11:c9:61:7a:4c:2a: d3:26:5c:a0:e1:53:01:71:a0:9e:08:0c:22:ef:a5: 26:d8:ca:0a:18:c8:f9:5c:45:87:6e:8e:56:2e:e5: 88:73:71:7d:94:37:c5:91:1a:6f:47:fa:0e:5b:e2: 1d:ed:3b:a2:a3:5c:7f:c4:9f:f0:21:ba:18:ea:1d: 8e:93:07:3c:ac:0e:a0:63:a6:02:0d:72:93:28:f8: 76:10:21:53:a6:9d:b7:b8:42:15:5d:96:00:3f:de: 3c:74:67:3b:13:05:a4:89:a5:1a:fb:69:94:14:4a: 64:9f:a3:24:94:39:21:73:71:e4:1f:8d:18:49:6c: e3:49:5f:79:0d:f1:c6:62:cd:e7:df:b4:4d:a0:4b: 9d:eb:60:64:77:36:5f:9b:c6:89:53:de:00:57:b9: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A0:3A:2B:05:59:0A:0D:CE:1C:76:11:F5:74:03:86:38:E8:2B:21 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6b:af:78:89:16:56:c4:ad:de:61:83:e6:dc:57:2c:7c:b4: ff:1c:df:2d:8e:bd:3f:90:df:b6:06:ca:7e:16:9f:d4:45:ac: 2b:da:88:44:b8:b2:4d:99:f6:29:53:93:fd:4a:5c:4d:6a:a9: 95:82:9a:a3:7e:4d:1c:9a:09:14:0e:8b:d8:2d:83:81:c3:5a: eb:86:3f:53:82:46:4c:fe:2e:97:4c:e8:dd:90:37:96:ca:af: 16:8a:f4:46:cb:3a:31:db:1e:f0:e2:f5:be:c2:4b:9f:1e:a5: 4e:11:f2:f1:a7:5c:70:7c:1e:ea:f6:ce:f5:ab:e2:ef:f7:08: 52:b1:bc:1f:bf:50:8c:31:c2:1b:85:85:ed:6a:e8:ff:fc:1a: 9b:71:d9:75:d9:1f:cb:9e:35:57:b7:58:68:2f:81:21:23:28: 4b:9a:66:9f:fc:33:5f:a8:ec:68:f5:6b:8b:bf:0e:7b:aa:a1: ef:2f:69:6d:bc:69:2e:bd:ff:e9:d0:a1:b7:57:9c:aa:53:40: 70:7b:c6:aa:27:00:14:2f:00:d3:98:64:49:c0:77:49:d7:f9: 90:8b:63:a4:04:9d:52:4d:a5:18:83:a4:69:f5:05:17:b7:c3: 79:31:31:f8:ae:c3:21:38:79:d8:86:bf:f6:04:15:77:5f:96: b9:a9:a3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUwNjE5MDM0NjIzWhcNMjUwNjI2MDM0NjIzWjAYMRYwFAYD VQQDEw02ODUzODgwZi0zOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTwh8lSFu9qWNKdgFhQ1+k53CKioIr4uWRlAQn76KkmpZ0oXFYOmDnGrD1oQ 25iNow/lRB3WPSAbKgbNFez4TZHnmPfdRcYPUVKs1wuhvWUXYZ/RyeQyToHzc4K3 RG5fbTkRyWF6TCrTJlyg4VMBcaCeCAwi76Um2MoKGMj5XEWHbo5WLuWIc3F9lDfF kRpvR/oOW+Id7Tuio1x/xJ/wIboY6h2Okwc8rA6gY6YCDXKTKPh2ECFTpp23uEIV XZYAP948dGc7EwWkiaUa+2mUFEpkn6MklDkhc3HkH40YSWzjSV95DfHGYs3n37RN oEud62BkdzZfm8aJU94AV7mhaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACgOisF WQoNzhx2EfV0A4Y46CshMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVa694iRZWxK3eYYPm3FcsfLT/HN8tjr0/kN+2Bsp+Fp/URawr2ohE uLJNmfYpU5P9SlxNaqmVgpqjfk0cmgkUDovYLYOBw1rrhj9TgkZM/i6XTOjdkDeW yq8WivRGyzox2x7w4vW+wkufHqVOEfLxp1xwfB7q9s71q+Lv9whSsbwfv1CMMcIb hYXtauj//Bqbcdl12R/LnjVXt1hoL4EhIyhLmmaf/DNfqOxo9WuLvw57qqHvL2lt vGkuvf/p0KG3V5yqU0Bwe8aqJwAULwDTmGRJwHdJ1/mQi2OkBJ1STaUYg6Rp9QUX t8N5MTH4rsMhOHnYhr/2BBV3X5a5qaNy -----END CERTIFICATE-----Generated at Thu Jun 19 07:03:03 2025 by rpki-client