$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: yZ7b9xY+XgT6/SMd3cEdVNmTt+u10upnqw00fEnYoy0= Subject key identifier: 35:1A:C3:B3:09:21:8B:E1:7C:F4:DB:E8:C9:D5:66:CE:BF:A7:24:A8 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:32:48 +0000 Manifest this update: Fri 25 Apr 2025 05:32:47 +0000 Manifest next update: Fri 02 May 2025 05:32:47 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: Ym+YqrtN8tpUs26meG6OMTWmJLwwoSR5L+Rz6+VWmXo=) 2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Apr 25 05:32:47 2025 GMT Not After : May 2 05:32:47 2025 GMT Subject: CN=680b1e80-6abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:99:a7:0a:a6:a2:68:a4:7b:9a:01:0a:59: f4:b1:7b:b8:2d:c3:ed:93:de:1d:ee:e5:67:bf:39: 90:8e:f1:43:27:86:0e:69:1b:50:af:f9:ad:f6:7e: ae:58:07:6d:18:08:e0:1e:69:a3:5f:9c:0c:ac:4b: 0f:fd:f8:54:b7:40:8c:35:95:d5:4d:2d:78:65:06: 65:6d:3b:13:3b:9a:f0:01:d0:e3:41:92:b0:8e:60: be:88:03:61:e2:f9:f6:5f:a8:52:e5:28:49:2b:38: 23:68:f7:90:c8:3e:0a:55:cf:6b:95:41:e8:4d:db: 4e:ea:83:5a:f3:92:b0:8d:b2:e9:72:79:3f:3d:32: bc:f7:30:7f:d8:80:37:b8:b3:ab:55:6f:51:13:44: f1:42:95:b5:b5:cf:33:b3:3d:a3:bc:69:de:50:7c: b8:70:1c:42:02:0c:c4:93:3a:f4:7d:6a:f1:1b:26: 06:8c:f8:19:7e:d4:ff:62:30:21:4a:0e:ee:20:80: 52:cb:1a:38:fa:e4:31:7d:30:d4:0d:87:82:99:86: 29:72:a9:7d:79:60:e6:ad:a4:dd:3d:24:86:9b:ac: 4e:d6:fd:51:33:be:b2:79:ea:3c:a5:c6:d3:d4:e3: 5f:07:29:bb:aa:37:ed:93:6d:96:91:53:82:8d:1a: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:C3:B3:09:21:8B:E1:7C:F4:DB:E8:C9:D5:66:CE:BF:A7:24:A8 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:9a:7d:5f:66:0e:7b:4e:db:e3:ee:0b:10:0a:35:de:00:c3: e0:c4:b0:2d:37:fc:28:64:a2:59:1e:a0:85:17:8b:87:2f:29: 56:18:63:39:a8:9e:3b:90:fd:80:23:d4:56:6f:36:6a:5b:77: a6:fd:b0:a8:a4:60:7d:6f:ad:d1:6a:fc:f4:e0:8c:f1:da:70: f6:6b:a4:af:3b:5c:63:51:c0:93:b5:9a:09:07:bf:75:86:5c: c3:6a:14:ea:18:dc:de:3c:69:c9:45:c1:fa:b8:3d:45:0f:03: 4c:4d:bf:f2:60:f5:cb:92:25:b6:d2:7b:d4:41:df:21:9a:f6: 53:6d:67:6c:de:cc:9a:b2:69:db:e1:56:73:dc:38:18:40:0e: 49:4d:60:f1:73:7a:eb:5b:29:cf:3c:e7:60:d1:26:19:6f:3e: 10:e4:85:21:8e:af:ae:99:c5:34:c1:0b:c8:68:f8:c9:49:c6: c8:e9:0c:09:f0:8d:32:1a:fb:f7:8b:1c:53:4e:b2:b4:02:29: 7b:fa:81:7f:55:07:dc:d5:85:c3:99:f9:77:84:ec:cb:c4:bf: f4:8a:b3:ee:d2:63:ec:75:22:1d:79:60:b6:2c:38:a0:f0:ae: 1a:18:f7:ab:ec:a5:8c:80:ec:2b:9b:65:57:e3:90:ec:57:f2: 8f:01:c0:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUwNDI1MDUzMjQ3WhcNMjUwNTAyMDUzMjQ3WjAYMRYwFAYD VQQDEw02ODBiMWU4MC02YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvmZpwqmomike5oBCln0sXu4LcPtk94d7uVnvzmQjvFDJ4YOaRtQr/mt9n6u WAdtGAjgHmmjX5wMrEsP/fhUt0CMNZXVTS14ZQZlbTsTO5rwAdDjQZKwjmC+iANh 4vn2X6hS5ShJKzgjaPeQyD4KVc9rlUHoTdtO6oNa85KwjbLpcnk/PTK89zB/2IA3 uLOrVW9RE0TxQpW1tc8zsz2jvGneUHy4cBxCAgzEkzr0fWrxGyYGjPgZftT/YjAh Sg7uIIBSyxo4+uQxfTDUDYeCmYYpcql9eWDmraTdPSSGm6xO1v1RM76yeeo8pcbT 1ONfBym7qjftk22WkVOCjRrQiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUaw7MJ IYvhfPTb6MnVZs6/pySoMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnmn1fZg57Ttvj7gsQCjXeAMPgxLAtN/woZKJZHqCFF4uHLylWGGM5 qJ47kP2AI9RWbzZqW3em/bCopGB9b63Ravz04Izx2nD2a6SvO1xjUcCTtZoJB791 hlzDahTqGNzePGnJRcH6uD1FDwNMTb/yYPXLkiW20nvUQd8hmvZTbWds3syasmnb 4VZz3DgYQA5JTWDxc3rrWynPPOdg0SYZbz4Q5IUhjq+umcU0wQvIaPjJScbI6QwJ 8I0yGvv3ixxTTrK0Ail7+oF/VQfc1YXDmfl3hOzLxL/0irPu0mPsdSIdeWC2LDig 8K4aGPer7KWMgOwrm2VX45DsV/KPAcCH -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:04 2025 by rpki-client