$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: 2rAiF3xeg5N841v1xf2cQpbjkPAFdKHFmF5Pr5qbW6E= Subject key identifier: 56:DD:70:E7:75:94:25:13:E8:D4:50:3C:45:5D:C4:7C:60:40:69:D0 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: 9E Signing time: Sun 15 Jun 2025 05:20:53 +0000 Manifest this update: Sun 15 Jun 2025 05:20:53 +0000 Manifest next update: Sun 22 Jun 2025 05:20:53 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: LyP1iURQqL2k4nRVaW64VTHg6oKEuNcqQzDVh4M+Ia8=) 2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Jun 15 05:20:53 2025 GMT Not After : Jun 22 05:20:53 2025 GMT Subject: CN=684e5835-d90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:23:f9:c4:e5:79:25:97:9d:bf:00:8a:25: 64:1d:0b:54:cb:75:af:64:e3:af:4a:c6:7f:7e:b9: f1:cd:20:34:95:1d:bb:ee:3c:62:a4:69:8a:69:1f: fc:9f:06:68:c3:3e:c9:de:c1:ba:ce:d2:ab:4b:32: 5b:d9:8a:ec:d8:38:ab:ce:2c:a3:87:75:01:23:3c: 60:52:cd:0f:94:84:bc:be:c3:1d:86:19:7b:6f:47: 13:1c:96:32:7d:89:67:b6:83:f9:d7:b3:2c:be:a9: 9f:e9:0e:e6:a8:25:6b:36:dc:19:9b:4f:b6:50:1b: 6f:ce:a0:4e:6a:69:ba:c3:01:e6:79:eb:8b:7e:97: e8:75:a8:5d:ff:37:55:54:ea:ee:26:8d:ea:89:ea: 4b:30:fe:24:06:5b:86:6f:40:8d:09:8f:57:30:6d: df:39:54:6e:86:b5:82:a4:a9:63:f0:0f:21:46:df: 03:3d:ff:e3:c1:d6:5e:ae:96:64:5f:84:38:9a:4b: e4:fc:ed:19:1d:21:6a:ab:9f:ff:3c:9c:00:a8:44: 9b:23:6c:13:10:4f:0e:5e:c1:83:2b:59:ae:9c:02: 8b:a3:5f:59:45:1a:73:91:ec:a3:16:48:b6:cc:05: 59:32:a5:d8:c9:50:f5:2d:c4:90:11:2d:45:78:f8: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DD:70:E7:75:94:25:13:E8:D4:50:3C:45:5D:C4:7C:60:40:69:D0 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:25:f7:7e:c8:cc:77:e7:9b:f3:f9:ef:24:a7:56:e9:60:35: eb:05:41:43:78:37:61:e7:d7:e6:ba:5f:c3:73:be:b4:ca:87: 46:44:e4:7b:02:4b:d2:40:8a:f0:4a:87:47:a4:11:a6:8d:8a: 4e:f5:58:68:c4:39:e0:76:e3:89:74:a2:62:f6:9a:63:21:38: e8:76:31:ae:7b:dc:3b:68:2a:28:2d:a5:ed:c0:08:4e:30:41: f8:72:91:1e:80:31:e4:32:cb:d4:98:f1:78:36:c2:e7:ed:c6: 1b:06:c2:e0:d3:0d:d3:d3:0d:37:b5:09:1b:3e:78:76:10:ab: f9:3c:53:f2:78:f7:b1:c2:9c:f3:df:70:86:0a:2b:d0:62:be: 05:73:e8:0d:e6:13:2a:0c:d8:df:91:96:23:a7:dc:bd:a0:f4: 28:a3:87:1e:af:da:94:6f:31:57:00:72:dc:96:61:7b:da:92: 1b:c8:ca:21:a8:83:d9:d9:2e:d7:47:51:83:e5:fa:3e:d4:05: c8:3e:aa:55:d2:da:b7:2f:a5:74:b7:29:23:2c:80:fa:d5:0c: 07:c3:aa:d8:ad:8d:ee:c0:89:d4:ad:3a:64:e4:07:1b:9e:ff: cf:0d:eb:73:e3:0f:70:2f:2d:05:99:82:1c:24:83:07:21:9d: b3:c6:d6:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUwNjE1MDUyMDUzWhcNMjUwNjIyMDUyMDUzWjAYMRYwFAYD VQQDEw02ODRlNTgzNS1kOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fAj+cTleSWXnb8AiiVkHQtUy3WvZOOvSsZ/frnxzSA0lR277jxipGmKaR/8 nwZowz7J3sG6ztKrSzJb2Yrs2Dirziyjh3UBIzxgUs0PlIS8vsMdhhl7b0cTHJYy fYlntoP517Msvqmf6Q7mqCVrNtwZm0+2UBtvzqBOamm6wwHmeeuLfpfodahd/zdV VOruJo3qiepLMP4kBluGb0CNCY9XMG3fOVRuhrWCpKlj8A8hRt8DPf/jwdZerpZk X4Q4mkvk/O0ZHSFqq5//PJwAqESbI2wTEE8OXsGDK1munAKLo19ZRRpzkeyjFki2 zAVZMqXYyVD1LcSQES1FePiyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbdcOd1 lCUT6NRQPEVdxHxgQGnQMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHJfd+yMx355vz+e8kp1bpYDXrBUFDeDdh59fmul/Dc760yodGROR7 AkvSQIrwSodHpBGmjYpO9VhoxDngduOJdKJi9ppjITjodjGue9w7aCooLaXtwAhO MEH4cpEegDHkMsvUmPF4NsLn7cYbBsLg0w3T0w03tQkbPnh2EKv5PFPyePexwpzz 33CGCivQYr4Fc+gN5hMqDNjfkZYjp9y9oPQoo4cer9qUbzFXAHLclmF72pIbyMoh qIPZ2S7XR1GD5fo+1AXIPqpV0tq3L6V0tykjLID61QwHw6rYrY3uwInUrTpk5Acb nv/PDetz4w9wLy0FmYIcJIMHIZ2zxtbQ -----END CERTIFICATE-----Generated at Sun Jun 15 08:27:17 2025 by rpki-client