$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: PWdYWFJaHSWT+N5OltjYBzybpgEJYIiKtaOr9UNTYxI= Subject key identifier: B0:F3:E3:8A:C3:E4:51:6E:08:26:65:60:3E:A0:CF:46:B4:87:55:74 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 06B5 Signing time: Thu 24 Apr 2025 22:00:36 +0000 Manifest this update: Thu 24 Apr 2025 22:00:36 +0000 Manifest next update: Thu 01 May 2025 22:00:36 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: Dt693DxCrUE89Uq72csaMM5KUzeLyBH/n5GkCNR+2YQ=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Apr 24 22:00:36 2025 GMT Not After : May 1 22:00:36 2025 GMT Subject: CN=680ab484-0d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:02:5e:bd:2a:0c:2f:79:6e:03:67:61:0a: 00:dd:84:d1:27:24:b2:15:2d:94:e6:5f:6e:b5:0b: 73:36:b3:7b:ef:e2:f3:1d:cb:69:f6:8e:1c:4f:20: d1:cf:f3:f1:88:06:77:18:95:d2:69:fd:a7:77:63: 6e:2b:c4:a4:4c:8e:c5:5c:26:7b:ed:cb:72:2c:2f: cf:4d:33:fa:8d:a5:4e:5b:81:fe:cb:f9:78:6f:4b: de:4a:90:2b:db:20:d4:f2:12:6a:a5:bc:a7:bd:7a: a6:fa:e4:7c:fb:9f:a5:62:d9:77:3f:9b:23:1b:df: 73:94:ea:da:c6:20:ce:c8:c5:31:bf:79:8a:06:25: b1:50:b3:96:a9:07:80:ae:66:4a:19:3f:36:18:97: 0c:12:5d:d0:06:18:16:78:b3:f1:8d:cc:f7:a1:12: f4:4d:61:1f:58:65:2a:23:46:a2:8c:44:e3:7d:4c: d4:bb:79:d7:77:8f:ae:39:e4:90:03:85:34:11:f8: d6:d2:d6:84:77:6d:75:ac:d4:90:61:36:b9:8f:1e: f5:a4:a9:b3:5f:72:90:99:a3:3e:fb:d4:fa:f6:65: a8:05:c9:3a:25:85:24:2b:cf:57:01:c3:43:10:03: a5:b9:51:dc:c6:7e:80:4d:3a:27:09:0d:22:4f:6c: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F3:E3:8A:C3:E4:51:6E:08:26:65:60:3E:A0:CF:46:B4:87:55:74 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:78:ac:af:73:d4:84:07:20:ee:87:f1:b0:64:f3:9b:c7:9f: e1:c0:ca:bb:45:d1:2b:40:1f:01:33:d6:ac:c3:fa:83:48:18: a6:f9:38:95:33:a6:9c:0c:3f:a7:3d:23:c1:ca:31:56:38:76: 10:31:15:78:87:0e:9d:81:0f:29:95:19:27:d8:7e:f8:c6:51: 24:b4:87:53:1a:d8:ee:f7:4c:bf:da:4a:aa:bc:84:07:b4:46: e0:d8:5b:7e:94:77:ad:45:72:b8:d2:62:94:7e:c3:b2:41:f7: 69:1d:d1:6a:4d:00:f7:ca:1d:a4:22:f1:17:0b:7e:86:13:dc: 1e:2a:f8:3c:69:9a:89:30:10:f2:b4:e4:87:57:63:b3:41:05: 26:ce:26:34:67:df:f6:f4:6c:b2:01:a1:2f:45:d4:e5:4b:98: 07:84:f3:a9:8e:23:5a:37:e4:cb:37:22:35:c6:ed:61:a5:32: 9c:a5:b1:a0:de:e9:81:ab:46:f2:57:4d:4b:54:df:27:f3:c8: e1:2e:1c:b6:9b:f9:ec:2f:f2:db:95:53:d4:d6:ca:d4:13:86: 56:3a:6d:77:ef:3c:d8:54:ce:fb:85:5b:ac:43:ce:dd:49:34: 29:8b:e2:a0:c3:29:06:be:bf:50:fc:69:3e:ca:06:76:49:72: fd:66:89:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwNDI0MjIwMDM2WhcNMjUwNTAxMjIwMDM2WjAYMRYwFAYD VQQDEw02ODBhYjQ4NC0wZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUECXr0qDC95bgNnYQoA3YTRJySyFS2U5l9utQtzNrN77+LzHctp9o4cTyDR z/PxiAZ3GJXSaf2nd2NuK8SkTI7FXCZ77ctyLC/PTTP6jaVOW4H+y/l4b0veSpAr 2yDU8hJqpbynvXqm+uR8+5+lYtl3P5sjG99zlOraxiDOyMUxv3mKBiWxULOWqQeA rmZKGT82GJcMEl3QBhgWeLPxjcz3oRL0TWEfWGUqI0aijETjfUzUu3nXd4+uOeSQ A4U0EfjW0taEd211rNSQYTa5jx71pKmzX3KQmaM++9T69mWoBck6JYUkK89XAcND EAOluVHcxn6ATTonCQ0iT2zzyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDz44rD 5FFuCCZlYD6gz0a0h1V0MB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCreKyvc9SEByDuh/GwZPObx5/hwMq7RdErQB8BM9asw/qDSBim+TiV M6acDD+nPSPByjFWOHYQMRV4hw6dgQ8plRkn2H74xlEktIdTGtju90y/2kqqvIQH tEbg2Ft+lHetRXK40mKUfsOyQfdpHdFqTQD3yh2kIvEXC36GE9weKvg8aZqJMBDy tOSHV2OzQQUmziY0Z9/29GyyAaEvRdTlS5gHhPOpjiNaN+TLNyI1xu1hpTKcpbGg 3umBq0byV01LVN8n88jhLhy2m/nsL/LblVPU1srUE4ZWOm137zzYVM77hVusQ87d STQpi+KgwykGvr9Q/Gk+ygZ2SXL9ZomD -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:07 2025 by rpki-client