$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: /aWvVKVCiObn1HYtpuVJJ1lwwl+PNxh3cwN6JILSNsY= Subject key identifier: C5:F1:11:9A:16:9F:8D:D7:A1:4F:CE:6D:BE:E6:C3:CC:7B:86:5C:68 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 038A Signing time: Mon 21 Apr 2025 00:26:42 +0000 Manifest this update: Mon 21 Apr 2025 00:26:41 +0000 Manifest next update: Mon 28 Apr 2025 00:26:41 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: T7J9hTKmA88Yd8HnWdKG+gW1erYJ/zAzpMF1tgYsesE=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Apr 21 00:26:41 2025 GMT Not After : Apr 28 00:26:41 2025 GMT Subject: CN=680590c2-3f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:11:32:c2:b7:57:14:b7:25:74:bd:c1:5a: f5:cf:e4:8a:9d:7e:9e:6e:2b:ca:24:b5:be:bb:49: c9:ad:06:8d:cf:f1:e7:32:50:b5:74:6c:7a:c4:0b: 35:71:be:88:57:d0:fc:7c:c8:f8:e9:2b:95:c5:98: 72:51:32:1e:94:6c:3f:9c:1d:e5:12:40:44:e2:c8: f2:33:23:2b:1e:c8:7a:2a:09:aa:4c:77:75:66:69: 0b:d5:90:69:12:26:6f:7b:cb:0b:1c:a6:4c:87:ab: 43:f3:48:7b:ac:8a:b1:1f:d9:35:f2:9e:1d:74:ad: d9:6b:21:8c:5d:eb:bc:71:55:0b:ec:43:42:0a:94: 1f:61:c3:35:76:0d:1a:81:d8:01:4e:7e:16:4e:dd: 25:79:7f:cf:c5:30:e3:78:80:66:71:d3:c6:ce:59: 1b:8f:1d:ce:e0:04:e7:94:3b:69:e5:a9:71:d4:5a: df:41:fc:8f:a4:ab:c9:20:83:41:69:b1:2a:96:19: 86:b9:a4:5f:7c:8c:6e:09:90:89:53:df:20:93:30: 7a:46:53:13:63:29:d1:81:d6:a3:23:2a:80:03:cb: 91:30:4a:72:ec:0c:04:ff:4e:ae:c0:89:25:6b:0b: af:7c:32:79:86:fb:6e:db:b0:59:31:0d:02:44:29: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:11:9A:16:9F:8D:D7:A1:4F:CE:6D:BE:E6:C3:CC:7B:86:5C:68 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d8:fe:e2:fd:0b:ec:ea:f5:28:87:49:c9:25:78:fa:c2:fd: c5:15:67:00:9d:35:25:a9:9c:30:7c:33:3f:85:75:df:db:08: f4:e2:09:04:ba:7f:68:71:f3:9c:78:66:af:b2:49:96:b7:79: 6f:84:72:c3:d7:bd:a7:88:4c:8b:35:4b:7a:b8:36:49:04:0f: 78:1a:8c:ab:bb:ea:95:fc:0b:f7:4b:1e:cb:36:b6:0d:50:23: 1a:a6:57:cf:44:15:3b:5c:aa:c5:e4:1a:f1:54:a2:27:3a:a8: f8:74:b6:91:57:95:7d:40:ce:79:a6:97:3a:bd:ec:27:c1:a9: 85:62:28:40:cf:cf:26:89:0a:b5:57:7d:21:06:4e:13:34:9f: 6b:d0:a9:fb:68:0c:68:df:5d:2f:d8:16:75:04:21:8f:94:3c: de:3f:ac:fe:ee:d5:25:fb:9c:9a:f2:e8:61:7e:2e:bf:0c:88: 76:6d:82:39:0d:b6:59:69:79:26:e5:97:cb:e9:5e:df:4c:bf: ba:43:b8:14:04:63:22:a2:ce:12:71:24:d4:81:cb:99:7c:29: a5:50:be:5b:60:ce:2e:32:b3:b2:82:aa:8a:d6:90:5d:8f:32: a5:c5:39:26:da:cd:84:6e:1e:18:a9:4f:83:ab:e6:02:70:c6: 84:46:bc:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUwNDIxMDAyNjQxWhcNMjUwNDI4MDAyNjQxWjAYMRYwFAYD VQQDEw02ODA1OTBjMi0zZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwasRMsK3VxS3JXS9wVr1z+SKnX6ebivKJLW+u0nJrQaNz/HnMlC1dGx6xAs1 cb6IV9D8fMj46SuVxZhyUTIelGw/nB3lEkBE4sjyMyMrHsh6KgmqTHd1ZmkL1ZBp EiZve8sLHKZMh6tD80h7rIqxH9k18p4ddK3ZayGMXeu8cVUL7ENCCpQfYcM1dg0a gdgBTn4WTt0leX/PxTDjeIBmcdPGzlkbjx3O4ATnlDtp5alx1FrfQfyPpKvJIINB abEqlhmGuaRffIxuCZCJU98gkzB6RlMTYynRgdajIyqAA8uRMEpy7AwE/06uwIkl awuvfDJ5hvtu27BZMQ0CRCkpLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXxEZoW n43XoU/Obb7mw8x7hlxoMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ2P7i/Qvs6vUoh0nJJXj6wv3FFWcAnTUlqZwwfDM/hXXf2wj04gkE un9ocfOceGavskmWt3lvhHLD172niEyLNUt6uDZJBA94Goyru+qV/Av3Sx7LNrYN UCMaplfPRBU7XKrF5BrxVKInOqj4dLaRV5V9QM55ppc6vewnwamFYihAz88miQq1 V30hBk4TNJ9r0Kn7aAxo310v2BZ1BCGPlDzeP6z+7tUl+5ya8uhhfi6/DIh2bYI5 DbZZaXkm5ZfL6V7fTL+6Q7gUBGMios4ScSTUgcuZfCmlUL5bYM4uMrOygqqK1pBd jzKlxTkm2s2Ebh4YqU+Dq+YCcMaERrxI -----END CERTIFICATE-----Generated at Tue Apr 22 19:12:11 2025 by rpki-client