$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: ufPog+p3N4Xq8vGbixmwFJtBBukCeN7FlD3P0fmWZOE= Subject key identifier: 9A:A1:15:A5:DC:59:0B:CC:28:E5:EA:34:F6:7B:C6:79:17:CA:4F:16 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01B4 Signing time: Thu 03 Apr 2025 02:30:09 +0000 Manifest this update: Thu 03 Apr 2025 02:30:08 +0000 Manifest next update: Thu 10 Apr 2025 02:30:08 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: kCt8qMhvF+6T/ELm8qC0JjCvhmR0f3JIDdxXPAIfe3Q=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9 Validity Not Before: Apr 3 02:30:08 2025 GMT Not After : Apr 10 02:30:08 2025 GMT Subject: CN=67edf2b0-5280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:e1:ee:82:82:08:13:d6:b1:37:48:45:4f: ed:47:b6:0b:83:b0:bf:b0:65:09:30:2f:46:c3:12: e8:5a:ea:4a:00:6c:83:d7:be:04:8f:2d:3d:8e:96: da:8a:ea:c1:f2:75:f4:15:ed:fb:4c:a6:49:f0:d0: c4:fd:ba:9c:0d:85:a6:ba:7b:dd:0c:e0:c4:81:a1: 77:e5:b3:43:ee:71:37:25:a5:44:3e:88:b3:33:45: 8a:25:2f:f3:4f:7f:2c:ae:3d:d6:19:8c:57:d0:72: cf:22:7c:15:c2:a0:4f:0a:b3:3c:1f:fb:c7:76:75: 0c:e3:79:16:08:33:67:f0:b9:c0:9d:e6:70:c4:e9: dd:f7:7c:e4:ac:13:37:3c:82:57:1d:75:d5:20:7b: d1:dc:c1:84:59:9a:eb:2c:fc:67:fb:bd:78:ff:9e: f9:0b:ec:16:0a:1e:87:cf:e1:63:39:6d:d7:77:0b: 29:10:d4:15:05:df:8b:a9:00:5d:ce:44:52:5b:c7: b5:32:27:af:77:7c:eb:44:84:37:bd:08:f6:75:6f: b9:d9:92:8f:cc:5f:83:2a:94:ff:32:73:08:97:d3: cd:65:b2:81:12:54:f5:ac:2a:69:1e:93:ca:02:a7: ab:93:ea:62:ca:34:f3:88:20:a1:94:c2:a3:2a:e3: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:15:A5:DC:59:0B:CC:28:E5:EA:34:F6:7B:C6:79:17:CA:4F:16 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c0:38:2a:20:ad:61:8f:92:0e:51:29:2b:85:0d:01:e6:79: ca:a6:1c:dd:e4:22:24:5c:c3:ce:fd:19:5b:65:d4:97:e8:25: 1e:c4:58:3f:15:ec:43:55:ba:34:b3:0c:bc:6d:f7:34:3b:32: e8:aa:4d:33:04:03:cf:7e:29:f9:86:0c:6b:08:ac:b8:64:ed: 24:4c:7c:5f:58:b2:c0:4d:7c:2c:fe:eb:67:86:1b:92:dd:1c: 9a:83:27:e6:9f:a7:95:48:a3:f1:25:7f:b2:7c:98:7c:c0:cf: 2d:50:4d:0b:c4:8e:87:bc:6e:e4:d4:7f:a5:72:a3:93:ad:18: 42:81:a0:a0:e0:54:45:4c:7d:75:e7:79:ee:ef:c9:a8:ad:d6: 60:71:38:6a:37:f1:b9:34:d2:e1:d4:35:8a:83:e8:3a:a4:05: 9f:69:71:8f:0a:67:21:ce:9c:b9:28:fa:35:d6:81:94:8d:12: e9:75:90:83:72:65:e8:d7:95:5e:f6:34:79:7f:cc:88:5c:aa: 1e:d0:6e:3e:62:06:87:95:b4:4b:99:42:27:d2:7c:4b:de:bb: a9:e3:81:47:00:50:f6:c1:63:22:bc:5d:33:77:d4:5d:65:fe: 54:39:44:b1:3a:1c:ad:7e:ff:4f:a0:f1:63:ee:15:de:7c:54: c6:62:df:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwNDAzMDIzMDA4WhcNMjUwNDEwMDIzMDA4WjAYMRYwFAYD VQQDEw02N2VkZjJiMC01MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCPh7oKCCBPWsTdIRU/tR7YLg7C/sGUJMC9GwxLoWupKAGyD174Ejy09jpba iurB8nX0Fe37TKZJ8NDE/bqcDYWmunvdDODEgaF35bND7nE3JaVEPoizM0WKJS/z T38srj3WGYxX0HLPInwVwqBPCrM8H/vHdnUM43kWCDNn8LnAneZwxOnd93zkrBM3 PIJXHXXVIHvR3MGEWZrrLPxn+714/575C+wWCh6Hz+FjOW3XdwspENQVBd+LqQBd zkRSW8e1Mievd3zrRIQ3vQj2dW+52ZKPzF+DKpT/MnMIl9PNZbKBElT1rCppHpPK Aqerk+piyjTziCChlMKjKuNpxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqhFaXc WQvMKOXqNPZ7xnkXyk8WMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVwDgqIK1hj5IOUSkrhQ0B5nnKphzd5CIkXMPO/RlbZdSX6CUexFg/ FexDVbo0swy8bfc0OzLoqk0zBAPPfin5hgxrCKy4ZO0kTHxfWLLATXws/utnhhuS 3Ryagyfmn6eVSKPxJX+yfJh8wM8tUE0LxI6HvG7k1H+lcqOTrRhCgaCg4FRFTH11 53nu78mordZgcThqN/G5NNLh1DWKg+g6pAWfaXGPCmchzpy5KPo11oGUjRLpdZCD cmXo15Ve9jR5f8yIXKoe0G4+YgaHlbRLmUIn0nxL3rup44FHAFD2wWMivF0zd9Rd Zf5UOUSxOhytfv9PoPFj7hXefFTGYt/V -----END CERTIFICATE-----Generated at Fri Apr 4 18:18:42 2025 by rpki-client