$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json) Hash identifier: lUBog9T8N9S//BynnCd7lprxq8JimkW8QI8dIlEUsYw= Subject key identifier: B4:5D:E8:E2:3C:2A:C7:34:CE:F4:12:66:B7:58:70:59:ED:55:C2:8E Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft Manifest number: 028A Signing time: Tue 15 Apr 2025 01:21:09 +0000 Manifest this update: Tue 15 Apr 2025 01:21:09 +0000 Manifest next update: Tue 22 Apr 2025 01:21:08 +0000 Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: x6jePHxH99OowQ42Gg/J9cfD9H6dnzggEBxNqU3HhgI=) 2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: JpDBusAldNWd+IJVkNhhqJJDrViCPn/caif2F0IdJAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Validity Not Before: Apr 15 01:21:09 2025 GMT Not After : Apr 22 01:21:08 2025 GMT Subject: CN=67fdb485-11c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:5a:09:e1:92:b0:28:13:5d:89:16:63:bf: 76:87:32:6d:55:5b:6d:d7:69:bc:e4:26:f8:51:b9: a7:0e:c8:60:93:0c:33:62:4d:08:de:4b:eb:6e:3f: 3d:3e:55:89:87:73:8a:32:ad:ec:36:03:e4:8d:c6: fc:e1:cf:01:01:c6:00:03:88:39:a8:ef:a6:95:01: e9:1f:9b:7a:1d:e5:f5:f2:2c:a3:ab:93:4a:f0:2f: 35:dc:b8:ef:32:16:d3:29:03:9a:74:af:98:d9:60: 79:63:36:72:f3:4b:35:f7:09:6d:c4:c8:3d:89:2a: 7b:be:0d:24:21:bd:9b:b5:77:48:76:69:bc:de:8a: eb:a2:32:06:89:35:4b:0a:ff:f3:e8:07:2f:e4:dc: de:69:30:34:09:ba:53:28:a0:c1:af:cf:47:67:ea: 56:64:f0:51:bf:55:3d:39:d3:ea:a8:5a:6e:13:fe: a9:50:c8:4d:f7:6a:8d:e9:71:78:8d:0c:c7:e1:b3: cf:43:4d:c9:b9:7a:13:ef:3b:2e:06:1c:f4:30:15: 83:9f:30:b3:24:08:5c:8f:20:17:f8:a9:0a:a6:43: 44:9c:bb:36:5d:c9:14:f9:e5:6f:5d:fb:93:2d:4b: 64:12:fe:f6:f7:c5:e7:19:6b:19:c2:68:5f:99:96: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5D:E8:E2:3C:2A:C7:34:CE:F4:12:66:B7:58:70:59:ED:55:C2:8E X509v3 Authority Key Identifier: keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7a:d5:49:d1:8d:26:af:de:c2:99:4d:b4:e7:e2:b3:cf:c6: 65:3a:1e:ac:8b:83:c1:6f:11:3b:7e:16:54:22:67:1c:87:0c: 90:7f:72:84:ec:55:a0:74:94:a2:38:82:59:4c:5f:6e:6a:0a: da:05:df:ea:d4:cb:8e:4b:73:26:94:99:2f:36:4e:15:31:a2: 06:de:43:be:e2:3e:34:fb:87:c4:1a:ff:33:f9:69:c1:f1:90: 8d:ff:bd:e4:80:dd:17:72:01:ff:97:fe:6e:3b:54:33:dd:75: 2f:ab:ea:99:05:2d:af:50:db:30:88:30:1c:8b:e6:18:a0:ac: 8d:32:c8:91:05:df:ef:15:02:b4:4a:f2:a9:49:46:08:9a:e5: 56:a6:10:81:97:4a:ef:1f:0c:6d:91:fa:75:b2:29:a7:7f:02: ee:87:ab:2b:6e:34:24:2f:c5:d1:62:77:4e:58:4b:64:07:ab: 16:f3:fb:d1:61:aa:4a:70:b5:99:83:7a:11:96:83:44:97:e1: 78:13:73:a0:c4:c5:55:a9:82:06:ee:90:fe:bd:47:8e:b3:90: 8a:f3:c2:d6:12:01:37:79:73:1b:7b:bf:7f:dc:58:e9:bf:7a: 2d:97:40:98:5d:6a:56:a1:ad:18:02:b4:02:c9:6b:f1:d9:bf: 7c:b8:49:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1 QkEwMzkzNTUwHhcNMjUwNDE1MDEyMTA5WhcNMjUwNDIyMDEyMTA4WjAYMRYwFAYD VQQDEw02N2ZkYjQ4NS0xMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApblaCeGSsCgTXYkWY792hzJtVVtt12m85Cb4UbmnDshgkwwzYk0I3kvrbj89 PlWJh3OKMq3sNgPkjcb84c8BAcYAA4g5qO+mlQHpH5t6HeX18iyjq5NK8C813Ljv MhbTKQOadK+Y2WB5YzZy80s19wltxMg9iSp7vg0kIb2btXdIdmm83orrojIGiTVL Cv/z6Acv5NzeaTA0CbpTKKDBr89HZ+pWZPBRv1U9OdPqqFpuE/6pUMhN92qN6XF4 jQzH4bPPQ03JuXoT7zsuBhz0MBWDnzCzJAhcjyAX+KkKpkNEnLs2XckU+eVvXfuT LUtkEv7298XnGWsZwmhfmZbszwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRd6OI8 Ksc0zvQSZrdYcFntVcKOMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2 NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVCMi83QUM3NjdERTA2NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3 Ny0xazIzRGVVY2Rib0RrMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABetVJ0Y0mr97CmU205+Kzz8ZlOh6si4PBbxE7fhZUImcchwyQf3KE 7FWgdJSiOIJZTF9uagraBd/q1MuOS3MmlJkvNk4VMaIG3kO+4j40+4fEGv8z+WnB 8ZCN/73kgN0XcgH/l/5uO1Qz3XUvq+qZBS2vUNswiDAci+YYoKyNMsiRBd/vFQK0 SvKpSUYImuVWphCBl0rvHwxtkfp1simnfwLuh6srbjQkL8XRYndOWEtkB6sW8/vR YapKcLWZg3oRloNEl+F4E3OgxMVVqYIG7pD+vUeOs5CK88LWEgE3eXMbe79/3Fjp v3otl0CYXWpWoa0YArQCyWvx2b98uEk0 -----END CERTIFICATE-----Generated at Tue Apr 15 20:14:01 2025 by rpki-client