$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: 1ZLichkklBm1ZC6uBjJLS3SttvmL1GDO7s2fkzt2Nos= Subject key identifier: 0B:CD:E8:8A:D4:F4:5F:A3:5E:0C:B2:CE:BE:E0:3F:F4:BE:A6:32:8D Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: FF Signing time: Thu 03 Apr 2025 04:23:48 +0000 Manifest this update: Thu 03 Apr 2025 04:23:48 +0000 Manifest next update: Thu 10 Apr 2025 04:23:48 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: rfAS8z6S2e+usZVjypGxzp4opXz69LJmLmZgmqxoxPQ=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B Validity Not Before: Apr 3 04:23:48 2025 GMT Not After : Apr 10 04:23:48 2025 GMT Subject: CN=67ee0d54-6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:09:7b:dd:89:a8:1c:df:87:96:69:c9:31: 5c:d7:13:1f:d1:71:64:f9:40:9c:5a:0a:1e:c0:3c: 06:6e:b9:af:f5:86:3d:00:0d:72:38:6f:0f:30:e4: 06:3a:43:cf:c0:fc:84:9c:9e:c8:cb:65:8c:19:fd: 4f:66:1d:69:68:47:e4:88:ef:13:86:e5:87:0d:fd: 54:05:a0:fd:84:dc:b9:e1:c0:59:06:e6:af:79:22: 89:2c:f6:45:85:99:d0:e0:b6:87:55:09:50:c5:6a: f5:db:c7:a1:61:fe:e5:d9:5a:35:82:1d:3b:e3:21: 79:5a:33:17:cf:12:08:cf:83:9c:f1:12:1c:c5:48: c0:a0:66:f5:93:36:5f:ec:58:c1:56:71:ac:d9:de: 98:21:5c:ec:8c:29:08:de:58:58:cc:0d:09:68:a2: 4b:d1:da:89:55:f8:4f:57:48:8e:65:84:51:83:26: 0d:65:d7:9a:e7:d1:04:bd:91:6d:2b:d2:50:0b:d5: fc:c4:7d:3c:e9:3a:72:0d:8e:2d:e3:d7:82:d6:a4: f3:e1:38:e9:65:9a:97:a3:1c:e5:1a:96:16:b6:db: 91:2e:ac:47:9b:d4:c5:3f:e0:06:b6:28:c3:29:f6: c8:3c:27:0c:43:08:66:1b:f8:d9:13:86:c5:21:b0: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CD:E8:8A:D4:F4:5F:A3:5E:0C:B2:CE:BE:E0:3F:F4:BE:A6:32:8D X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:06:d3:55:93:da:a9:5e:3f:db:70:ef:60:d7:2e:42:be:c3: d5:42:6f:10:93:3b:8d:57:60:5d:18:50:9b:c9:9b:1d:bf:86: 34:7f:49:6e:9c:28:2e:eb:b6:55:5a:05:1c:b6:c2:15:5b:d5: d2:5c:e4:80:a8:78:6a:34:b7:d8:a5:a6:eb:87:be:c7:07:07: 09:0e:f3:0f:36:17:ad:a8:ca:6b:64:6a:01:77:69:12:0c:46: 70:28:9e:89:a0:70:dd:bb:af:a8:ac:4b:00:f4:a3:6d:bb:bb: 01:e6:fe:5f:5e:42:38:48:f5:ef:50:96:ee:cc:4f:3d:c1:a1: 53:87:61:09:10:7d:3c:2c:13:7d:cc:3a:3e:c1:35:64:6b:58: 8c:22:44:4c:61:02:d7:cc:b6:be:89:94:62:78:be:85:0e:89: 87:7a:d8:ad:a1:ef:9a:6d:c7:39:e7:bb:a8:54:0c:ad:05:ad: 9e:25:a9:0d:71:96:1d:8d:8a:06:ae:c6:bf:11:90:0c:9d:11: 3c:d3:e8:98:df:c2:6d:1b:1f:77:d3:68:32:e1:0b:12:18:0e: 92:ea:25:6e:dd:ea:7d:d4:f9:55:5f:53:44:aa:12:b1:77:d0: 47:47:a0:d3:d0:f0:f8:57:fe:e9:82:44:e0:26:0e:53:3f:b7: f7:a4:80:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjUwNDAzMDQyMzQ4WhcNMjUwNDEwMDQyMzQ4WjAYMRYwFAYD VQQDEw02N2VlMGQ1NC02YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbIJe92JqBzfh5ZpyTFc1xMf0XFk+UCcWgoewDwGbrmv9YY9AA1yOG8PMOQG OkPPwPyEnJ7Iy2WMGf1PZh1paEfkiO8ThuWHDf1UBaD9hNy54cBZBuaveSKJLPZF hZnQ4LaHVQlQxWr128ehYf7l2Vo1gh074yF5WjMXzxIIz4Oc8RIcxUjAoGb1kzZf 7FjBVnGs2d6YIVzsjCkI3lhYzA0JaKJL0dqJVfhPV0iOZYRRgyYNZdea59EEvZFt K9JQC9X8xH086TpyDY4t49eC1qTz4TjpZZqXoxzlGpYWttuRLqxHm9TFP+AGtijD KfbIPCcMQwhmG/jZE4bFIbBd8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvN6IrU 9F+jXgyyzr7gP/S+pjKNMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCABtNVk9qpXj/bcO9g1y5CvsPVQm8QkzuNV2BdGFCbyZsdv4Y0f0lu nCgu67ZVWgUctsIVW9XSXOSAqHhqNLfYpabrh77HBwcJDvMPNhetqMprZGoBd2kS DEZwKJ6JoHDdu6+orEsA9KNtu7sB5v5fXkI4SPXvUJbuzE89waFTh2EJEH08LBN9 zDo+wTVka1iMIkRMYQLXzLa+iZRieL6FDomHetitoe+abcc557uoVAytBa2eJakN cZYdjYoGrsa/EZAMnRE80+iY38JtGx9302gy4QsSGA6S6iVu3ep91PlVX1NEqhKx d9BHR6DT0PD4V/7pgkTgJg5TP7f3pIC+ -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:23 2025 by rpki-client