$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: fmhtYARXL7Xs/ssq/lJ9BJPr1gqAI7UJZgKWRHywIJU= Subject key identifier: 38:7D:84:53:CC:03:6F:B9:12:26:76:77:FD:27:C4:0F:27:68:B6:A1 Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 64 Signing time: Sat 19 Apr 2025 06:02:33 +0000 Manifest this update: Sat 19 Apr 2025 06:02:33 +0000 Manifest next update: Sat 26 Apr 2025 06:02:33 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: i+gswwrfmoUQiLDNwqN4xUNeIyswxqXWUExr7A88TQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 06:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Apr 19 06:02:33 2025 GMT Not After : Apr 26 06:02:33 2025 GMT Subject: CN=68033c79-60af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:bc:b9:2d:40:5f:e0:fc:20:dd:6f:7c:c5: 55:62:4c:9d:3a:e7:da:12:1b:ab:48:54:47:0a:93: 78:2c:0d:12:a1:0a:ab:cd:94:cd:5e:1d:85:d1:84: df:a4:4c:1e:f1:6d:e5:8f:40:3f:6a:ef:52:9d:e3: d0:81:e1:69:0a:50:bd:16:48:bc:95:0b:f7:20:e4: 7c:a4:89:47:f7:1a:57:90:29:90:d5:39:77:ad:09: 73:1a:3d:15:a2:73:bb:2f:c6:c1:1d:dc:6c:26:20: 0e:ce:4b:57:86:4e:a9:50:68:e9:68:b8:40:07:c9: 73:8d:74:aa:88:f2:c3:26:1a:48:9b:12:e7:56:72: 37:af:62:87:6f:55:1c:b8:40:8c:4f:70:9f:1f:05: 58:13:66:d8:78:69:fb:34:51:1f:a9:f1:50:47:d0: c0:35:34:27:55:41:d4:ac:b5:31:68:d6:64:a0:f7: 12:35:42:fe:60:48:dc:98:b6:cf:13:04:80:c3:b0: ba:27:f6:34:99:2f:53:67:fa:a0:0a:c3:22:be:3a: bf:09:be:60:aa:7e:26:89:72:e8:46:52:32:34:75: 1a:51:a7:8d:43:a1:d6:d8:ba:c5:7a:c5:22:1f:bf: ae:31:46:18:e2:98:6c:e8:23:67:03:18:33:9b:34: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7D:84:53:CC:03:6F:B9:12:26:76:77:FD:27:C4:0F:27:68:B6:A1 X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:40:ea:fb:ca:80:64:4b:31:fa:50:c3:f6:b2:ac:82:ed: 99:fc:a6:62:3c:d6:5e:14:29:4d:13:07:89:5a:68:84:0e:09: 46:c1:9e:9f:e0:46:fb:ab:4b:82:d7:b4:cd:a5:9c:1d:b1:d7: 7d:05:f6:1c:14:f3:cd:0f:90:1c:89:25:6f:0f:e3:ff:76:7f: 92:e0:e8:51:3d:cd:d1:d8:e1:55:d6:f9:94:a7:32:94:4c:9e: 5a:69:b7:c9:46:07:49:89:ef:c3:e6:1d:67:88:63:c8:d4:da: 06:e6:66:c7:f0:a6:74:4c:7c:47:d2:5c:8a:53:b0:bf:f0:a3: 85:2b:e1:e7:1e:2e:4a:2f:ff:13:2b:71:41:27:fa:54:6d:c3: 82:bf:aa:2c:cd:e2:2d:c0:d6:d7:47:08:f4:3e:30:26:74:04: a4:32:a6:0e:c2:bb:1f:84:cf:2d:bb:70:89:c0:37:b3:5d:fc: 0b:06:8e:c7:0d:37:e7:bc:30:ce:27:88:f5:21:ba:1a:d4:5d: 6d:f9:ac:a7:c1:38:96:bb:5d:d3:95:c3:68:c5:77:3c:2c:ba: d2:7a:6c:ff:3a:fe:d1:49:96:25:d9:1f:d0:e7:15:29:1d:fc: 6c:64:44:09:04:7e:d5:ab:ec:3e:53:9c:0a:9f:9f:de:2c:c1: 06:41:cf:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoODc5MkRFMzk5Q0Y2MzE5M0REQzI5RDMwRkJGMEE1ODFF MDI0RjAwMzAeFw0yNTA0MTkwNjAyMzNaFw0yNTA0MjYwNjAyMzNaMBgxFjAUBgNV BAMTDTY4MDMzYzc5LTYwYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDihLy5LUBf4Pwg3W98xVViTJ0659oSG6tIVEcKk3gsDRKhCqvNlM1eHYXRhN+k TB7xbeWPQD9q71Kd49CB4WkKUL0WSLyVC/cg5HykiUf3GleQKZDVOXetCXMaPRWi c7svxsEd3GwmIA7OS1eGTqlQaOlouEAHyXONdKqI8sMmGkibEudWcjevYodvVRy4 QIxPcJ8fBVgTZth4afs0UR+p8VBH0MA1NCdVQdSstTFo1mSg9xI1Qv5gSNyYts8T BIDDsLon9jSZL1Nn+qAKwyK+Or8JvmCqfiaJcuhGUjI0dRpRp41DodbYusV6xSIf v64xRhjimGzoI2cDGDObNOovAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOH2EU8wD b7kSJnZ3/SfEDydotqEwHwYDVR0jBBgwFoAUh5LeOZz2MZPdwp0w+/ClgeAk8AMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3L0EzREQ2QjlBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDVMZU9aejJNWlBkd3Awdy1fQ2xnZUFrOEFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3L0EzREQ2QjlBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQ ZHdwMHctX0NsZ2VBazhBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADW8QOr7yoBkSzH6UMP2sqyC7Zn8pmI81l4UKU0TB4laaIQOCUbBnp/g RvurS4LXtM2lnB2x130F9hwU880PkByJJW8P4/92f5Lg6FE9zdHY4VXW+ZSnMpRM nlppt8lGB0mJ78PmHWeIY8jU2gbmZsfwpnRMfEfSXIpTsL/wo4Ur4eceLkov/xMr cUEn+lRtw4K/qizN4i3A1tdHCPQ+MCZ0BKQypg7Cux+Ezy27cInAN7Nd/AsGjscN N+e8MM4niPUhuhrUXW35rKfBOJa7XdOVw2jFdzwsutJ6bP86/tFJliXZH9DnFSkd /GxkRAkEftWr7D5TnAqfn94swQZBz2U= -----END CERTIFICATE-----Generated at Sun Apr 20 22:22:37 2025 by rpki-client