$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft File: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json) Hash identifier: PXKZwI9GDGdEEVaZ+6NzKsd8QpH1cH6fBWxDC4YoW28= Subject key identifier: BF:3C:34:A0:4D:9B:61:2D:83:2C:94:2C:F1:CA:D9:49:95:70:9E:18 Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D Certificate issuer: /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Certificate serial: 0E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft Manifest number: 0E27 Signing time: Mon 14 Apr 2025 17:44:43 +0000 Manifest this update: Mon 14 Apr 2025 17:44:42 +0000 Manifest next update: Mon 21 Apr 2025 17:44:42 +0000 Files and hashes: 1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: FHv8G71YhBk1aVJ4WHy7Q0XkpUqnh/nqaDUYq4f4Wdc=) 2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: jnR4T4XlGdfZ2gOhYWumXwRlSJ7MxpHX0lAGLhkJjWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 17:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D Validity Not Before: Apr 14 17:44:42 2025 GMT Not After : Apr 21 17:44:42 2025 GMT Subject: CN=67fd498b-3eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:ba:47:0e:52:b6:fb:45:e8:dd:17:07:15: b1:4d:84:d9:d2:a1:60:1e:2d:a7:d4:2a:b2:3d:62: 23:15:07:54:a0:d4:40:3e:75:fd:ab:da:1a:b9:17: 3a:19:62:f5:4f:66:b1:f9:e7:b3:a1:fe:59:19:b6: 2b:d0:bb:0d:df:0f:1a:1f:4b:af:d3:c8:e2:90:e4: 2e:f3:31:84:46:6f:53:82:6c:80:4e:91:c1:fa:9e: ef:da:3e:9e:60:2c:ad:dd:be:5a:0c:7a:d6:5c:0d: 11:7b:b2:e3:36:ec:40:98:7e:29:6f:db:99:a4:40: a4:cb:42:ab:20:9b:95:9a:62:25:e0:05:7b:dd:06: 27:ef:61:86:39:3d:ed:e2:4c:d1:fc:dd:5f:22:ed: 49:43:df:b3:28:f4:32:1d:dd:5f:58:40:c5:d3:38: ea:4c:53:2c:60:ce:bc:75:5a:68:22:a9:a8:66:72: 3b:60:f4:56:39:a5:0b:ee:d5:67:63:fe:b7:bf:09: 01:15:08:91:32:9b:12:ca:d8:a5:8a:42:c4:51:ff: 5c:6a:06:88:a9:41:07:56:96:b7:9b:5d:07:98:fe: e8:f7:e0:43:ad:af:c4:ef:ed:e9:06:52:f6:07:f0: 81:58:a6:c5:87:ae:94:af:a7:37:b1:25:32:60:c9: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3C:34:A0:4D:9B:61:2D:83:2C:94:2C:F1:CA:D9:49:95:70:9E:18 X509v3 Authority Key Identifier: keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a3:0b:52:c1:c8:ec:6b:b3:18:35:b9:ee:87:b1:e6:50:e1: bb:74:b7:7f:4e:8f:84:a1:75:ac:95:05:f6:15:43:c2:e5:16: 56:8e:89:a1:92:e8:2d:d0:40:72:f9:28:16:f6:53:4d:9f:13: 19:63:50:c8:c1:4b:71:72:bf:84:91:96:ba:e4:6a:db:5d:1a: 3d:e5:cb:c9:03:f0:c0:5f:68:1f:ce:61:00:a6:5f:c2:2e:5f: cb:29:fc:a7:b5:e9:b9:dd:8a:48:8c:e0:7e:02:13:b2:c0:ee: d7:c1:49:93:a3:c6:28:4a:ea:06:71:9d:e2:40:ec:a8:b1:28: fd:6c:57:f7:d7:bd:4e:19:e9:e0:35:c6:06:1a:7b:2d:9f:d9: 69:51:d1:9f:36:66:e0:47:18:f1:26:1d:25:36:c6:c7:d1:6d: f9:c4:52:f5:75:c7:a4:2e:93:77:bb:7f:ca:74:64:8c:b2:6c: 40:82:30:28:f7:9c:47:78:28:0c:31:a0:b5:64:f7:6e:ff:90: 4e:21:a5:ff:58:ab:02:0a:97:08:15:d5:e9:d7:9e:ba:44:4a: d7:77:45:dd:db:40:53:d2:30:92:f7:18:ec:e4:8f:22:22:2a: 90:4a:f5:3d:76:bd:1f:6e:52:7f:7f:c3:ec:a0:10:cf:94:57: bb:f8:38:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE QjM3N0IxMUQwHhcNMjUwNDE0MTc0NDQyWhcNMjUwNDIxMTc0NDQyWjAYMRYwFAYD VQQDEw02N2ZkNDk4Yi0zZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOa6Rw5StvtF6N0XBxWxTYTZ0qFgHi2n1CqyPWIjFQdUoNRAPnX9q9oauRc6 GWL1T2ax+eezof5ZGbYr0LsN3w8aH0uv08jikOQu8zGERm9TgmyATpHB+p7v2j6e YCyt3b5aDHrWXA0Re7LjNuxAmH4pb9uZpECky0KrIJuVmmIl4AV73QYn72GGOT3t 4kzR/N1fIu1JQ9+zKPQyHd1fWEDF0zjqTFMsYM68dVpoIqmoZnI7YPRWOaUL7tVn Y/63vwkBFQiRMpsSytilikLEUf9cagaIqUEHVpa3m10HmP7o9+BDra/E7+3pBlL2 B/CBWKbFh66Ur6c3sSUyYMm+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL88NKBN m2EtgyyULPHK2UmVcJ4YMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qzc0My9GOEFFMjg4MEEyMUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2Rf WEQ4S0pTYUM5eDNiTjNzUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiowtSwcjsa7MYNbnuh7HmUOG7dLd/To+EoXWslQX2FUPC5RZWjomh kugt0EBy+SgW9lNNnxMZY1DIwUtxcr+EkZa65GrbXRo95cvJA/DAX2gfzmEApl/C Ll/LKfyntem53YpIjOB+AhOywO7XwUmTo8YoSuoGcZ3iQOyosSj9bFf3171OGeng NcYGGnstn9lpUdGfNmbgRxjxJh0lNsbH0W35xFL1dcekLpN3u3/KdGSMsmxAgjAo 95xHeCgMMaC1ZPdu/5BOIaX/WKsCCpcIFdXp1566RErXd0Xd20BT0jCS9xjs5I8i IiqQSvU9dr0fblJ/f8PsoBDPlFe7+DjS -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:06 2025 by rpki-client