$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft File: _hORwLImyM6_pKKtZpauS4K_fic.mft (raw, json) Hash identifier: OVsmKZSh4LHjYCP3kZg3h9Y88ITaBr4EPAb89Ny+3Rg= Subject key identifier: CF:52:E5:A7:36:24:0F:F1:16:1A:3F:CB:63:86:30:3B:92:D2:7A:64 Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27 Certificate issuer: /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft Manifest number: 01A8 Signing time: Sat 29 Mar 2025 02:50:22 +0000 Manifest this update: Sat 29 Mar 2025 02:50:22 +0000 Manifest next update: Sat 05 Apr 2025 02:50:22 +0000 Files and hashes: 1: _hORwLImyM6_pKKtZpauS4K_fic.crl (hash: PhOzqIFmRym3AGIlbm9GzFeqxjTQaWOaYIV8SWRDZUM=) 2: 7369922E680A11EEA25B1D1FC4F9AE02.roa (hash: 24GbMLp8DMTZ3h6VXw3inwkNu/B522DsUckUsbm7BTg=) 3: 7AEB97D2A45011ED8AB8A437C4F9AE02.roa (hash: onrdwOUBSMf30DMB2gEtxkD8C7GCfvol8JynThaYBqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E369 Validity Not Before: Mar 29 02:50:22 2025 GMT Not After : Apr 5 02:50:22 2025 GMT Subject: CN=67e75fee-1eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:c7:3f:f7:54:a2:3e:e8:b8:2a:25:2d:d0: 15:a3:54:24:0f:f6:d6:ed:a1:45:bf:b4:17:42:fc: b8:9a:f6:ee:99:6e:8a:48:75:b9:5b:35:2f:a7:69: 16:8e:98:89:e8:1e:01:8d:ed:6a:ef:27:7f:60:80: d7:67:c7:9c:d9:51:58:dd:a2:0e:41:e1:5f:bc:21: 4d:d3:11:bb:9a:47:21:23:69:69:4b:d1:32:12:c6: 9d:cb:f2:b9:a8:21:8c:cd:2b:06:0d:c9:15:a7:d5: 2f:f1:90:87:4f:3f:3d:af:25:32:82:88:4a:d7:ab: 7a:85:22:10:e4:6a:d7:e1:82:2a:f7:9c:93:b0:03: e9:62:c5:fc:2a:70:1f:ff:e2:e9:71:1e:7a:6f:87: 42:47:68:0b:af:8d:7e:ed:bc:19:c1:15:8f:af:1c: ad:f5:c4:de:68:f8:b9:eb:64:d1:20:6e:fb:0f:35: 3d:be:ae:71:c7:c3:d3:a5:ef:01:56:4e:58:d8:2d: 3e:a1:b7:b8:8d:ef:6c:0e:50:d8:7e:19:8d:cc:54: 52:4a:8d:52:76:19:e2:c4:e6:60:74:5d:4b:14:2a: 18:55:12:ca:2d:80:6c:b5:53:75:f9:5d:cd:36:7a: 18:c9:ec:49:08:8e:1c:58:4e:93:d3:4f:9c:51:ee: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:52:E5:A7:36:24:0F:F1:16:1A:3F:CB:63:86:30:3B:92:D2:7A:64 X509v3 Authority Key Identifier: keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2b:55:d1:da:0c:b8:d2:1c:f7:ae:18:dc:b7:e4:5a:9f:41: e9:9f:ff:2c:ce:65:2c:5e:9b:4f:31:2b:37:21:47:99:6f:30: cf:3a:46:f7:fc:31:d8:0f:b4:64:53:cf:ab:81:51:dd:ac:dd: a3:e3:a2:f4:96:39:30:92:a7:cc:37:ef:9b:55:22:1a:7b:fd: 12:33:ae:2b:c5:3f:1d:95:04:07:37:7e:b0:03:cd:9d:f6:d0: cf:af:1b:5b:ef:ed:12:a7:33:85:0e:80:ea:f3:d3:34:2c:ea: fc:12:ba:dc:b4:fb:ee:3c:92:75:d8:f2:05:f6:7f:13:08:cb: 4a:6e:b8:22:69:c3:34:15:9c:b8:14:1e:1f:48:0a:c3:e5:e4: 2a:ff:b6:5c:d3:2e:2e:79:d9:8d:24:3b:92:90:4f:77:7b:3b: b6:26:4f:df:a3:35:70:dd:e4:5d:38:af:68:16:c2:e7:2c:36: 18:82:0a:64:31:12:55:9f:b4:33:ee:40:3c:25:ef:f7:88:13: 54:e3:f7:c2:20:88:59:0e:25:3d:ef:e6:7b:f8:4f:ca:8b:3d: 1c:cc:b4:ab:a8:37:74:c2:e5:67:17:6d:4d:24:11:fe:ff:e0: cd:82:a8:50:46:f2:b1:ce:85:37:67:14:54:89:f1:4d:fc:fb: b0:9d:3c:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNjkxMTAvBgNVBAUTKEZFMTM5MUMwQjIyNkM4Q0VCRkE0QTJBRDY2OTZBRTRC ODJCRjdFMjcwHhcNMjUwMzI5MDI1MDIyWhcNMjUwNDA1MDI1MDIyWjAYMRYwFAYD VQQDEw02N2U3NWZlZS0xZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs/HP/dUoj7ouColLdAVo1QkD/bW7aFFv7QXQvy4mvbumW6KSHW5WzUvp2kW jpiJ6B4Bje1q7yd/YIDXZ8ec2VFY3aIOQeFfvCFN0xG7mkchI2lpS9EyEsady/K5 qCGMzSsGDckVp9Uv8ZCHTz89ryUygohK16t6hSIQ5GrX4YIq95yTsAPpYsX8KnAf /+LpcR56b4dCR2gLr41+7bwZwRWPrxyt9cTeaPi562TRIG77DzU9vq5xx8PTpe8B Vk5Y2C0+obe4je9sDlDYfhmNzFRSSo1SdhnixOZgdF1LFCoYVRLKLYBstVN1+V3N NnoYyexJCI4cWE6T00+cUe4yRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9S5ac2 JA/xFho/y2OGMDuS0npkMB8GA1UdIwQYMBaAFP4TkcCyJsjOv6SirWaWrkuCv34n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM2OS8wRTJGQjNDODg4 RDgxMUVEOUI4NUU1NDhDNEY5QUUwMi9faE9Sd0xJbXlNNl9wS0t0WnBhdVM0S19m aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oT1J3TElteU02X3BLS3RacGF1UzRLX2ZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM2OS8wRTJGQjNDODg4RDgxMUVEOUI4NUU1NDhDNEY5QUUwMi9faE9Sd0xJbXlN Nl9wS0t0WnBhdVM0S19maWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFK1XR2gy40hz3rhjct+Ran0Hpn/8szmUsXptPMSs3IUeZbzDPOkb3 /DHYD7RkU8+rgVHdrN2j46L0ljkwkqfMN++bVSIae/0SM64rxT8dlQQHN36wA82d 9tDPrxtb7+0SpzOFDoDq89M0LOr8ErrctPvuPJJ12PIF9n8TCMtKbrgiacM0FZy4 FB4fSArD5eQq/7Zc0y4uedmNJDuSkE93ezu2Jk/fozVw3eRdOK9oFsLnLDYYggpk MRJVn7Qz7kA8Je/3iBNU4/fCIIhZDiU97+Z7+E/Kiz0czLSrqDd0wuVnF21NJBH+ /+DNgqhQRvKxzoU3ZxRUifFN/PuwnTym -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:10 2025 by rpki-client