$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: LJOUaZb0LyNPgQImk5nHdOm+hmTUo5sw62mkUDZorlk= Subject key identifier: 0E:FF:63:71:D6:78:89:77:32:7A:7D:EA:C6:35:D6:8C:DD:81:FC:AA Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 346A Signing time: Fri 04 Apr 2025 15:11:17 +0000 Manifest this update: Fri 04 Apr 2025 15:11:04 +0000 Manifest next update: Fri 11 Apr 2025 15:11:04 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: PTRi3swE5sVpubg5I20Z/ZLPmXe4VP+yIa1s+bihPbU=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E Validity Not Before: Apr 4 15:11:04 2025 GMT Not After : Apr 11 15:11:04 2025 GMT Subject: CN=67eff695-b15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:24:f8:35:1d:11:aa:74:a3:f9:28:51:a2: 3c:34:6b:93:a7:46:fe:e7:9b:44:87:74:a3:ad:e0: 45:11:e8:17:70:13:f1:c6:72:6f:97:e6:9c:b4:8c: e5:6c:c5:8a:5f:52:a2:59:c4:ad:b6:3a:29:22:e2: 7e:5b:f3:34:db:07:ac:c8:45:df:6c:f4:a7:fd:4c: ba:c9:89:81:b0:6d:86:5f:57:47:b8:1b:c1:7c:41: a8:40:bc:94:37:63:e3:2d:4f:56:eb:88:7d:d6:b5: d7:49:a6:be:c4:7f:d7:46:69:8f:50:30:a4:a1:77: a3:14:55:b9:23:63:6f:44:43:e1:e6:29:4b:4d:ba: 31:3c:46:08:6a:fd:15:c0:5b:02:10:94:27:63:24: ab:2f:b2:05:5f:a6:7c:6b:f9:ad:e6:ef:58:1e:6e: 12:df:17:48:64:33:6c:92:36:94:2e:a6:17:5d:3b: 3f:90:f5:d3:79:2c:34:a5:7a:2f:d7:99:76:5b:d2: 24:2c:01:0a:4f:84:8a:3c:89:b2:53:9c:bf:d3:df: d9:ee:62:6a:b5:b7:62:20:8a:de:a6:ed:e9:18:45: 8e:7e:a9:a4:b2:45:3b:b2:33:b2:e1:cc:32:bd:47: af:9a:fa:6c:b5:44:54:3b:7b:a0:0e:e5:72:e5:b5: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:63:71:D6:78:89:77:32:7A:7D:EA:C6:35:D6:8C:DD:81:FC:AA X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:56:61:27:a7:f3:e8:ef:73:89:2e:43:1c:6d:48:b4:29:c5: 55:28:79:db:06:31:77:c4:3d:43:b4:83:0c:92:96:1d:5a:6b: 1c:cc:05:68:c3:c1:11:b9:03:79:1a:25:d3:51:05:56:f1:d8: 00:dc:92:78:a0:4c:64:e1:12:21:f9:f5:d2:6f:83:17:ee:7e: f3:4a:ef:24:04:b3:75:df:87:05:d2:eb:44:30:92:7e:3a:06: 1b:35:4b:bb:4b:28:38:3d:e2:d3:e1:51:4f:75:f2:02:f4:c3: fa:94:9e:bc:86:52:b0:fc:17:bb:26:20:43:51:0c:dd:7e:64: 7b:2a:a4:9b:d8:d1:f9:25:95:06:22:03:05:fb:bc:0a:b4:7b: 67:0f:07:c1:ee:7e:cd:f3:77:ea:75:2a:86:da:6d:e2:50:38: a3:98:11:ef:49:85:04:e2:83:e2:0e:a7:3d:06:91:0d:64:70: 7a:75:3e:dd:0a:3f:db:b1:a3:2c:8e:bf:00:12:bd:07:a8:ee: db:56:b2:3a:6a:61:cc:e4:78:6c:49:83:14:3f:95:b7:05:ca: 9b:76:11:fe:fc:05:29:85:2c:07:6b:c3:82:bb:db:c6:e5:35: 9e:e4:7a:e3:26:5d:d9:81:63:cb:b6:7b:47:ee:e0:46:56:68: ab:30:da:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUwNDA0MTUxMTA0WhcNMjUwNDExMTUxMTA0WjAYMRYwFAYD VQQDEw02N2VmZjY5NS1iMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e8k+DUdEap0o/koUaI8NGuTp0b+55tEh3SjreBFEegXcBPxxnJvl+actIzl bMWKX1KiWcSttjopIuJ+W/M02wesyEXfbPSn/Uy6yYmBsG2GX1dHuBvBfEGoQLyU N2PjLU9W64h91rXXSaa+xH/XRmmPUDCkoXejFFW5I2NvREPh5ilLTboxPEYIav0V wFsCEJQnYySrL7IFX6Z8a/mt5u9YHm4S3xdIZDNskjaULqYXXTs/kPXTeSw0pXov 15l2W9IkLAEKT4SKPImyU5y/09/Z7mJqtbdiIIrepu3pGEWOfqmkskU7sjOy4cwy vUevmvpstURUO3ugDuVy5bVMRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7/Y3HW eIl3Mnp96sY11ozdgfyqMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgVmEnp/Po73OJLkMcbUi0KcVVKHnbBjF3xD1DtIMMkpYdWmsczAVo w8ERuQN5GiXTUQVW8dgA3JJ4oExk4RIh+fXSb4MX7n7zSu8kBLN134cF0utEMJJ+ OgYbNUu7Syg4PeLT4VFPdfIC9MP6lJ68hlKw/Be7JiBDUQzdfmR7KqSb2NH5JZUG IgMF+7wKtHtnDwfB7n7N83fqdSqG2m3iUDijmBHvSYUE4oPiDqc9BpENZHB6dT7d Cj/bsaMsjr8AEr0HqO7bVrI6amHM5HhsSYMUP5W3BcqbdhH+/AUphSwHa8OCu9vG 5TWe5HrjJl3ZgWPLtntH7uBGVmirMNqX -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:49 2025 by rpki-client