$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: 2JpVVZcka1VDBulUe4DEG908+lTKJVu8WEMdhFffHC4= Subject key identifier: 77:22:23:74:36:14:CE:1A:71:C3:28:74:BF:93:E2:B3:CB:DC:33:91 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0A6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0A5D Signing time: Fri 04 Apr 2025 19:49:19 +0000 Manifest this update: Fri 04 Apr 2025 19:49:18 +0000 Manifest next update: Fri 11 Apr 2025 19:49:18 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: nAJSSe9PM4gjes+H4OLHRoxMzIGaUdyAQt6sn5V3YXU=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2666 (0xa6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B Validity Not Before: Apr 4 19:49:18 2025 GMT Not After : Apr 11 19:49:18 2025 GMT Subject: CN=67f037be-c7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:42:5c:87:66:c1:81:a5:2a:cb:4c:0f:25:6c: b6:a2:b1:86:18:6d:a7:95:6a:4c:6a:ae:5c:2c:40: 43:ca:f0:ff:57:17:81:6d:c1:18:51:95:3e:3f:19: 24:58:57:0f:79:ed:41:78:10:72:52:9e:39:47:14: ef:da:dc:ea:27:04:b7:22:91:48:c2:04:15:5a:19: 5e:85:02:1c:1f:45:41:e2:8c:9b:a1:bb:54:5e:25: fa:88:43:48:29:d6:20:4f:9c:b3:0c:b6:53:22:56: c0:82:7d:7e:f4:2c:42:d9:00:ec:ee:fd:f0:3c:f4: be:47:4f:06:cd:3e:92:5d:c6:e8:f3:77:19:7b:4e: ab:52:12:a4:d3:bf:41:54:40:85:3b:7b:73:d1:28: 94:fb:85:cd:1e:07:a5:5e:60:d2:2d:6a:70:50:0c: 8c:54:5c:f0:47:49:ed:27:e3:82:ce:91:c1:c9:34: 68:bd:2b:5b:4e:55:1d:65:17:cb:c1:51:12:99:4f: 86:52:ba:ea:b6:e4:fb:ef:12:1b:20:c7:1a:f4:d2: 97:ce:df:02:47:91:68:f9:fd:de:36:6a:51:0a:18: 5b:7a:c8:48:48:11:11:00:e3:37:78:75:e4:32:ef: 10:73:61:23:9f:6d:69:98:72:29:d1:b9:ff:94:80: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:23:74:36:14:CE:1A:71:C3:28:74:BF:93:E2:B3:CB:DC:33:91 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e1:fb:99:a6:4f:87:5f:f1:88:98:20:4e:d2:b3:ca:72:f0: 68:28:71:90:4e:32:52:48:0d:be:c2:5a:2e:20:83:3d:31:07: f0:72:c2:5b:98:46:07:0f:ce:ac:9d:0d:62:51:f1:d6:c6:f3: f0:25:c9:8b:a0:ae:ad:e8:83:8d:ca:05:2f:41:cb:69:ea:5d: 41:bf:40:30:c5:d6:2e:57:a3:ce:38:73:12:b7:f9:b5:e6:30: 79:0c:0d:f6:9a:c1:65:8a:80:4a:1e:d3:80:47:b9:7f:b9:c2: 28:fc:26:ee:b8:6a:03:08:42:29:05:e0:a7:35:85:76:fc:f0: 95:cf:6c:50:00:5f:82:88:5b:fb:8b:f3:3e:d7:cb:41:84:54: fe:e6:cd:5b:07:e1:6e:aa:ad:95:c4:cf:5c:aa:50:4e:f5:bb: ac:e6:2d:72:a7:80:98:ea:42:87:07:30:12:0c:09:03:6f:ab: d2:97:fa:29:6e:3f:fd:c5:97:02:19:26:9e:bd:17:cc:4e:ac: f4:d2:6e:71:fe:9a:ff:0c:56:9c:3f:6a:b7:2b:49:dd:3e:34: 12:c3:a1:a0:7c:ea:00:d7:ef:33:04:0a:7f:fd:eb:3f:59:4d: 4c:77:36:0b:fc:ad:10:d0:39:8c:8b:2b:09:71:30:27:19:6f: 83:de:96:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwNDA0MTk0OTE4WhcNMjUwNDExMTk0OTE4WjAYMRYwFAYD VQQDEw02N2YwMzdiZS1jN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kJch2bBgaUqy0wPJWy2orGGGG2nlWpMaq5cLEBDyvD/VxeBbcEYUZU+Pxkk WFcPee1BeBByUp45RxTv2tzqJwS3IpFIwgQVWhlehQIcH0VB4oybobtUXiX6iENI KdYgT5yzDLZTIlbAgn1+9CxC2QDs7v3wPPS+R08GzT6SXcbo83cZe06rUhKk079B VECFO3tz0SiU+4XNHgelXmDSLWpwUAyMVFzwR0ntJ+OCzpHByTRovStbTlUdZRfL wVESmU+GUrrqtuT77xIbIMca9NKXzt8CR5Fo+f3eNmpRChhbeshISBERAOM3eHXk Mu8Qc2Ejn21pmHIp0bn/lIBrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHciI3Q2 FM4accModL+T4rPL3DORMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX4fuZpk+HX/GImCBO0rPKcvBoKHGQTjJSSA2+wlouIIM9MQfwcsJb mEYHD86snQ1iUfHWxvPwJcmLoK6t6IONygUvQctp6l1Bv0AwxdYuV6POOHMSt/m1 5jB5DA32msFlioBKHtOAR7l/ucIo/CbuuGoDCEIpBeCnNYV2/PCVz2xQAF+CiFv7 i/M+18tBhFT+5s1bB+Fuqq2VxM9cqlBO9bus5i1yp4CY6kKHBzASDAkDb6vSl/op bj/9xZcCGSaevRfMTqz00m5x/pr/DFacP2q3K0ndPjQSw6GgfOoA1+8zBAp//es/ WU1MdzYL/K0Q0DmMiysJcTAnGW+D3pZ1 -----END CERTIFICATE-----Generated at Sat Apr 5 12:54:27 2025 by rpki-client