$ rpki-client -vvf rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft File: HaAa_AiIyqYXHgoOdBz8kE7S328.mft (raw, json) Hash identifier: FRGVlNPcNHENY603Kh/pDT5TK3OeINalLO9U53q+g80= Subject key identifier: 77:CD:05:41:F0:1E:29:C4:EB:A1:10:BD:D8:08:18:15:3E:61:83:E4 Authority key identifier: 1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F Certificate issuer: /CN=A91352C6/serialNumber=1DA01AFC0888CAA6171E0A0E741CFC904ED2DF6F Certificate serial: 08AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft Manifest number: 08A9 Signing time: Fri 28 Mar 2025 20:47:42 +0000 Manifest this update: Fri 28 Mar 2025 20:47:42 +0000 Manifest next update: Fri 04 Apr 2025 20:47:42 +0000 Files and hashes: 1: HaAa_AiIyqYXHgoOdBz8kE7S328.crl (hash: zoAt/288Zkd9G5In/U0SbX/zyrRuIXfhCMmMP/Mi3K4=) 2: 939AAE78B1D511EA8E3DAE1CC4F9AE02.roa (hash: 2AnHzJwonUE0Oio1jBjuypmq05cqTxtCSZ5dai/xpII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352C6 Validity Not Before: Mar 28 20:47:42 2025 GMT Not After : Apr 4 20:47:42 2025 GMT Subject: CN=67e70aee-63f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:f4:3c:f1:bb:2a:12:a3:6e:b8:2d:5b:48: ea:39:55:49:bd:5b:a2:20:74:f8:33:4a:90:dc:de: fa:da:c2:43:f8:1e:2b:25:09:39:1e:51:bd:17:96: 3a:20:eb:99:34:32:09:5f:ef:eb:cf:e1:d5:bc:fa: ca:e4:14:75:61:64:c9:4a:d4:de:03:50:73:60:4e: c4:bc:84:dc:42:fc:7f:fb:29:9d:41:fd:51:ca:a6: 85:18:f2:a7:80:51:78:c4:af:67:05:29:ef:e3:27: ff:b9:cd:d5:e1:90:ae:a5:74:8a:47:fd:1d:27:2b: c7:ef:27:69:3f:db:a3:2f:64:31:f2:30:48:2b:bd: 04:81:f9:02:17:49:30:74:a1:51:4c:20:f2:84:8b: 96:36:a7:51:33:4b:db:a4:5d:ab:67:d9:fc:5c:e1: 7b:42:b4:d1:9c:b5:46:54:8f:0a:7d:6c:3a:e9:92: a4:0b:6c:8f:7c:6d:7a:ee:63:c7:d6:59:8f:ff:af: 63:df:fc:a3:a2:a2:9e:f7:23:7c:cf:9f:f9:5f:88: 46:ee:b8:85:74:95:8e:0f:f1:6f:f8:7b:a2:24:5c: 21:2c:9f:2d:a4:9a:f0:48:40:83:f8:31:ca:3e:08: 19:17:a5:57:72:ad:67:04:1b:a8:f3:62:b0:4b:ed: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CD:05:41:F0:1E:29:C4:EB:A1:10:BD:D8:08:18:15:3E:61:83:E4 X509v3 Authority Key Identifier: keyid:1D:A0:1A:FC:08:88:CA:A6:17:1E:0A:0E:74:1C:FC:90:4E:D2:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HaAa_AiIyqYXHgoOdBz8kE7S328.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352C6/1EDFE496B1D411EAA46F001AC4F9AE02/HaAa_AiIyqYXHgoOdBz8kE7S328.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:88:53:2b:e8:b6:eb:00:ba:f7:e0:f4:54:78:ea:5c:bc:ab: ea:2f:88:85:73:20:04:c3:0d:eb:55:b9:8e:33:aa:8f:bc:74: 7c:57:2a:60:6d:8b:b9:fb:46:b9:51:ec:d6:3f:a8:33:75:8d: ff:a0:7d:f5:dc:64:3a:d2:b8:9c:19:61:a6:1d:db:ad:4f:02: 97:af:68:2d:38:b1:fc:63:3c:1d:ef:23:89:8b:31:3c:20:73: 94:e3:6e:e6:0c:86:29:f1:d9:cc:17:d7:33:8d:b2:6d:22:bb: ba:e3:fa:82:b1:f4:58:0b:b1:7d:3d:6f:66:27:f6:8e:13:6a: 67:ec:be:ce:36:23:23:62:dd:05:3e:50:a3:17:f5:52:2a:e0: 4b:c0:99:e2:34:16:10:a3:39:a6:ac:8a:e1:98:f3:cc:da:e7: 16:0a:10:6a:75:98:81:06:5f:41:ba:85:9e:f9:dd:7f:35:5f: b4:3c:a2:a1:b3:c0:19:21:5f:d9:dd:68:5f:b2:3e:57:ed:a8: 4f:8b:88:2d:c7:00:5c:9a:49:e5:b8:14:91:7b:78:a8:59:18: 89:4c:81:4b:3d:ca:35:dc:b0:ac:d6:78:6f:08:1e:67:42:ed: 44:5a:4d:a8:a5:78:56:d9:ef:47:30:5b:54:51:8e:c0:20:09: f1:a7:9f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyQzYxMTAvBgNVBAUTKDFEQTAxQUZDMDg4OENBQTYxNzFFMEEwRTc0MUNGQzkw NEVEMkRGNkYwHhcNMjUwMzI4MjA0NzQyWhcNMjUwNDA0MjA0NzQyWjAYMRYwFAYD VQQDEw02N2U3MGFlZS02M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnP0PPG7KhKjbrgtW0jqOVVJvVuiIHT4M0qQ3N762sJD+B4rJQk5HlG9F5Y6 IOuZNDIJX+/rz+HVvPrK5BR1YWTJStTeA1BzYE7EvITcQvx/+ymdQf1RyqaFGPKn gFF4xK9nBSnv4yf/uc3V4ZCupXSKR/0dJyvH7ydpP9ujL2Qx8jBIK70EgfkCF0kw dKFRTCDyhIuWNqdRM0vbpF2rZ9n8XOF7QrTRnLVGVI8KfWw66ZKkC2yPfG167mPH 1lmP/69j3/yjoqKe9yN8z5/5X4hG7riFdJWOD/Fv+HuiJFwhLJ8tpJrwSECD+DHK PggZF6VXcq1nBBuo82KwS+11HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfNBUHw HinE66EQvdgIGBU+YYPkMB8GA1UdIwQYMBaAFB2gGvwIiMqmFx4KDnQc/JBO0t9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJDNi8xRURGRTQ5NkIx RDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlxWVhIZ29PZEJ6OGtFN1Mz MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhQWFfQWlJeXFZWEhnb09kQno4a0U3UzMyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJDNi8xRURGRTQ5NkIxRDQxMUVBQTQ2RjAwMUFDNEY5QUUwMi9IYUFhX0FpSXlx WVhIZ29PZEJ6OGtFN1MzMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGiFMr6LbrALr34PRUeOpcvKvqL4iFcyAEww3rVbmOM6qPvHR8Vypg bYu5+0a5UezWP6gzdY3/oH313GQ60ricGWGmHdutTwKXr2gtOLH8Yzwd7yOJizE8 IHOU427mDIYp8dnMF9czjbJtIru64/qCsfRYC7F9PW9mJ/aOE2pn7L7ONiMjYt0F PlCjF/VSKuBLwJniNBYQozmmrIrhmPPM2ucWChBqdZiBBl9BuoWe+d1/NV+0PKKh s8AZIV/Z3Whfsj5X7ahPi4gtxwBcmknluBSRe3ioWRiJTIFLPco13LCs1nhvCB5n Qu1EWk2opXhW2e9HMFtUUY7AIAnxp592 -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:21 2025 by rpki-client