$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft File: H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json) Hash identifier: Ks9mBj/NtYkiSlYGUGXWSHKA5ZFseQD8Ccn1X6ASltw= Subject key identifier: F0:6D:F1:F1:9A:D2:F7:5D:DD:01:6C:C2:1B:DC:33:E2:46:4A:A8:2B Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft Manifest number: 08C6 Signing time: Sun 20 Apr 2025 20:13:58 +0000 Manifest this update: Sun 20 Apr 2025 20:13:58 +0000 Manifest next update: Sun 27 Apr 2025 20:13:58 +0000 Files and hashes: 1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: 025GyPGqRTvmQsTQ/cyaskDy/XSH955BNxFIysUw/W8=) 2: 6AD73A584A8811ED8D0B8B38C4F9AE02.roa (hash: fXl2igGJye4ZYwQR43jAvZ6b6h7qYdiNfyIYWYelBPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Validity Not Before: Apr 20 20:13:58 2025 GMT Not After : Apr 27 20:13:58 2025 GMT Subject: CN=68055586-f657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:50:86:58:ff:0f:29:22:32:c7:a4:e5:90: 7c:a3:61:2d:5c:a1:ee:87:1d:bb:f7:49:0c:b5:91: 47:a9:f2:30:e0:9f:84:73:77:87:5d:15:11:46:47: c4:74:1f:e5:ae:3f:45:e8:19:4a:09:49:79:12:5b: 09:84:ba:04:81:85:8d:a7:46:ca:8b:cb:f4:22:95: b3:c4:19:1b:71:37:68:5e:e5:54:05:fd:f0:7d:2c: f4:11:ea:cb:a2:8b:b3:94:be:af:56:68:ac:05:22: 91:1f:6d:77:23:6f:a5:9e:b9:07:3e:fe:69:7a:eb: ad:b6:40:b0:f0:67:aa:19:ac:aa:52:ce:14:6a:0f: 50:6a:78:5d:1e:e2:14:f2:06:61:37:88:10:27:27: 2d:fe:51:fa:07:b8:2e:6a:7c:57:7f:0f:bd:07:2e: 6b:33:b4:aa:8f:64:f6:59:5b:68:4a:47:c6:24:43: 9f:17:43:fb:9e:93:03:14:b8:6d:f2:b1:33:da:7f: 2d:20:e6:c1:fd:dc:c3:d8:7b:c5:ea:fa:1e:d5:8f: 40:4a:80:f6:e6:ea:fc:34:80:1d:85:53:08:f2:c4: fe:37:52:d5:d8:33:b7:38:c4:49:11:30:38:18:59: e4:65:ce:d7:fd:90:e9:99:f9:71:47:79:2b:c0:12: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:F1:F1:9A:D2:F7:5D:DD:01:6C:C2:1B:DC:33:E2:46:4A:A8:2B X509v3 Authority Key Identifier: keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:66:15:77:de:aa:8f:6c:2e:b2:d5:57:b9:10:36:cd:d3:d9: 42:e9:1a:33:57:08:74:ff:2b:ff:de:7f:4a:9b:57:ed:73:88: 73:b9:0c:46:d2:6e:4c:c4:ff:7f:1a:db:cb:e7:a7:52:b6:70: 09:31:1d:01:84:85:52:80:11:4f:98:09:63:32:a9:0d:14:d0: b4:04:67:ef:00:23:2a:78:d3:ad:6b:44:43:c4:3a:e4:ca:2c: 81:a7:cd:de:36:fc:a1:29:91:34:95:e7:cc:68:8b:43:46:68: bf:d6:d8:62:09:22:5a:2b:e0:4a:58:44:e6:0a:ee:7d:47:ec: 8b:70:fb:3d:98:75:06:07:63:92:36:8d:ed:64:09:f3:40:61: 59:b1:41:a9:90:aa:ef:6f:c7:4b:f2:6c:b9:41:3d:b7:e6:d3: f7:11:60:ce:42:05:aa:56:7f:fa:49:27:10:22:e9:2b:2e:9e: b5:e1:86:a4:df:ef:bb:1a:40:b0:a7:09:df:f5:f9:de:4d:fa: 82:37:04:56:6c:e9:04:19:02:d8:2f:42:23:1d:9a:e8:10:9b: 7b:44:aa:35:82:21:7d:f4:9e:23:79:d3:bd:a6:ab:0c:62:00: e4:4a:84:86:cd:d3:5c:c6:6b:64:ac:67:f2:4a:da:95:26:d3: 83:04:bf:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NDcxMTAvBgNVBAUTKDFGNkMzMzRFQkM2NDYyQTI2NDUyODY3QUJCNUY4NEVG NjhBREMwMkMwHhcNMjUwNDIwMjAxMzU4WhcNMjUwNDI3MjAxMzU4WjAYMRYwFAYD VQQDEw02ODA1NTU4Ni1mNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15xQhlj/DykiMsek5ZB8o2EtXKHuhx2790kMtZFHqfIw4J+Ec3eHXRURRkfE dB/lrj9F6BlKCUl5ElsJhLoEgYWNp0bKi8v0IpWzxBkbcTdoXuVUBf3wfSz0EerL oouzlL6vVmisBSKRH213I2+lnrkHPv5peuuttkCw8GeqGayqUs4Uag9QanhdHuIU 8gZhN4gQJyct/lH6B7guanxXfw+9By5rM7Sqj2T2WVtoSkfGJEOfF0P7npMDFLht 8rEz2n8tIObB/dzD2HvF6voe1Y9ASoD25ur8NIAdhVMI8sT+N1LV2DO3OMRJETA4 GFnkZc7X/ZDpmflxR3krwBKZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBt8fGa 0vdd3QFswhvcM+JGSqgrMB8GA1UdIwQYMBaAFB9sM068ZGKiZFKGertfhO9orcAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ0Ny80Q0VCM0MzQ0Iw RkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lxSmtVb1o2dTEtRTcyaXR3 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyd3pUcnhrWXFKa1VvWjZ1MS1FNzJpdHdDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ0Ny80Q0VCM0MzQ0IwRkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lx SmtVb1o2dTEtRTcyaXR3Q3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxZhV33qqPbC6y1Ve5EDbN09lC6RozVwh0/yv/3n9Km1ftc4hzuQxG 0m5MxP9/GtvL56dStnAJMR0BhIVSgBFPmAljMqkNFNC0BGfvACMqeNOta0RDxDrk yiyBp83eNvyhKZE0lefMaItDRmi/1thiCSJaK+BKWETmCu59R+yLcPs9mHUGB2OS No3tZAnzQGFZsUGpkKrvb8dL8my5QT235tP3EWDOQgWqVn/6SScQIukrLp614Yak 3++7GkCwpwnf9fneTfqCNwRWbOkEGQLYL0IjHZroEJt7RKo1giF99J4jedO9pqsM YgDkSoSGzdNcxmtkrGfyStqVJtODBL9d -----END CERTIFICATE-----Generated at Tue Apr 22 04:46:17 2025 by rpki-client