$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: QAmYXYs26wlJvSzt2E4AWqeZ86TF3gzV80oClkq4PrE= Subject key identifier: 4B:0D:F3:95:58:C2:67:F6:D7:28:7A:91:07:7A:0C:BA:35:ED:42:43 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 06A2 Signing time: Tue 08 Apr 2025 21:55:49 +0000 Manifest this update: Tue 08 Apr 2025 21:55:49 +0000 Manifest next update: Tue 15 Apr 2025 21:55:49 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: pjQy6ip8WI4RTHTMSL1feUz/BkEEJa0pUXSIgp8Hm9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 21:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D Validity Not Before: Apr 8 21:55:49 2025 GMT Not After : Apr 15 21:55:49 2025 GMT Subject: CN=67f59b65-09ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:b0:00:5e:c4:69:31:30:a1:73:11:dc:9b: d2:c5:79:84:af:0a:dd:fa:9c:13:03:0b:d6:28:a0: 5c:97:87:93:53:46:55:37:72:82:69:1c:a1:7a:ff: a5:63:82:f8:b9:dd:69:a3:3b:81:c7:e2:bf:55:fb: 90:8a:51:79:07:1a:8a:3f:8b:c8:b7:8d:bc:eb:35: fa:97:4f:51:c8:97:3f:3c:fb:7f:4f:40:21:9a:7f: e7:79:11:77:f2:ca:3f:19:68:2f:c9:cf:e9:d0:59: 18:a3:e7:eb:e6:f8:8f:cb:ef:2f:7f:26:79:75:57: b7:95:cf:56:99:c6:54:0e:fd:d4:10:ae:9f:d1:9e: dd:56:0b:e4:a9:fb:e3:80:71:b5:e0:d0:2b:d2:44: dd:b7:0c:e6:68:f8:bd:de:2d:07:dd:dc:bb:6c:24: 33:11:74:b0:1b:89:c9:a2:23:05:96:e5:1f:80:fe: bc:a6:b0:67:29:98:94:e5:ab:b5:6a:c1:23:57:50: 9b:7f:34:5b:ae:33:bf:8b:46:6c:c5:8e:83:57:4e: a4:e2:c1:09:5d:32:0a:6c:83:e6:2c:83:2b:5d:44: f1:d6:5d:7a:67:98:a3:00:e7:8a:e2:7f:b9:aa:10: 97:6b:de:9b:83:66:bd:f4:2c:53:68:74:9b:d5:dc: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:F3:95:58:C2:67:F6:D7:28:7A:91:07:7A:0C:BA:35:ED:42:43 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c1:ba:01:09:a7:86:54:69:71:9e:2e:61:41:59:ed:db:1e: 44:14:c0:dd:9c:8f:84:b1:8e:81:b2:14:80:d2:dd:06:46:3c: b1:94:f1:0d:1e:d2:b0:16:3b:0c:fd:4c:de:f9:02:db:54:89: 0f:75:24:ce:17:92:c5:00:af:b3:33:5c:89:51:5d:5e:f0:d4: a4:fb:2d:a7:a1:0e:d2:2c:24:a0:00:0d:d9:cd:45:74:09:49: b6:3f:d0:9c:0b:07:d7:7f:e3:51:6a:9a:e6:81:53:bf:10:ab: 7d:99:56:8b:c4:0d:be:40:94:ae:f6:64:ab:97:67:38:c1:88: e5:17:af:fa:6a:38:c3:ea:66:31:fc:ed:37:c2:41:da:91:89: bf:d8:f8:26:7a:fd:c4:1d:8d:13:47:e1:93:34:b4:53:fe:c4: 20:db:c8:53:a6:ec:9f:83:4a:51:08:38:81:b6:3b:4c:44:06: 32:3b:24:db:a3:0e:79:d3:0d:6c:c1:eb:dc:1d:7f:59:de:18: a5:8a:45:9b:79:58:65:5d:5b:f2:f5:44:58:2e:6d:36:6b:ee: 86:9f:2d:52:de:05:29:d8:49:f3:ed:47:3a:46:7c:e6:92:4f: 9a:ad:08:16:50:db:9c:dc:16:d8:f1:a8:95:b1:60:6e:70:50: f6:15:a7:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUwNDA4MjE1NTQ5WhcNMjUwNDE1MjE1NTQ5WjAYMRYwFAYD VQQDEw02N2Y1OWI2NS0wOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XGwAF7EaTEwoXMR3JvSxXmErwrd+pwTAwvWKKBcl4eTU0ZVN3KCaRyhev+l Y4L4ud1pozuBx+K/VfuQilF5BxqKP4vIt4286zX6l09RyJc/PPt/T0Ahmn/neRF3 8so/GWgvyc/p0FkYo+fr5viPy+8vfyZ5dVe3lc9WmcZUDv3UEK6f0Z7dVgvkqfvj gHG14NAr0kTdtwzmaPi93i0H3dy7bCQzEXSwG4nJoiMFluUfgP68prBnKZiU5au1 asEjV1CbfzRbrjO/i0ZsxY6DV06k4sEJXTIKbIPmLIMrXUTx1l16Z5ijAOeK4n+5 qhCXa96bg2a99CxTaHSb1dyQVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsN85VY wmf21yh6kQd6DLo17UJDMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6wboBCaeGVGlxni5hQVnt2x5EFMDdnI+EsY6BshSA0t0GRjyxlPEN HtKwFjsM/Uze+QLbVIkPdSTOF5LFAK+zM1yJUV1e8NSk+y2noQ7SLCSgAA3ZzUV0 CUm2P9CcCwfXf+NRaprmgVO/EKt9mVaLxA2+QJSu9mSrl2c4wYjlF6/6ajjD6mYx /O03wkHakYm/2Pgmev3EHY0TR+GTNLRT/sQg28hTpuyfg0pRCDiBtjtMRAYyOyTb ow550w1swevcHX9Z3hilikWbeVhlXVvy9URYLm02a+6Gny1S3gUp2Enz7Uc6Rnzm kk+arQgWUNuc3BbY8aiVsWBucFD2Fae4 -----END CERTIFICATE-----Generated at Thu Apr 10 17:53:13 2025 by rpki-client