$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: Ptd8Hxvzyqgobq9psMRk9JHFHXbtbWC93AttBHOY7Zs= Subject key identifier: E4:44:5E:0F:11:F0:0C:90:D0:0E:17:01:13:A9:2B:ED:13:5E:24:B6 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0B66 Signing time: Fri 04 Apr 2025 19:10:45 +0000 Manifest this update: Fri 04 Apr 2025 19:10:44 +0000 Manifest next update: Fri 11 Apr 2025 19:10:44 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: Dg5icgyY+MjgXFSQa2BYpIiTLcTQPE79+R7k/0I4Rls=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515 Validity Not Before: Apr 4 19:10:44 2025 GMT Not After : Apr 11 19:10:44 2025 GMT Subject: CN=67f02eb4-bc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:0e:f1:fc:15:41:12:79:35:76:f6:3e:bd:0c: 4a:90:13:bb:e2:79:95:54:98:dd:2f:bd:f9:9d:36: fb:4f:96:ca:88:e9:8a:05:b7:9b:04:41:53:ce:08: 92:2c:db:59:8f:27:0c:ea:8c:c9:08:97:be:1d:a8: e2:d3:0e:fd:0d:1c:a4:c1:2f:28:48:21:a0:b9:a2: 05:4e:4b:71:55:96:ef:d8:ba:fa:e6:a9:3d:f1:4d: da:2b:39:8e:a4:c5:c4:12:21:d2:7c:46:c4:9c:36: 93:3d:3c:18:d7:24:15:3b:23:87:6c:9d:c9:82:90: 70:ca:1b:c8:f9:61:aa:6e:5b:f2:92:45:22:75:56: 65:e4:e2:3b:16:13:5e:5b:49:7b:14:b5:de:d0:6f: 64:12:81:4a:8b:1a:02:e6:5e:68:53:0f:c9:b9:44: 46:2b:e0:36:05:84:db:c4:05:2a:c4:5a:60:d3:89: 18:6f:c5:4a:5c:bc:66:90:b3:fb:fc:ac:0c:eb:0d: e8:7b:74:5b:af:fb:d9:97:90:38:73:8e:32:25:75: 33:53:a2:a0:cb:32:bb:ed:16:79:70:79:95:8a:49: f4:38:9d:f8:ab:59:7b:9b:ed:0f:06:18:db:6a:0e: f7:9d:ea:08:b7:90:5e:bc:7f:d2:69:7d:04:7e:bc: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:44:5E:0F:11:F0:0C:90:D0:0E:17:01:13:A9:2B:ED:13:5E:24:B6 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a8:af:31:02:8d:e5:f3:ec:a6:dc:87:ee:9e:8b:fb:c1:a8: ec:66:a4:14:73:c2:5a:53:a2:e2:7a:40:51:72:e6:78:15:d1: b1:85:ba:3f:46:d4:0e:bd:4b:e9:17:65:ef:4b:3c:e5:d9:58: 49:77:a8:a4:c4:95:87:34:d8:b2:14:1e:05:44:1e:24:98:7f: da:6a:86:78:70:fd:9f:60:5a:05:99:d4:b9:23:69:cb:1c:5b: a9:73:d6:c3:72:66:6c:58:bd:cc:0e:6b:11:c1:28:e8:9e:ea: aa:a5:1c:24:95:a1:34:ed:4b:37:bc:85:0b:57:99:5b:b3:64: 93:e4:50:b5:53:7d:20:31:dd:7f:b6:0d:b4:d0:38:2b:72:9c: 2e:97:73:df:18:4e:9d:65:07:00:57:91:b1:cf:5b:02:69:0a: ec:02:4e:8e:8e:68:4f:83:82:a5:52:c5:40:cd:bf:e0:a3:ea: 5f:ca:84:23:24:98:55:01:24:7f:06:ef:5f:38:fe:77:bc:50: 05:26:26:15:ba:23:c6:40:05:4a:1b:c1:b5:5e:03:68:2f:d0: 96:43:9e:be:ab:92:29:14:68:e0:0e:7e:bc:37:00:69:64:d3: 8e:3a:d5:e0:28:f8:f9:70:ad:8c:65:1c:c9:3b:20:d1:95:ea: b8:2d:d7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUwNDA0MTkxMDQ0WhcNMjUwNDExMTkxMDQ0WjAYMRYwFAYD VQQDEw02N2YwMmViNC1iYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/g7x/BVBEnk1dvY+vQxKkBO74nmVVJjdL735nTb7T5bKiOmKBbebBEFTzgiS LNtZjycM6ozJCJe+Haji0w79DRykwS8oSCGguaIFTktxVZbv2Lr65qk98U3aKzmO pMXEEiHSfEbEnDaTPTwY1yQVOyOHbJ3JgpBwyhvI+WGqblvykkUidVZl5OI7FhNe W0l7FLXe0G9kEoFKixoC5l5oUw/JuURGK+A2BYTbxAUqxFpg04kYb8VKXLxmkLP7 /KwM6w3oe3Rbr/vZl5A4c44yJXUzU6KgyzK77RZ5cHmVikn0OJ34q1l7m+0PBhjb ag73neoIt5BevH/SaX0Efrx49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOREXg8R 8AyQ0A4XAROpK+0TXiS2MB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqK8xAo3l8+ym3Ifunov7wajsZqQUc8JaU6LiekBRcuZ4FdGxhbo/ RtQOvUvpF2XvSzzl2VhJd6ikxJWHNNiyFB4FRB4kmH/aaoZ4cP2fYFoFmdS5I2nL HFupc9bDcmZsWL3MDmsRwSjonuqqpRwklaE07Us3vIULV5lbs2ST5FC1U30gMd1/ tg200Dgrcpwul3PfGE6dZQcAV5Gxz1sCaQrsAk6OjmhPg4KlUsVAzb/go+pfyoQj JJhVASR/Bu9fOP53vFAFJiYVuiPGQAVKG8G1XgNoL9CWQ56+q5IpFGjgDn68NwBp ZNOOOtXgKPj5cK2MZRzJOyDRleq4Ldeb -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:02 2025 by rpki-client