$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: OF1+HPdWlSZ0Oy912EpDvhfDVnZCoEcxk9kr2D1X5oU= Subject key identifier: A8:1A:69:CA:35:B4:D2:CB:65:2C:AB:17:94:CF:BD:11:C2:D9:A8:C9 Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: 83 Signing time: Sat 29 Mar 2025 05:56:26 +0000 Manifest this update: Sat 29 Mar 2025 05:56:25 +0000 Manifest next update: Sat 05 Apr 2025 05:56:25 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: f7Gz6SxfeBgoYDDj2YO7ybutq4Tq+UkF8b6QMx6BDl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E Validity Not Before: Mar 29 05:56:25 2025 GMT Not After : Apr 5 05:56:25 2025 GMT Subject: CN=67e78b89-7a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:9f:5c:28:48:36:46:f5:f9:9f:b2:16:10: ee:d3:68:f3:bf:cf:73:a3:ac:36:ac:9f:1f:cc:d1: c9:3a:f0:88:c7:aa:e8:96:3f:de:8b:36:a1:01:c6: 46:29:65:98:a1:34:ad:23:6e:30:c5:87:94:1f:a9: 64:2f:93:af:5a:76:24:b5:e2:32:87:39:97:f4:97: 93:e3:9a:30:49:aa:2f:7a:6e:40:ee:0d:9d:08:af: a2:ac:d5:f5:85:fe:e9:42:b5:2d:b7:ca:ad:b0:5d: 37:a9:fa:37:8a:cf:f5:65:ec:ca:3a:cb:3b:96:6c: 65:15:fa:e4:68:72:ab:13:3b:01:42:82:3c:e0:0d: 7b:aa:4b:3c:a5:bd:17:e9:3f:40:f9:6d:59:56:97: ba:d6:c9:fd:05:8f:e0:08:8b:49:0b:6c:c7:e2:05: 78:13:9b:a5:d9:a3:eb:8e:bc:9b:b1:ee:31:dc:9e: 8e:ed:6f:c3:31:8e:25:aa:7a:80:3e:07:a4:d0:2b: 1e:b8:71:a3:87:0c:96:b2:db:fc:a8:5f:9b:3f:77: 56:38:5b:26:62:d7:06:cd:a9:96:78:9a:fa:a5:d6: ae:b9:13:be:3a:ee:c1:9d:ef:96:eb:5c:c3:6c:b6: 93:ad:45:7f:98:29:29:04:f7:1b:57:30:de:2e:68: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1A:69:CA:35:B4:D2:CB:65:2C:AB:17:94:CF:BD:11:C2:D9:A8:C9 X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0f:68:92:4a:b1:7a:1e:58:41:a8:85:a3:31:24:15:6a:08: 20:8d:af:01:bd:9f:56:bf:f6:19:a6:a6:bb:f5:5b:db:24:62: 5c:f5:ad:ef:35:46:35:f4:1f:02:b5:f1:ad:3d:70:e5:b1:79: 43:01:39:32:09:65:a0:54:5f:50:45:45:f0:62:30:8d:d2:a5: 07:40:bf:18:f5:13:8e:c5:77:a0:32:89:c0:57:1b:29:8e:f0: aa:1d:be:c4:bd:a7:4e:d7:2e:65:1a:84:48:47:5e:ee:9b:fb: 7f:c8:df:a6:76:9c:29:93:02:64:41:f5:fa:54:bd:51:13:5d: df:77:18:fa:c1:be:1e:72:ca:ad:4f:f4:aa:3f:71:21:2c:24: 64:84:e5:70:5c:52:9a:bd:11:71:2d:57:25:5c:b9:8b:b5:9a: 7d:70:45:d9:22:45:e9:a1:30:7d:74:48:06:b6:97:a4:87:8e: 8c:36:8f:ae:1d:9c:3f:91:df:f4:e0:7a:70:3e:9b:b1:2c:6d: f8:e6:e8:b5:58:87:4b:f1:d1:e9:59:99:f1:1f:ab:8f:92:e5: 5f:f9:2b:dd:00:ee:fc:4e:de:d2:57:46:af:db:38:f0:3c:d8: c6:15:d7:ac:a2:98:9a:68:46:94:a5:43:9a:a6:2c:bf:37:bb: 90:b2:e1:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDg1ODA0NTk1MTdGRTFENzdENEQzOEE0MjlGMUQyMUM2 QzkyREU5MzQwHhcNMjUwMzI5MDU1NjI1WhcNMjUwNDA1MDU1NjI1WjAYMRYwFAYD VQQDEw02N2U3OGI4OS03YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxefXChINkb1+Z+yFhDu02jzv89zo6w2rJ8fzNHJOvCIx6rolj/eizahAcZG KWWYoTStI24wxYeUH6lkL5OvWnYkteIyhzmX9JeT45owSaovem5A7g2dCK+irNX1 hf7pQrUtt8qtsF03qfo3is/1ZezKOss7lmxlFfrkaHKrEzsBQoI84A17qks8pb0X 6T9A+W1ZVpe61sn9BY/gCItJC2zH4gV4E5ul2aPrjrybse4x3J6O7W/DMY4lqnqA Pgek0CseuHGjhwyWstv8qF+bP3dWOFsmYtcGzamWeJr6pdauuRO+Ou7Bne+W61zD bLaTrUV/mCkpBPcbVzDeLmiarwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgaaco1 tNLLZSyrF5TPvRHC2ajJMB8GA1UdIwQYMBaAFIWARZUX/h131NOKQp8dIcbJLek0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS84NUJDRUU0QzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhYZlUwNHBDbngwaHhza3Q2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS84NUJDRUU0QzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhY ZlUwNHBDbngwaHhza3Q2VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDD2iSSrF6HlhBqIWjMSQVagggja8BvZ9Wv/YZpqa79VvbJGJc9a3v NUY19B8CtfGtPXDlsXlDATkyCWWgVF9QRUXwYjCN0qUHQL8Y9ROOxXegMonAVxsp jvCqHb7EvadO1y5lGoRIR17um/t/yN+mdpwpkwJkQfX6VL1RE13fdxj6wb4ecsqt T/SqP3EhLCRkhOVwXFKavRFxLVclXLmLtZp9cEXZIkXpoTB9dEgGtpekh46MNo+u HZw/kd/04HpwPpuxLG345ui1WIdL8dHpWZnxH6uPkuVf+SvdAO78Tt7SV0av2zjw PNjGFdesopiaaEaUpUOapiy/N7uQsuEd -----END CERTIFICATE-----Generated at Fri Apr 4 21:19:19 2025 by rpki-client