$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft File: Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json) Hash identifier: n3UeCIFn9FixsqIeJe+go1IFvhLQno8qYlvgFaUO6c4= Subject key identifier: 2C:83:D1:FD:F8:77:C5:46:DA:0D:56:DF:DF:86:22:63:E4:B6:43:A8 Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft Manifest number: 05B4 Signing time: Fri 28 Mar 2025 23:25:12 +0000 Manifest this update: Fri 28 Mar 2025 23:25:12 +0000 Manifest next update: Fri 04 Apr 2025 23:25:12 +0000 Files and hashes: 1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: 3lyRK+WZAaBE2boMw3F3xQj42bpBLuUzPkpnALhyakA=) 2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: fb7qHh5ZQWTTd8VnRA4KyHFCOrkRy8TphWCCGB0gByk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C0F5 Validity Not Before: Mar 28 23:25:12 2025 GMT Not After : Apr 4 23:25:12 2025 GMT Subject: CN=67e72fd8-ddbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:c8:b5:57:7d:ec:58:d9:64:1b:84:66:14: 37:60:b7:4a:89:f7:a9:cf:67:4d:2a:49:4e:d8:7d: de:ef:7c:61:1f:ab:e7:a9:d5:0f:8d:91:51:cb:21: a3:56:00:c3:88:35:11:72:cc:c8:cc:0d:9a:71:42: ea:07:46:fa:d5:ce:c9:55:f1:c8:ff:f7:7c:26:35: 3c:13:ef:7e:ec:e3:80:9c:24:49:19:13:af:8c:a0: 87:69:ba:52:4f:ef:31:71:b0:7e:1d:f5:d5:e6:9b: 61:73:f6:8a:e1:2f:ef:2a:9c:58:70:18:9b:71:65: e3:8c:65:19:5f:e9:ec:b1:c0:9d:8e:55:58:48:83: c2:af:f4:ed:e5:c9:32:85:c6:cc:63:ff:6c:c0:cc: fe:d7:72:d4:64:38:6c:66:14:fb:c1:a3:b4:c9:c9: 55:c7:8e:6b:aa:9f:42:77:5d:fc:d5:4b:5f:1f:d6: 85:cb:48:12:62:0c:2c:d6:fc:da:77:4e:f3:7c:ae: 2d:5b:55:e6:ac:ed:aa:2e:14:98:04:c5:c1:45:cd: 45:7a:d7:f2:15:1c:85:d6:89:78:38:d5:8b:b3:e5: b0:4c:dc:f6:0c:83:2b:ef:c5:0b:0f:03:6c:e8:a9: d4:55:c1:4b:af:04:ff:ea:e8:68:89:04:fd:dd:2c: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:D1:FD:F8:77:C5:46:DA:0D:56:DF:DF:86:22:63:E4:B6:43:A8 X509v3 Authority Key Identifier: keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6e:58:23:c1:b7:82:4a:a4:b5:97:80:91:d4:15:f0:7a:b9: e5:13:e4:63:19:89:b8:b1:4c:cd:83:3e:5c:80:fc:e7:8f:ed: fd:bc:24:e8:1f:f6:37:51:a4:2a:36:e3:f2:85:dc:ba:76:03: c9:27:84:3e:2a:9c:02:b9:21:c5:6b:af:b1:3e:6f:b3:95:79: bd:41:1e:72:ae:70:f0:3a:3a:19:44:ea:88:fb:9d:ca:ce:78: 42:70:42:67:2e:46:fd:0e:76:d9:09:a8:e3:5a:b5:84:a9:4e: d0:7c:23:9f:da:61:1d:57:a2:d9:e5:11:c2:c2:8d:4a:5b:8e: 3b:01:08:98:a6:67:b5:42:b3:ed:fc:c7:40:d4:49:54:d3:f9: a2:e1:d9:97:c4:2e:7f:60:78:35:f6:79:9d:8b:18:84:1b:d5: 62:84:22:da:fe:76:10:ca:2e:c8:b3:49:e3:b4:de:cc:41:a3: 04:96:8f:47:29:0b:e6:8f:4f:9e:63:68:40:a2:30:fd:c3:81: 7a:a6:a0:a1:e2:92:59:6d:10:67:43:dd:bb:ec:d9:af:f0:65: 53:95:6c:b5:a0:09:3e:49:e1:5e:db:76:b4:38:f6:00:73:a4: c2:ce:f4:b7:42:88:fa:71:03:a4:3f:c3:f8:a6:bc:60:20:2c: 22:ee:21:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4 MTRFNUZBNTMwHhcNMjUwMzI4MjMyNTEyWhcNMjUwNDA0MjMyNTEyWjAYMRYwFAYD VQQDEw02N2U3MmZkOC1kZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDnItVd97FjZZBuEZhQ3YLdKifepz2dNKklO2H3e73xhH6vnqdUPjZFRyyGj VgDDiDURcszIzA2acULqB0b61c7JVfHI//d8JjU8E+9+7OOAnCRJGROvjKCHabpS T+8xcbB+HfXV5pthc/aK4S/vKpxYcBibcWXjjGUZX+nsscCdjlVYSIPCr/Tt5cky hcbMY/9swMz+13LUZDhsZhT7waO0yclVx45rqp9Cd1381UtfH9aFy0gSYgws1vza d07zfK4tW1XmrO2qLhSYBMXBRc1FetfyFRyF1ol4ONWLs+WwTNz2DIMr78ULDwNs 6KnUVcFLrwT/6uhoiQT93Sz/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyD0f34 d8VG2g1W39+GImPktkOoMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3 RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoblgjwbeCSqS1l4CR1BXwernlE+RjGYm4sUzNgz5cgPznj+39vCTo H/Y3UaQqNuPyhdy6dgPJJ4Q+KpwCuSHFa6+xPm+zlXm9QR5yrnDwOjoZROqI+53K znhCcEJnLkb9DnbZCajjWrWEqU7QfCOf2mEdV6LZ5RHCwo1KW447AQiYpme1QrPt /MdA1ElU0/mi4dmXxC5/YHg19nmdixiEG9VihCLa/nYQyi7Is0njtN7MQaMElo9H KQvmj0+eY2hAojD9w4F6pqCh4pJZbRBnQ9277Nmv8GVTlWy1oAk+SeFe23a0OPYA c6TCzvS3Qoj6cQOkP8P4prxgICwi7iH5 -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:42 2025 by rpki-client