$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json) Hash identifier: M5+HFSbUNK2Ik5Cv1RzptyuAY0f9WqScOABhaRtDtsc= Subject key identifier: 5A:85:44:9A:71:7C:BD:3A:A1:11:BA:3A:89:6D:EB:F4:85:EB:08:DE Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft Manifest number: 64 Signing time: Thu 03 Apr 2025 06:33:23 +0000 Manifest this update: Thu 03 Apr 2025 06:33:22 +0000 Manifest next update: Thu 10 Apr 2025 06:33:22 +0000 Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: 4Y0gPMXwpY3wseQfKur25VNabDDrwIRrzXXpedVfUuU=) 2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: 9WzRWZ39qEL+BS0hCUtMSeDhBI46JI/Ih27Az+Uy8VI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D9C3 Validity Not Before: Apr 3 06:33:22 2025 GMT Not After : Apr 10 06:33:22 2025 GMT Subject: CN=67ee2bb2-6a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:3b:f3:33:22:46:0e:a5:3a:6f:45:c6:73: 97:6c:ed:47:8b:c9:70:4d:01:08:76:85:bc:48:ab: b4:2e:50:45:f7:8b:3a:4f:30:10:f2:46:39:fc:11: 27:1f:93:3d:df:a6:2c:fd:aa:92:66:32:2c:1d:f7: 1c:19:c2:95:12:f0:8a:cd:a7:3f:a9:f7:fe:05:49: 21:09:b1:8b:7d:47:b4:c7:47:9d:64:77:71:2c:6d: 34:e4:5c:92:55:76:75:c7:6f:2e:64:cd:3e:e1:d2: 62:75:eb:b1:83:f3:58:56:ec:08:bc:70:a4:b2:4c: 93:1d:c1:ea:c7:5c:94:90:e7:72:5a:f1:c1:8b:4e: 8e:d7:95:6c:85:e9:ee:75:29:23:d3:e7:37:46:0b: 50:44:24:8c:d2:64:ee:b0:8b:1b:8d:69:3a:bd:3d: 7d:3c:78:44:51:c9:87:1f:78:5c:76:d6:cf:a8:d8: 69:79:66:c1:a9:4d:49:09:26:0b:d0:aa:06:75:3f: 6d:2e:cf:e8:69:51:3b:92:e2:7c:ee:a2:50:c3:71: 6e:b8:f2:6d:1a:81:a9:07:59:df:30:dd:22:d2:02: a1:c0:0e:b8:0c:73:0a:23:14:67:11:80:f4:71:75: 81:d2:84:bf:4d:d6:69:0a:82:40:99:48:56:df:7e: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:44:9A:71:7C:BD:3A:A1:11:BA:3A:89:6D:EB:F4:85:EB:08:DE X509v3 Authority Key Identifier: keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:70:48:56:9e:91:ec:3c:64:d0:66:0a:79:de:cd:a9:13:ec: 7c:4d:11:13:bc:35:cf:40:04:26:5c:fe:ca:4a:bb:13:91:a8: 1f:cd:2e:15:9c:83:2c:cd:35:44:52:8d:2b:6b:2c:28:83:65: 9a:7d:b8:a8:a1:37:6d:0f:c3:6b:18:5d:3d:6a:bb:00:a2:0d: 17:f4:b2:87:3a:89:42:2e:94:b3:8f:a2:e2:a8:b9:f0:bd:1d: 27:b9:af:23:2b:2e:d2:5d:0c:a3:cf:90:89:38:5b:17:78:c6: 35:f6:fc:6d:0e:08:db:c9:f4:3f:0b:f0:43:44:e2:29:58:c6: b7:57:26:ee:07:36:11:9d:66:b2:6c:2b:cd:4d:30:04:88:b3: db:4c:d0:46:29:ec:51:b7:72:1b:8e:86:e1:1a:03:19:e1:8f: 0e:53:f5:cc:7c:7a:3e:fd:7a:2c:46:9a:0f:54:f6:38:89:02: de:67:cc:3a:e7:8d:64:f1:7a:12:cf:f3:c8:9f:93:c7:51:f5: 77:9b:3f:5a:f1:88:d6:ef:78:49:89:fa:86:44:c1:d1:b9:d9: dc:7a:3f:1b:2d:bb:5a:46:72:33:49:c6:ef:ee:77:14:a6:8a: a8:27:1b:d4:ea:43:ea:1b:00:1c:ab:0b:e0:49:ac:7e:2c:cd: 82:da:cf:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDlDMzExMC8GA1UEBRMoMUU1QzEwN0VGRDAzQ0YxM0QyMTRBMzlBNkEyQ0U4RERB RDMwNDcwRTAeFw0yNTA0MDMwNjMzMjJaFw0yNTA0MTAwNjMzMjJaMBgxFjAUBgNV BAMTDTY3ZWUyYmIyLTZhNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvzvzMyJGDqU6b0XGc5ds7UeLyXBNAQh2hbxIq7QuUEX3izpPMBDyRjn8EScf kz3fpiz9qpJmMiwd9xwZwpUS8IrNpz+p9/4FSSEJsYt9R7THR51kd3EsbTTkXJJV dnXHby5kzT7h0mJ167GD81hW7Ai8cKSyTJMdwerHXJSQ53Ja8cGLTo7XlWyF6e51 KSPT5zdGC1BEJIzSZO6wixuNaTq9PX08eERRyYcfeFx21s+o2Gl5ZsGpTUkJJgvQ qgZ1P20uz+hpUTuS4nzuolDDcW648m0agakHWd8w3SLSAqHADrgMcwojFGcRgPRx dYHShL9N1mkKgkCZSFbffiUDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWoVEmnF8 vTqhEbo6iW3r9IXrCN4wHwYDVR0jBBgwFoAUHlwQfv0DzxPSFKOaaizo3a0wRw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREOUMzLzQ1Q0M4MkNDODA2 OTExRUY4MkM5NzczQ0M0RjlBRTAyL0hsd1FmdjBEenhQU0ZLT2FhaXpvM2Ewd1J3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGx3UWZ2MER6eFBTRktPYWFpem8zYTB3Unc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE OUMzLzQ1Q0M4MkNDODA2OTExRUY4MkM5NzczQ0M0RjlBRTAyL0hsd1FmdjBEenhQ U0ZLT2FhaXpvM2Ewd1J3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIBwSFaekew8ZNBmCnnezakT7HxNERO8Nc9ABCZc/spKuxORqB/NLhWc gyzNNURSjStrLCiDZZp9uKihN20Pw2sYXT1quwCiDRf0soc6iUIulLOPouKoufC9 HSe5ryMrLtJdDKPPkIk4Wxd4xjX2/G0OCNvJ9D8L8ENE4ilYxrdXJu4HNhGdZrJs K81NMASIs9tM0EYp7FG3chuOhuEaAxnhjw5T9cx8ej79eixGmg9U9jiJAt5nzDrn jWTxehLP88ifk8dR9XebP1rxiNbveEmJ+oZEwdG52dx6Pxstu1pGcjNJxu/udxSm iqgnG9TqQ+obAByrC+BJrH4szYLaz3Q= -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:36 2025 by rpki-client