$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft File: HIAVCsljCYTTjMb1nD7MdRsl8-c.mft (raw, json) Hash identifier: jfpgFFf4TkfOn/tSONiNFe37oaOH5Dg4pDKnVA6hBes= Subject key identifier: D7:67:9B:B5:CF:18:5A:D2:1E:E3:84:80:AD:BF:EF:FE:F5:96:B8:3E Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7 Certificate issuer: /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft Manifest number: 2B Signing time: Thu 03 Apr 2025 06:59:18 +0000 Manifest this update: Thu 03 Apr 2025 06:59:17 +0000 Manifest next update: Thu 10 Apr 2025 06:59:17 +0000 Files and hashes: 1: HIAVCsljCYTTjMb1nD7MdRsl8-c.crl (hash: AhCVuhc2f5YVDG20lVD+7fCmYJ6csBg/Ap00qagT+1A=) 2: E9B51C0AD24411EFBD747915C4F9AE02.roa (hash: +/MtM2hDxMNaMHeSlqVRdtGrwCOT56lMUqqstQGV8bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A549 Validity Not Before: Apr 3 06:59:17 2025 GMT Not After : Apr 10 06:59:17 2025 GMT Subject: CN=67ee31c5-fa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:f7:e1:48:ad:e3:5a:09:3b:47:27:d9:a0: 74:ac:17:e5:89:df:55:28:65:2b:bf:7b:5b:3d:09: 99:73:87:25:93:98:3c:ef:5e:71:c9:98:34:c3:98: 30:01:57:58:a3:ca:ce:c6:63:0a:a7:7d:d5:ff:29: 3a:43:dc:27:24:aa:ae:e5:67:93:0e:17:1b:ea:37: 03:b6:ea:67:bc:d0:f6:6a:ac:b8:a4:38:fb:e7:29: bc:25:6c:56:9a:35:5e:b5:97:8f:40:89:b3:1d:0d: fa:db:85:a2:d0:61:e8:af:b2:a1:56:c7:c5:8b:f1: ee:a9:f5:bd:f6:af:6d:fb:41:ad:5f:6d:92:9d:7e: e8:3d:8a:c4:99:54:35:03:e2:00:5e:1f:34:7b:87: ab:c8:25:82:d8:c1:85:ce:04:1c:13:80:84:f4:a2: 52:01:de:8e:58:99:a8:f7:2c:dc:32:f6:b6:f1:44: 4d:00:9f:b5:d1:6a:f6:87:1e:d3:8e:fd:f8:52:74: a8:fc:b5:56:ec:0d:bd:b8:b1:e0:ea:cb:ec:9c:7e: 61:3b:97:e1:60:a3:2b:5d:bd:a6:86:3e:25:a3:d0: 2e:06:94:80:e6:6a:5c:58:b1:bd:11:2d:11:fb:75: 8a:a5:0d:67:ef:ad:65:a3:fa:9f:d8:1f:70:43:70: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:9B:B5:CF:18:5A:D2:1E:E3:84:80:AD:BF:EF:FE:F5:96:B8:3E X509v3 Authority Key Identifier: keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:4a:7d:41:bb:65:e3:e7:26:2a:63:cd:98:c1:2f:21:cb:dd: 99:e7:0e:39:5f:ee:ca:e9:07:79:d9:6e:0a:cf:bf:b1:87:76: cc:03:fc:24:3d:dc:d9:b3:6b:fb:fd:53:51:fd:33:45:00:fe: 35:f4:fa:fb:ae:b2:f5:d6:70:21:e8:a5:59:77:16:75:c6:e0: dc:a2:a2:a1:ea:bb:8e:c6:cf:a6:50:39:e0:d2:b7:6f:56:7d: e7:4a:09:c4:43:45:3e:1f:d3:21:49:57:a2:c6:f9:1e:2d:14: 40:28:bf:3b:8c:7d:07:e7:b2:5f:e0:e4:11:b4:8d:c1:53:c0: 7f:b2:62:5a:a1:ab:a2:a9:86:f0:b7:f9:87:00:20:15:9b:48: ac:c4:5c:ed:e8:34:84:96:29:a0:28:ad:05:ab:f9:14:93:fe: c3:4a:fc:9e:65:8e:74:f4:57:8f:05:1c:ec:03:94:61:51:cd: 21:27:05:02:a6:6f:32:c0:16:ab:8f:bc:f3:25:32:d9:0d:4b: 25:ae:16:a6:a0:24:6b:b0:93:4a:70:8f:6e:54:91:a9:d0:c3: 7d:57:b5:69:9d:65:84:4a:f2:7b:47:e0:09:d2:ee:01:68:3c: e9:71:45:31:5d:28:09:bb:4d:3a:d6:d4:5b:72:11:b4:de:e8: 68:7f:67:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTU0OTExMC8GA1UEBRMoMUM4MDE1MEFDOTYzMDk4NEQzOENDNkY1OUMzRUNDNzUx QjI1RjNFNzAeFw0yNTA0MDMwNjU5MTdaFw0yNTA0MTAwNjU5MTdaMBgxFjAUBgNV BAMTDTY3ZWUzMWM1LWZhMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCovvfhSK3jWgk7RyfZoHSsF+WJ31UoZSu/e1s9CZlzhyWTmDzvXnHJmDTDmDAB V1ijys7GYwqnfdX/KTpD3Cckqq7lZ5MOFxvqNwO26me80PZqrLikOPvnKbwlbFaa NV61l49AibMdDfrbhaLQYeivsqFWx8WL8e6p9b32r237Qa1fbZKdfug9isSZVDUD 4gBeHzR7h6vIJYLYwYXOBBwTgIT0olIB3o5Ymaj3LNwy9rbxRE0An7XRavaHHtOO /fhSdKj8tVbsDb24seDqy+ycfmE7l+FgoytdvaaGPiWj0C4GlIDmalxYsb0RLRH7 dYqlDWfvrWWj+p/YH3BDcDiRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU12ebtc8Y WtIe44SArb/v/vWWuD4wHwYDVR0jBBgwFoAUHIAVCsljCYTTjMb1nD7MdRsl8+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNTQ5LzREMjVCQ0FBRDI0 NDExRUY5RTY1NEIxNEM0RjlBRTAyL0hJQVZDc2xqQ1lUVGpNYjFuRDdNZFJzbDgt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSElBVkNzbGpDWVRUak1iMW5EN01kUnNsOC1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB NTQ5LzREMjVCQ0FBRDI0NDExRUY5RTY1NEIxNEM0RjlBRTAyL0hJQVZDc2xqQ1lU VGpNYjFuRDdNZFJzbDgtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtKfUG7ZePnJipjzZjBLyHL3ZnnDjlf7srpB3nZbgrPv7GHdswD/CQ9 3Nmza/v9U1H9M0UA/jX0+vuusvXWcCHopVl3FnXG4NyioqHqu47Gz6ZQOeDSt29W fedKCcRDRT4f0yFJV6LG+R4tFEAovzuMfQfnsl/g5BG0jcFTwH+yYlqhq6KphvC3 +YcAIBWbSKzEXO3oNISWKaAorQWr+RST/sNK/J5ljnT0V48FHOwDlGFRzSEnBQKm bzLAFquPvPMlMtkNSyWuFqagJGuwk0pwj25UkanQw31XtWmdZYRK8ntH4AnS7gFo POlxRTFdKAm7TTrW1FtyEbTe6Gh/Z1E= -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:32 2025 by rpki-client