$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: etZY1RUDiyH3IDPmnx6QD5lC/PQsh9fBdJwIol5izRQ= Subject key identifier: 13:81:09:6B:98:D6:30:FE:A8:5D:42:C4:D7:F2:3D:D5:41:37:F1:0D Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 44 Signing time: Thu 03 Apr 2025 06:44:37 +0000 Manifest this update: Thu 03 Apr 2025 06:44:36 +0000 Manifest next update: Thu 10 Apr 2025 06:44:36 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: kdNw1qNOCLjOWY90majUeqjVmOzNap72tLmrOq/1Qko=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: 1aGxRTXwu6ybjRU4JNrtMNFs2xwtsiTJtnAFcF9bvmg=) 3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: FC93rdM/vdZQAg1QRdAMhOId3DELs7nG9wTwZW4DnWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D Validity Not Before: Apr 3 06:44:36 2025 GMT Not After : Apr 10 06:44:36 2025 GMT Subject: CN=67ee2e54-9bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:36:26:c9:4f:98:6c:0a:9a:d4:69:58:46: 95:25:7f:6b:50:f8:d5:a9:d7:b1:de:81:01:3e:b7: d6:56:22:37:86:55:b2:cc:4c:13:b0:e1:ea:86:41: 05:9d:6a:f3:54:16:98:38:55:0c:a6:94:e8:5b:95: 37:45:d3:35:87:69:49:46:3d:79:85:67:6a:2d:49: 3d:e8:57:3d:2a:72:4f:92:13:1d:38:65:24:e3:39: 2e:e1:f4:f9:ac:d1:d1:67:45:ae:ad:46:71:ac:95: 21:0d:b0:4e:bf:6b:12:87:99:ba:30:74:78:e8:64: 55:82:bb:be:35:fb:89:2a:4b:77:66:61:64:12:a5: f4:cb:92:5d:a2:02:2a:2e:88:e3:55:d4:d9:75:ef: 4e:f3:08:66:8e:88:44:7f:f4:25:f0:a1:e1:04:e6: f8:5a:49:0b:97:98:25:45:26:7c:4e:1e:74:47:21: 85:d9:e1:07:2b:62:0c:64:ff:29:85:02:a4:8b:48: df:51:18:ca:96:74:d8:c7:e4:83:ea:ea:6e:ff:7c: 6b:d1:25:c5:b7:1e:33:19:de:5d:1b:fd:7c:a7:1f: 93:5d:1e:fe:d3:56:86:8b:f8:08:bc:6d:30:2d:e5: b4:f3:f6:51:08:af:fd:99:84:58:95:02:05:10:25: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:09:6B:98:D6:30:FE:A8:5D:42:C4:D7:F2:3D:D5:41:37:F1:0D X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:65:b1:89:e2:45:e4:89:e4:bb:d9:b7:3c:b4:50:1a:3a:c5: d6:12:d8:f5:28:57:db:cb:2d:49:a0:c7:77:9d:a1:8a:33:d1: 79:b1:c8:8d:d8:10:f6:88:a8:35:78:34:bc:65:2f:bb:35:6f: 6a:87:7c:2e:49:e8:80:77:da:df:14:82:c8:4a:f0:c9:0c:17: 4d:d5:a8:d7:ec:0a:dd:a1:1b:6f:11:11:e8:e5:c0:98:a2:e6: cd:b6:b8:d4:a0:91:62:ae:a1:ca:1d:02:12:d5:83:aa:ba:bf: 7d:a3:6a:69:9a:1a:ca:74:f0:e0:ee:65:4b:dc:f4:8a:d0:7e: 15:8a:54:62:6e:63:90:70:c1:ea:a4:6f:ab:2f:42:f0:b9:64: 82:33:86:c1:e5:a5:da:67:d5:dd:43:71:1c:79:fb:cc:57:c8: 5f:82:fb:1e:d9:3d:a2:f0:ac:3f:a8:5c:cf:7b:50:78:b7:64: e8:75:e6:20:2c:f9:3f:e2:9d:ec:df:34:06:fe:63:c0:aa:59: c2:e1:de:e8:a7:85:22:34:fb:b7:20:16:b7:4e:66:62:90:fb: ca:04:71:b4:0e:2e:39:51:bb:d1:8c:8d:80:52:5d:b1:dc:5d: 23:f5:89:ac:9f:80:01:76:4c:d3:2f:9c:26:35:1d:e3:fc:93: 9a:f3:ed:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzQ4RDExMC8GA1UEBRMoODY0NDRBMzM0OTE1MTIxNEI0RjI3MTFCMkM1REEwQ0I5 OUU1MEYxMzAeFw0yNTA0MDMwNjQ0MzZaFw0yNTA0MTAwNjQ0MzZaMBgxFjAUBgNV BAMTDTY3ZWUyZTU0LTliYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC02DYmyU+YbAqa1GlYRpUlf2tQ+NWp17HegQE+t9ZWIjeGVbLMTBOw4eqGQQWd avNUFpg4VQymlOhblTdF0zWHaUlGPXmFZ2otST3oVz0qck+SEx04ZSTjOS7h9Pms 0dFnRa6tRnGslSENsE6/axKHmbowdHjoZFWCu741+4kqS3dmYWQSpfTLkl2iAiou iONV1Nl1707zCGaOiER/9CXwoeEE5vhaSQuXmCVFJnxOHnRHIYXZ4QcrYgxk/ymF AqSLSN9RGMqWdNjH5IPq6m7/fGvRJcW3HjMZ3l0b/XynH5NdHv7TVoaL+Ai8bTAt 5bTz9lEIr/2ZhFiVAgUQJVSPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE4EJa5jW MP6oXULE1/I91UE38Q0wHwYDVR0jBBgwFoAUhkRKM0kVEhS08nEbLF2gy5nlDxMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDNDhELzBDMjE1OEIyQjJD OTExRUY5MDNGNzg4M0M0RjlBRTAyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGtSS00wa1ZFaFMwOG5FYkxGMmd5NW5sRHhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD NDhELzBDMjE1OEIyQjJDOTExRUY5MDNGNzg4M0M0RjlBRTAyL2hrUktNMGtWRWhT MDhuRWJMRjJneTVubER4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAARlsYniReSJ5LvZtzy0UBo6xdYS2PUoV9vLLUmgx3edoYoz0XmxyI3Y EPaIqDV4NLxlL7s1b2qHfC5J6IB32t8UgshK8MkMF03VqNfsCt2hG28REejlwJii 5s22uNSgkWKuocodAhLVg6q6v32jammaGsp08ODuZUvc9IrQfhWKVGJuY5Bwweqk b6svQvC5ZIIzhsHlpdpn1d1DcRx5+8xXyF+C+x7ZPaLwrD+oXM97UHi3ZOh15iAs +T/inezfNAb+Y8CqWcLh3uinhSI0+7cgFrdOZmKQ+8oEcbQOLjlRu9GMjYBSXbHc XSP1iayfgAF2TNMvnCY1HeP8k5rz7Ys= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:32 2025 by rpki-client