$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json) Hash identifier: YA75QnXGlerSn9xuLH90oHGbxUMGbQIaCkgnhf3qLv8= Subject key identifier: 86:EA:E8:E1:E4:78:87:4B:7A:82:EF:E0:60:7C:5C:1E:A6:3C:36:A3 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 0931 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft Manifest number: 091F Signing time: Sun 20 Apr 2025 20:04:46 +0000 Manifest this update: Sun 20 Apr 2025 20:04:46 +0000 Manifest next update: Sun 27 Apr 2025 20:04:46 +0000 Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: +QnI2rENqvNR9EAXnMLz8v1k64LTtwqrSVPYTg2W2lk=) 2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 9BlYu2PTk5dV4bHJ7RwjBjbWZFG8OxFIELZVhhxp048=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Apr 20 20:04:46 2025 GMT Not After : Apr 27 20:04:46 2025 GMT Subject: CN=6805535e-e9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:74:88:8b:5a:14:48:ca:ea:5c:59:83:59: 1b:2b:5a:59:f4:92:ad:57:7d:56:a0:58:59:b3:60: 20:a2:23:ab:d9:f7:9e:0a:f7:22:32:1d:20:d5:98: 2b:df:b3:de:5b:53:84:65:27:4c:ff:14:bf:35:c1: a6:4b:9b:f2:0c:a9:08:a7:89:c5:5f:71:de:bf:5c: 5e:15:e0:51:7c:6d:f3:bb:86:79:cf:95:a5:a1:84: d1:57:e9:20:5a:7a:c7:e3:65:44:d9:a6:c6:ae:87: 8f:5c:3d:e0:b3:f6:08:43:46:8b:4d:b8:54:0e:5f: b9:2e:7c:55:c6:c6:bb:70:45:76:59:35:bc:94:76: 51:c6:ea:b1:4b:04:84:9b:8f:d6:1f:c8:53:01:c0: 39:76:81:bd:38:1f:02:39:26:5b:ad:92:ff:ad:68: a4:43:2f:76:75:3e:8a:ef:b6:1c:d8:43:01:dc:a2: d9:81:34:8a:7a:65:ea:4b:e5:60:50:e7:be:2f:3f: 50:87:b3:2c:7c:d0:5c:2f:15:06:1b:35:d0:89:26: 72:b0:8a:08:2b:b2:8c:dd:05:c3:3e:b7:eb:77:03: e0:f6:b1:cc:8e:20:56:25:02:fc:24:a5:c5:21:2a: e4:07:da:1f:2d:00:dc:82:8b:6f:e3:e4:cf:56:fe: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:E8:E1:E4:78:87:4B:7A:82:EF:E0:60:7C:5C:1E:A6:3C:36:A3 X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:79:7a:b7:2f:32:7e:0b:93:32:eb:b4:28:e8:2f:0d:12:1c: 46:8f:cb:18:f4:b3:9e:76:c2:fe:eb:3d:69:75:82:f7:44:40: b4:d1:72:68:47:f8:bb:b2:86:0f:f5:f5:7b:35:83:0e:b4:2a: a0:30:f0:d3:22:4e:d8:fd:8a:f2:07:35:16:f6:27:14:ba:77: b8:21:54:02:13:4e:87:f1:dc:fe:bb:46:27:49:94:7a:b2:d7: df:ff:db:8b:4a:4c:2f:0a:5f:a8:46:26:ab:c3:4a:73:32:61: ec:62:0c:a0:18:8c:db:85:35:47:2e:51:f8:cc:ff:0a:a6:fc: fd:b5:bd:46:56:cc:60:5e:47:ef:28:14:f2:74:45:1e:dd:e9: 77:ed:36:cb:c7:54:56:99:b8:77:0d:27:62:b1:c6:48:c1:f0: 38:ca:80:d3:f8:4b:f7:ee:14:5f:a2:fd:2c:db:d9:ef:96:75: 02:ab:e3:59:6a:bd:a5:71:93:4a:ed:6c:e6:fe:0e:eb:d1:87: 59:2f:9f:60:22:e7:f3:74:f7:fd:6b:60:0c:dc:70:6d:2a:76: 46:66:63:31:05:77:55:dc:1c:78:15:04:f9:5b:37:e5:82:c2: 7d:36:d2:ac:e4:09:21:a4:75:ec:77:b1:84:81:3d:91:1d:0a: 14:36:c0:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjUwNDIwMjAwNDQ2WhcNMjUwNDI3MjAwNDQ2WjAYMRYwFAYD VQQDEw02ODA1NTM1ZS1lOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpF0iItaFEjK6lxZg1kbK1pZ9JKtV31WoFhZs2AgoiOr2feeCvciMh0g1Zgr 37PeW1OEZSdM/xS/NcGmS5vyDKkIp4nFX3Hev1xeFeBRfG3zu4Z5z5WloYTRV+kg WnrH42VE2abGroePXD3gs/YIQ0aLTbhUDl+5LnxVxsa7cEV2WTW8lHZRxuqxSwSE m4/WH8hTAcA5doG9OB8COSZbrZL/rWikQy92dT6K77Yc2EMB3KLZgTSKemXqS+Vg UOe+Lz9Qh7MsfNBcLxUGGzXQiSZysIoIK7KM3QXDPrfrdwPg9rHMjiBWJQL8JKXF ISrkB9ofLQDcgotv4+TPVv49/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbq6OHk eIdLeoLv4GB8XB6mPDajMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0NFQS80MDZFRjE3OEEwQzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJM QzZKQjBVX2F3T3hMVGtyY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/eXq3LzJ+C5My67Qo6C8NEhxGj8sY9LOedsL+6z1pdYL3REC00XJo R/i7soYP9fV7NYMOtCqgMPDTIk7Y/YryBzUW9icUune4IVQCE06H8dz+u0YnSZR6 stff/9uLSkwvCl+oRiarw0pzMmHsYgygGIzbhTVHLlH4zP8Kpvz9tb1GVsxgXkfv KBTydEUe3el37TbLx1RWmbh3DSdiscZIwfA4yoDT+Ev37hRfov0s29nvlnUCq+NZ ar2lcZNK7Wzm/g7r0YdZL59gIufzdPf9a2AM3HBtKnZGZmMxBXdV3Bx4FQT5Wzfl gsJ9NtKs5AkhpHXsd7GEgT2RHQoUNsCY -----END CERTIFICATE-----Generated at Tue Apr 22 04:56:28 2025 by rpki-client