$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: IPDNZ7sYpO5AqIdhNUe0pJGzrU09AWstHOdaUjgzzMk= Subject key identifier: EE:20:A0:68:8A:91:89:E7:46:64:F9:EE:5F:86:39:34:CA:32:1B:11 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 025A Signing time: Wed 09 Apr 2025 01:26:45 +0000 Manifest this update: Wed 09 Apr 2025 01:26:45 +0000 Manifest next update: Wed 16 Apr 2025 01:26:45 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: PrTZ/pSwa1EZedJfW3CSNh9WAMF1NSLj5IjsG73hj3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1 Validity Not Before: Apr 9 01:26:45 2025 GMT Not After : Apr 16 01:26:45 2025 GMT Subject: CN=67f5ccd5-5fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:32:c5:ec:75:63:10:b3:5f:9a:a1:b0:14: 6f:6e:73:88:3a:f3:33:3a:b1:c1:5e:4f:e2:ca:0f: 81:d5:67:b4:6f:db:6f:0e:1f:01:e9:90:d1:cc:3e: 2f:38:47:42:af:f1:d7:47:e7:ba:94:fe:be:e1:ce: 80:27:38:05:a2:34:56:5b:cf:05:88:42:fa:1b:dd: 87:95:83:75:00:eb:65:c1:54:82:35:f2:b8:ed:0b: 03:62:73:01:ba:25:66:2d:d8:68:87:b3:dc:3b:81: 6b:ce:69:3f:1c:e1:c6:17:71:34:ce:57:e4:b8:d1: 1c:37:b4:25:04:94:c1:5d:43:e6:63:25:35:ee:8c: e8:96:8c:b0:10:9d:52:de:15:52:5e:0e:c5:a9:47: 7f:14:37:67:cc:8c:b7:94:53:5a:d2:e9:38:fe:e8: 03:be:22:93:2c:d1:93:c8:0c:98:e5:b5:9f:46:3b: 88:b2:5b:89:89:d1:bc:f1:52:c9:fe:90:ac:39:ec: a5:c1:b2:c8:f0:3f:a1:6f:85:25:11:89:62:45:96: db:6f:97:f6:75:b5:99:36:24:87:36:9e:13:27:34: 60:d7:dd:51:93:1e:5a:90:61:87:01:c3:13:75:3d: 17:87:ce:7f:f1:60:d8:8d:1c:b0:d5:cb:16:09:2e: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:A0:68:8A:91:89:E7:46:64:F9:EE:5F:86:39:34:CA:32:1B:11 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f4:e8:31:f2:63:61:5d:29:04:07:aa:6c:4d:e6:ef:47:d1: 01:ec:a4:24:9b:36:cc:8d:14:b6:5a:0d:5a:f1:ca:80:bf:74: 72:31:1c:dd:6b:e6:e4:9e:14:1b:ca:bb:ea:78:83:dd:d8:59: ab:86:72:fb:e4:d6:0c:21:2f:4f:5c:13:14:b8:12:b4:37:3d: 03:d3:38:ca:f5:24:a4:9b:37:e4:8b:1d:09:bf:98:e4:d1:2e: 88:db:c7:4a:c1:c2:16:89:2b:56:18:7a:5d:a1:5f:cb:c9:e3: 74:b7:08:1c:68:7d:81:3c:ff:93:75:f4:8c:cc:31:f4:92:00: a8:90:af:01:7a:be:9a:37:fc:c5:a3:0c:e4:e3:54:a0:63:2b: f0:24:d4:4b:41:d6:3d:87:58:d3:b0:db:e2:16:59:16:1b:80: c6:ed:63:9f:c2:63:b3:cf:8f:6e:2f:71:46:8d:98:6f:00:fe: 76:ce:b8:2e:19:c2:65:04:9b:c4:a0:66:4c:d5:cd:1f:c5:fc: 57:f0:82:49:e6:81:1a:f1:e4:9f:de:ba:db:9c:54:10:68:7c: b7:f8:08:91:68:94:a4:bd:d9:40:b1:54:c1:44:05:17:3c:98: 2f:08:35:58:ae:c2:d6:cc:e2:c3:b2:63:4c:e3:7b:82:9e:39: c1:e3:53:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwNDA5MDEyNjQ1WhcNMjUwNDE2MDEyNjQ1WjAYMRYwFAYD VQQDEw02N2Y1Y2NkNS01ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPIyxex1YxCzX5qhsBRvbnOIOvMzOrHBXk/iyg+B1We0b9tvDh8B6ZDRzD4v OEdCr/HXR+e6lP6+4c6AJzgFojRWW88FiEL6G92HlYN1AOtlwVSCNfK47QsDYnMB uiVmLdhoh7PcO4Frzmk/HOHGF3E0zlfkuNEcN7QlBJTBXUPmYyU17ozoloywEJ1S 3hVSXg7FqUd/FDdnzIy3lFNa0uk4/ugDviKTLNGTyAyY5bWfRjuIsluJidG88VLJ /pCsOeylwbLI8D+hb4UlEYliRZbbb5f2dbWZNiSHNp4TJzRg191Rkx5akGGHAcMT dT0Xh85/8WDYjRyw1csWCS5tUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4goGiK kYnnRmT57l+GOTTKMhsRMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR9Ogx8mNhXSkEB6psTebvR9EB7KQkmzbMjRS2Wg1a8cqAv3RyMRzd a+bknhQbyrvqeIPd2FmrhnL75NYMIS9PXBMUuBK0Nz0D0zjK9SSkmzfkix0Jv5jk 0S6I28dKwcIWiStWGHpdoV/LyeN0twgcaH2BPP+TdfSMzDH0kgCokK8Ber6aN/zF owzk41SgYyvwJNRLQdY9h1jTsNviFlkWG4DG7WOfwmOzz49uL3FGjZhvAP52zrgu GcJlBJvEoGZM1c0fxfxX8IJJ5oEa8eSf3rrbnFQQaHy3+AiRaJSkvdlAsVTBRAUX PJgvCDVYrsLWzOLDsmNM43uCnjnB41Ov -----END CERTIFICATE-----Generated at Thu Apr 10 18:59:50 2025 by rpki-client