$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft File: hXUH8dizkVyVENUEcA7OiQsGaF8.mft (raw, json) Hash identifier: zsatjqBzdazPU4QveoP/x7aAHJYHax+FcdaoWOFEQq8= Subject key identifier: D4:47:34:D3:65:CB:CE:BC:1C:45:7B:94:83:90:74:C6:3D:FC:25:25 Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F Certificate issuer: /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft Manifest number: 0D Signing time: Sat 05 Apr 2025 07:24:09 +0000 Manifest this update: Sat 05 Apr 2025 07:24:09 +0000 Manifest next update: Sat 12 Apr 2025 07:24:09 +0000 Files and hashes: 1: hXUH8dizkVyVENUEcA7OiQsGaF8.crl (hash: RjvEtvByrLFMmfxmEedUAchK3sRwyqnIdT+rETmR1Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7FC Validity Not Before: Apr 5 07:24:09 2025 GMT Not After : Apr 12 07:24:09 2025 GMT Subject: CN=67f0da99-64e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:88:32:fc:23:32:ad:dd:23:62:b4:81:e1: 7f:75:07:ee:51:f2:30:3d:47:54:46:e6:64:d0:0d: 59:25:34:cb:9d:f9:0f:e0:4f:8b:65:d3:aa:b0:fe: a7:bb:04:fe:94:f3:0b:01:54:ce:65:ef:48:83:34: 72:9a:a2:1b:73:0d:4d:33:2f:ea:b2:b7:66:21:7b: c9:43:27:4d:57:48:25:6c:5f:c2:63:3d:94:e2:5d: 8d:f4:03:eb:78:a4:a4:fd:51:11:e8:15:04:c8:55: b8:f7:0b:d0:2c:57:a1:62:d1:b8:9f:e9:99:ba:21: 37:9f:7d:77:d3:7a:3e:5b:f4:3a:a6:0b:32:5b:b3: 3d:24:11:cc:e5:26:5c:39:f4:18:19:c7:53:59:85: 7e:a9:d0:de:cc:c8:ad:5f:d2:65:37:22:63:b3:c3: 3c:66:56:d2:c1:0a:8a:8a:9b:da:d7:6d:82:09:82: 47:fb:85:05:9b:36:9e:4e:ee:65:b8:17:ed:6d:2d: c7:23:f8:08:7b:98:dd:a7:25:24:31:cc:47:3c:a3: 47:82:12:fa:79:8a:bd:fe:36:ee:d1:5d:f8:f7:a4: eb:f3:95:8b:4c:e5:e1:b6:2c:65:6b:14:ad:10:5c: 52:13:39:b2:16:9b:71:93:e7:a4:47:b3:81:df:77: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:47:34:D3:65:CB:CE:BC:1C:45:7B:94:83:90:74:C6:3D:FC:25:25 X509v3 Authority Key Identifier: keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c1:58:41:39:9a:49:62:12:48:e8:89:1e:e1:06:6c:44:8c: 5c:d5:27:9a:f2:8a:e1:3a:b1:9f:64:24:97:40:55:ee:45:d6: b2:af:68:22:1d:8c:c3:85:47:02:d2:44:89:0e:b6:de:a8:fa: 98:83:42:35:ba:0d:45:d5:1e:21:c7:13:f4:96:aa:08:af:83: f1:f6:9b:bf:b2:44:5d:83:d5:0b:c5:3c:52:dd:01:9c:ab:4e: 53:58:f4:b0:70:5e:9a:7c:b3:3b:8b:0a:ec:81:28:18:44:21: bd:7a:2d:4b:e7:fd:7d:41:71:fe:40:65:5c:c6:ad:29:83:e6: 68:59:bd:16:91:17:43:6b:e7:94:83:1b:d3:a2:c8:1a:96:fa: f1:d2:af:ca:15:e3:8d:ee:44:2e:16:44:ca:82:5d:10:8c:2d: 5c:78:f8:5b:77:f6:b4:f5:ee:d5:e1:2a:aa:e1:44:fc:ea:90: f3:3c:3a:a2:89:51:84:55:6a:a6:f9:3e:8a:87:d6:9a:c9:2b: e8:f2:09:12:ce:61:a2:3f:e6:f0:d7:b3:af:6b:24:2d:02:47: c2:22:46:b6:dd:10:ea:91:e8:df:e2:9f:9c:44:20:ef:92:24: 31:09:77:92:c0:65:fd:5a:58:27:b9:ef:8c:b3:0c:92:fd:dc: 69:07:19:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjdGQzExMC8GA1UEBRMoODU3NTA3RjFEOEIzOTE1Qzk1MTBENTA0NzAwRUNFODkw QjA2Njg1RjAeFw0yNTA0MDUwNzI0MDlaFw0yNTA0MTIwNzI0MDlaMBgxFjAUBgNV BAMTDTY3ZjBkYTk5LTY0ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq/ogy/CMyrd0jYrSB4X91B+5R8jA9R1RG5mTQDVklNMud+Q/gT4tl06qw/qe7 BP6U8wsBVM5l70iDNHKaohtzDU0zL+qyt2Yhe8lDJ01XSCVsX8JjPZTiXY30A+t4 pKT9URHoFQTIVbj3C9AsV6Fi0bif6Zm6ITeffXfTej5b9DqmCzJbsz0kEczlJlw5 9BgZx1NZhX6p0N7MyK1f0mU3ImOzwzxmVtLBCoqKm9rXbYIJgkf7hQWbNp5O7mW4 F+1tLccj+Ah7mN2nJSQxzEc8o0eCEvp5ir3+Nu7RXfj3pOvzlYtM5eG2LGVrFK0Q XFITObIWm3GT56RHs4Hfd+QhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Ec002XL zrwcRXuUg5B0xj38JSUwHwYDVR0jBBgwFoAUhXUH8dizkVyVENUEcA7OiQsGaF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCN0ZDL0M3M0JBMTY0MDNB NzExRjBBN0ZGOUM4N0M0RjlBRTAyL2hYVUg4ZGl6a1Z5VkVOVUVjQTdPaVFzR2FG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaFhVSDhkaXprVnlWRU5VRWNBN09pUXNHYUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC N0ZDL0M3M0JBMTY0MDNBNzExRjBBN0ZGOUM4N0M0RjlBRTAyL2hYVUg4ZGl6a1Z5 VkVOVUVjQTdPaVFzR2FGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKPBWEE5mkliEkjoiR7hBmxEjFzVJ5ryiuE6sZ9kJJdAVe5F1rKvaCId jMOFRwLSRIkOtt6o+piDQjW6DUXVHiHHE/SWqgivg/H2m7+yRF2D1QvFPFLdAZyr TlNY9LBwXpp8szuLCuyBKBhEIb16LUvn/X1Bcf5AZVzGrSmD5mhZvRaRF0Nr55SD G9OiyBqW+vHSr8oV443uRC4WRMqCXRCMLVx4+Ft39rT17tXhKqrhRPzqkPM8OqKJ UYRVaqb5PoqH1prJK+jyCRLOYaI/5vDXs69rJC0CR8IiRrbdEOqR6N/in5xEIO+S JDEJd5LAZf1aWCe574yzDJL93GkHGW8= -----END CERTIFICATE-----Generated at Sun Apr 6 06:39:53 2025 by rpki-client