$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json) Hash identifier: l5g4yhdwNzzZWIDjp9TqtKb7YUunL1Oe2h8y9dVki8Q= Subject key identifier: 28:D4:26:D3:E9:7D:A3:6A:01:4C:3C:4A:16:AD:A5:68:BF:76:70:73 Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft Manifest number: 0340 Signing time: Sat 29 Mar 2025 01:18:29 +0000 Manifest this update: Sat 29 Mar 2025 01:18:29 +0000 Manifest next update: Sat 05 Apr 2025 01:18:29 +0000 Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: HyIZ1zPmhzV9U6KUC6iPcN3ukN3H9uaimGPmZwLI9wM=) 2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: YYjlPAti43wnuGn+eT8matxHDnOUwzHN9T3OjstTfu8=) 3: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: EeX8Q5zf2nyJcmEtUQEot71vzZAwJeCr2eUPG92eMrI=) 4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: 7Oc4l/ja0E02zMqJLQgSwY4btjYC0BXYK3WYalX2Llg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C2F Validity Not Before: Mar 29 01:18:29 2025 GMT Not After : Apr 5 01:18:29 2025 GMT Subject: CN=67e74a65-704b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:4e:22:34:5c:f7:3c:88:35:50:23:4f:99: 86:84:7d:4e:d0:b9:88:25:ee:1b:ef:f4:be:37:f0: f4:5e:61:4b:fe:07:1f:2b:ed:60:b8:0c:33:9e:90: 09:1e:b1:17:09:fe:da:a5:3f:9d:86:5b:e8:43:41: 83:8f:af:39:71:c3:50:11:46:06:f4:58:47:09:d8: c7:d6:31:f1:53:ec:40:e4:2a:a5:43:c0:3f:ca:62: 1f:4d:5a:98:68:bf:5d:81:8e:a3:41:b8:8a:5d:81: a6:9c:9d:ae:e5:1f:10:e4:e0:90:57:c3:c9:5f:82: fc:d3:ba:11:36:f5:aa:66:ed:b4:46:cf:8d:07:ff: d0:67:5c:46:ae:9a:60:1a:db:2f:55:df:bf:13:af: 44:41:f1:a7:53:ee:95:a3:7d:2f:c2:bf:2c:61:22: 58:15:a6:9a:c2:29:c8:d2:2e:7f:f7:64:4c:d1:2c: 4e:d7:89:ad:fd:bd:d6:da:0e:04:b6:d9:57:1b:1b: 1a:1c:3f:d0:8b:40:8b:d0:8b:5d:47:35:c3:3b:83: 1d:db:aa:0a:a0:de:7f:0a:d5:8d:71:c9:0b:a6:7b: 69:a6:8c:6c:68:46:fb:b4:5f:63:7f:b1:df:88:68: 73:ab:0c:de:cf:73:6b:28:2f:1c:0c:5f:f8:93:f6: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D4:26:D3:E9:7D:A3:6A:01:4C:3C:4A:16:AD:A5:68:BF:76:70:73 X509v3 Authority Key Identifier: keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:bb:b7:6b:ec:68:89:eb:b6:89:3a:cb:c4:3c:71:07:7e:b7: 76:c2:f8:9a:42:d3:cd:24:a6:6b:e6:e8:23:2c:fe:6f:56:eb: f5:a0:e1:45:02:20:1a:0c:c5:6d:fa:a9:fe:62:01:86:35:99: 1c:d4:64:f0:49:6d:fc:dc:1c:39:4b:46:98:1e:a1:17:a1:f9: f9:b0:13:b3:8f:03:7b:ec:c1:ee:7e:40:2a:67:1c:00:ce:df: b4:97:ad:9d:11:12:1a:6f:cf:3d:86:31:09:28:d4:b8:64:b4: 3c:4a:af:ea:ee:b8:a0:bb:4c:6b:ab:e2:78:5f:9e:43:05:7e: a5:ec:6e:5c:00:3f:29:30:0c:f5:26:4c:79:18:bb:92:b0:52: c4:6a:b8:b6:20:19:f1:46:4a:5b:c6:18:62:8c:56:b2:1f:9a: 0d:8c:0d:eb:fc:d2:f3:77:c1:eb:8f:05:49:8f:b7:98:a8:19: e2:ed:ea:56:ff:b5:a6:8b:87:8a:cb:21:44:bc:65:89:3a:fb: a7:0a:60:32:bc:f4:bd:5b:47:c0:ec:6b:46:a1:88:29:ee:b3: 5c:89:06:f4:76:53:93:8b:6c:14:23:6b:9b:73:c5:07:a3:b1: 8c:77:b3:35:19:12:44:06:d9:16:95:d0:4d:55:24:59:83:88: 25:36:ac:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1 NTIwRUM0OTQwHhcNMjUwMzI5MDExODI5WhcNMjUwNDA1MDExODI5WjAYMRYwFAYD VQQDEw02N2U3NGE2NS03MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuJOIjRc9zyINVAjT5mGhH1O0LmIJe4b7/S+N/D0XmFL/gcfK+1guAwznpAJ HrEXCf7apT+dhlvoQ0GDj685ccNQEUYG9FhHCdjH1jHxU+xA5CqlQ8A/ymIfTVqY aL9dgY6jQbiKXYGmnJ2u5R8Q5OCQV8PJX4L807oRNvWqZu20Rs+NB//QZ1xGrppg GtsvVd+/E69EQfGnU+6Vo30vwr8sYSJYFaaawinI0i5/92RM0SxO14mt/b3W2g4E ttlXGxsaHD/Qi0CL0ItdRzXDO4Md26oKoN5/CtWNcckLpntppoxsaEb7tF9jf7Hf iGhzqwzez3NrKC8cDF/4k/aEBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjUJtPp faNqAUw8ShatpWi/dnBzMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk dGY5cm53Vy1MVlJWSU94SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhu7dr7GiJ67aJOsvEPHEHfrd2wviaQtPNJKZr5ugjLP5vVuv1oOFF AiAaDMVt+qn+YgGGNZkc1GTwSW383Bw5S0aYHqEXofn5sBOzjwN77MHufkAqZxwA zt+0l62dERIab889hjEJKNS4ZLQ8Sq/q7rigu0xrq+J4X55DBX6l7G5cAD8pMAz1 Jkx5GLuSsFLEari2IBnxRkpbxhhijFayH5oNjA3r/NLzd8HrjwVJj7eYqBni7epW /7Wmi4eKyyFEvGWJOvunCmAyvPS9W0fA7GtGoYgp7rNciQb0dlOTi2wUI2ubc8UH o7GMd7M1GRJEBtkWldBNVSRZg4glNqwD -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:20 2025 by rpki-client