$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft File: HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json) Hash identifier: mKkaBOUV4omAKPRcOl8k9nb02/GwqE1D9vDgRRDjwiQ= Subject key identifier: 92:03:98:0E:E3:D8:D4:35:87:B4:E6:0A:D0:F4:3B:FA:EB:5B:D1:76 Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft Manifest number: 18 Signing time: Tue 15 Apr 2025 06:42:35 +0000 Manifest this update: Tue 15 Apr 2025 06:42:35 +0000 Manifest next update: Tue 22 Apr 2025 06:42:35 +0000 Files and hashes: 1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: zoFeYSPLfFnqVn7JDRxjiXtdAjknR9cvQQEpbAyQOug=) 2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: UFgylA3DVYfccb8XdgcDubKXiQ2Mtm89Z4YEW6R99s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Validity Not Before: Apr 15 06:42:35 2025 GMT Not After : Apr 22 06:42:35 2025 GMT Subject: CN=67fdffdb-2dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:ec:85:b3:cf:3b:0f:86:fd:3d:2a:99:01: 2a:fc:00:7f:47:d5:7c:69:60:4b:e1:f2:a4:0f:c2: d2:b7:67:44:24:d7:01:c0:60:31:9f:b7:9f:59:eb: 35:5a:83:5e:63:e3:35:f9:54:35:79:88:c6:57:04: 67:ad:fb:9e:7c:fa:8e:03:fc:05:3f:30:57:c3:df: 33:e9:36:a4:20:80:8e:ec:ff:4b:a6:74:1d:47:b6: cf:23:a4:b5:6a:cf:94:4d:00:d3:1a:cd:72:ec:a2: 87:f7:9a:f8:c1:ce:0d:d9:91:38:19:82:40:b1:03: 4c:cb:e6:ab:60:d3:62:45:1c:9c:80:49:53:34:06: 36:c0:fe:81:64:03:c7:18:74:1e:7e:14:2e:3e:90: ff:92:b8:29:dc:a6:67:7d:7c:b8:8a:4a:99:23:b4: fb:77:57:89:cd:3e:8b:e7:e1:fc:b3:07:d0:c6:0e: 9a:d5:6a:f5:59:e0:01:64:eb:d1:1d:b4:61:e8:02: a1:c4:3f:ab:05:a7:c5:da:55:97:3e:01:86:bc:c9: e0:e3:92:8f:8f:9d:a2:af:df:2d:ce:0e:5d:1b:1b: 9b:ce:5f:98:1f:e4:01:83:9b:83:ce:ac:85:b3:24: f7:3c:ce:3b:2d:60:48:8b:13:56:7b:52:e1:ae:63: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:03:98:0E:E3:D8:D4:35:87:B4:E6:0A:D0:F4:3B:FA:EB:5B:D1:76 X509v3 Authority Key Identifier: keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:cd:a4:e1:a4:4a:ff:fb:f8:cc:96:ec:1e:45:71:68:7d:b0: 4b:43:d7:f1:3a:06:b0:83:c3:75:d3:bb:1e:dc:fe:c7:71:1c: 9e:2a:ed:e0:02:a9:66:41:37:46:b0:13:cc:54:17:04:7e:f3: ea:96:50:e5:ce:01:2a:8e:e7:7f:0a:c0:a0:07:3a:32:06:cc: d5:22:93:dc:fc:75:e0:43:74:cf:39:58:88:0e:22:42:78:cc: 9f:58:5e:d7:18:7e:c1:e4:26:c8:5b:34:39:29:46:95:d1:c7: 4a:42:22:1b:be:c5:c8:79:57:8e:76:98:3f:4c:ba:d7:3e:ab: 17:48:15:9e:24:ee:f9:91:e8:35:44:14:46:cf:55:f4:43:13: cb:24:74:5e:ee:64:d6:45:c7:46:12:85:d7:ff:77:3e:e4:0a: 63:1e:cf:07:8f:3a:35:75:d9:ce:5b:19:f3:80:86:50:ab:7d: 14:24:33:79:96:71:39:5d:0e:9f:d6:ca:5f:fb:3e:c6:1f:d7: 22:62:af:65:b5:85:0e:d5:b6:54:0b:11:0a:26:16:f1:85:cf: 17:8f:eb:65:df:3c:f7:bd:1a:69:1b:e9:fb:7a:21:91:e2:44: 73:a4:eb:b2:a4:e1:82:b0:d7:2d:fd:8e:b5:08:3e:4a:21:58: 43:e3:d1:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTQ5ODExMC8GA1UEBRMoMUNERTEyNDRDQkJCOTY1NDJFNkM4QjA5QTNEQUMxQzFC NDQzNjhENzAeFw0yNTA0MTUwNjQyMzVaFw0yNTA0MjIwNjQyMzVaMBgxFjAUBgNV BAMTDTY3ZmRmZmRiLTJkYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEIeyFs887D4b9PSqZASr8AH9H1XxpYEvh8qQPwtK3Z0Qk1wHAYDGft59Z6zVa g15j4zX5VDV5iMZXBGet+558+o4D/AU/MFfD3zPpNqQggI7s/0umdB1Hts8jpLVq z5RNANMazXLsoof3mvjBzg3ZkTgZgkCxA0zL5qtg02JFHJyASVM0BjbA/oFkA8cY dB5+FC4+kP+SuCncpmd9fLiKSpkjtPt3V4nNPovn4fyzB9DGDprVavVZ4AFk69Ed tGHoAqHEP6sFp8XaVZc+AYa8yeDjko+PnaKv3y3ODl0bG5vOX5gf5AGDm4POrIWz JPc8zjstYEiLE1Z7UuGuY3m/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkgOYDuPY 1DWHtOYK0PQ7+utb0XYwHwYDVR0jBBgwFoAUHN4SRMu7llQubIsJo9rBwbRDaNcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNDk4L0QyREVEMzQ2Rjgw OTExRUZBNTI4MUIxNkM0RjlBRTAyL0hONFNSTXU3bGxRdWJJc0pvOXJCd2JSRGFO Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSE40U1JNdTdsbFF1YklzSm85ckJ3YlJEYU5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NDk4L0QyREVEMzQ2RjgwOTExRUZBNTI4MUIxNkM0RjlBRTAyL0hONFNSTXU3bGxR dWJJc0pvOXJCd2JSRGFOYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7NpOGkSv/7+MyW7B5FcWh9sEtD1/E6BrCDw3XTux7c/sdxHJ4q7eAC qWZBN0awE8xUFwR+8+qWUOXOASqO538KwKAHOjIGzNUik9z8deBDdM85WIgOIkJ4 zJ9YXtcYfsHkJshbNDkpRpXRx0pCIhu+xch5V452mD9Mutc+qxdIFZ4k7vmR6DVE FEbPVfRDE8skdF7uZNZFx0YShdf/dz7kCmMezwePOjV12c5bGfOAhlCrfRQkM3mW cTldDp/Wyl/7PsYf1yJir2W1hQ7VtlQLEQomFvGFzxeP62XfPPe9Gmkb6ft6IZHi RHOk67Kk4YKw1y39jrUIPkohWEPj0Wk= -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:36 2025 by rpki-client