$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: qacYIGTGMQ7pHXKg9vKYIuLIeAW9YIKUOIKup8xFl1Q= Subject key identifier: 19:F8:12:62:8B:F1:60:77:88:A8:D6:EC:65:59:4B:6E:40:69:94:94 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 1476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 145F Signing time: Fri 04 Apr 2025 17:00:11 +0000 Manifest this update: Fri 04 Apr 2025 17:00:11 +0000 Manifest next update: Fri 11 Apr 2025 17:00:11 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: yYCsX3wqSti9QRYcjN1Bx51nbKyV67RaFmse35vWFpI=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5238 (0x1476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75 Validity Not Before: Apr 4 17:00:11 2025 GMT Not After : Apr 11 17:00:11 2025 GMT Subject: CN=67f0101b-74ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:9d:53:d7:1e:dd:97:88:f8:ec:b3:bb:b0: a0:b2:a3:36:40:aa:19:45:7f:f5:14:7d:14:ee:cb: b9:f6:54:f5:ea:e1:4b:97:45:7e:f2:f9:b1:f6:61: 48:c8:a1:10:95:6d:c0:77:af:0e:19:bc:5b:2c:19: 25:1e:fd:8e:b4:83:72:07:22:01:2b:6b:d8:70:a6: 56:10:e9:f4:99:ca:02:b5:94:aa:9b:ef:19:dd:53: af:0e:dc:45:20:71:da:f7:98:36:33:99:00:ba:bb: fa:e3:f3:7f:a6:d7:fd:71:91:3a:da:b7:91:f4:14: 0f:18:bc:97:18:e5:5e:75:20:f1:46:88:27:81:e2: ea:c2:ea:df:a8:28:c8:38:bd:58:f7:f7:a7:3f:bb: b5:42:97:03:a8:fb:ff:d5:7a:a3:d7:0e:63:fd:9b: 7d:98:07:a9:f8:29:50:d5:84:f7:d1:ae:0b:a0:74: 6f:7c:19:9c:8b:89:1e:04:fb:c2:ee:cb:0f:6a:08: 5a:37:f9:3d:83:5e:56:a7:e2:7e:bd:37:d9:2a:8d: 5e:8f:7a:c0:d0:37:1e:9c:09:06:08:2c:d5:cd:53: 6a:e0:ed:96:e6:99:a7:12:0f:c1:60:47:bc:8d:29: 30:1c:89:0c:88:92:20:28:88:75:a1:84:e4:4f:b5: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:12:62:8B:F1:60:77:88:A8:D6:EC:65:59:4B:6E:40:69:94:94 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9d:7b:c1:8b:fb:a0:27:81:74:85:96:1d:74:f0:cd:d3:d3: fc:c0:83:48:3d:c7:e8:04:66:5e:3d:46:13:90:33:8f:a3:be: 7f:0f:a7:ca:98:b5:58:2b:e7:c2:cf:9e:93:76:1b:83:bf:ab: c3:d9:e7:61:f0:f6:8e:5e:4c:80:e5:9b:22:e4:af:61:a6:71: c6:7e:e6:ba:a1:aa:a0:aa:a0:e7:fd:a3:d6:f5:51:b1:03:80: 70:e3:20:be:3f:c8:02:c5:b2:67:f4:3c:78:4c:56:cc:5b:47: 7d:08:1c:79:39:a5:ab:d5:f9:ac:3c:6e:5f:e8:82:0a:5b:29: eb:14:80:88:27:bc:fa:1f:d5:52:fc:52:6b:0f:73:50:26:61: 4b:32:79:e7:64:69:ec:98:36:9b:38:67:28:35:dd:4b:e1:42: d8:a9:5c:19:76:5d:76:72:57:8b:45:90:c2:48:13:f9:25:46: 0b:3d:06:26:02:bc:c3:cd:08:98:86:fc:66:76:ce:64:ad:29: 2d:b7:af:72:fb:0c:b2:70:07:18:b3:df:ad:a5:68:8c:fc:8a: b9:40:c9:83:70:04:78:c9:92:61:5f:08:97:f6:0e:5e:93:39: 05:a5:89:c7:c4:49:1b:30:bc:be:29:3f:73:5a:a6:b7:06:b4: ff:87:09:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNDA0MTcwMDExWhcNMjUwNDExMTcwMDExWjAYMRYwFAYD VQQDEw02N2YwMTAxYi03NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPmdU9ce3ZeI+Oyzu7CgsqM2QKoZRX/1FH0U7su59lT16uFLl0V+8vmx9mFI yKEQlW3Ad68OGbxbLBklHv2OtINyByIBK2vYcKZWEOn0mcoCtZSqm+8Z3VOvDtxF IHHa95g2M5kAurv64/N/ptf9cZE62reR9BQPGLyXGOVedSDxRogngeLqwurfqCjI OL1Y9/enP7u1QpcDqPv/1Xqj1w5j/Zt9mAep+ClQ1YT30a4LoHRvfBmci4keBPvC 7ssPaghaN/k9g15Wp+J+vTfZKo1ej3rA0DcenAkGCCzVzVNq4O2W5pmnEg/BYEe8 jSkwHIkMiJIgKIh1oYTkT7VHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn4EmKL 8WB3iKjW7GVZS25AaZSUMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBnXvBi/ugJ4F0hZYddPDN09P8wINIPcfoBGZePUYTkDOPo75/D6fK mLVYK+fCz56TdhuDv6vD2edh8PaOXkyA5Zsi5K9hpnHGfua6oaqgqqDn/aPW9VGx A4Bw4yC+P8gCxbJn9Dx4TFbMW0d9CBx5OaWr1fmsPG5f6IIKWynrFICIJ7z6H9VS /FJrD3NQJmFLMnnnZGnsmDabOGcoNd1L4ULYqVwZdl12cleLRZDCSBP5JUYLPQYm ArzDzQiYhvxmds5krSktt69y+wyycAcYs9+tpWiM/Iq5QMmDcAR4yZJhXwiX9g5e kzkFpYnHxEkbMLy+KT9zWqa3BrT/hwl+ -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:21 2025 by rpki-client