$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: MXPHRwYy7ydSxlnBQv2bcuDtPNa9eaW1WRlp+kkGi2U= Subject key identifier: FE:D4:60:AE:09:97:84:5C:16:91:56:71:7E:EF:DB:DA:67:79:87:E2 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 02E5 Signing time: Sat 05 Apr 2025 01:28:38 +0000 Manifest this update: Sat 05 Apr 2025 01:28:37 +0000 Manifest next update: Sat 12 Apr 2025 01:28:37 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: LHjC5NR+1SzH7/3JNpetCbnGbqiKZQ1gyXVr7FY5H2c=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70 Validity Not Before: Apr 5 01:28:37 2025 GMT Not After : Apr 12 01:28:37 2025 GMT Subject: CN=67f08745-d01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:ae:3f:f7:1a:1f:6d:7a:f7:6b:e2:9e:a8: 68:9b:47:4a:38:d0:96:27:da:06:d7:5a:67:5d:a3: 52:8d:b0:32:54:58:08:0e:d4:1f:b0:2e:0c:0e:c1: dc:44:1d:7b:5b:3b:19:b6:8c:1d:61:d2:77:21:7e: 25:a9:d4:4b:89:8c:3a:af:e9:3a:c9:c6:7a:04:13: fd:b6:a6:1a:01:ed:9d:b8:cc:1f:22:34:a0:70:af: 4c:f9:96:59:1d:a5:65:67:b1:c1:fd:a0:77:a5:16: 32:4b:28:a3:8a:79:e6:8f:47:04:12:a8:46:c6:90: 78:52:6f:1a:42:0b:9f:7e:fd:0e:a2:70:80:44:8c: 67:6b:92:8c:c8:b0:95:06:32:bf:7c:23:81:ca:da: 2e:18:aa:d2:c7:61:5c:cd:20:cc:e1:f4:ef:6d:65: a6:43:1f:b1:2d:2d:6e:ab:df:2d:19:3d:63:7e:4b: 09:a8:68:ed:cb:03:ba:e7:6c:ef:11:77:20:37:42: ef:d7:62:6b:a6:f9:be:2d:83:ed:16:d0:71:7b:14: 80:0c:3f:a9:e7:c7:a5:ee:f3:e4:b6:e1:1e:6e:51: e2:7c:58:d6:d5:b5:ca:f1:53:64:2c:58:0a:ce:b2: 62:f7:88:10:40:d9:05:2b:fc:88:7b:9d:cd:51:03: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D4:60:AE:09:97:84:5C:16:91:56:71:7E:EF:DB:DA:67:79:87:E2 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0c:2b:a2:79:46:03:d0:38:93:3b:e1:cb:75:e8:e8:39:52: ba:ed:cb:ca:39:fa:46:8d:e1:19:0c:46:c9:f8:98:0a:59:9b: 9d:0c:11:46:bf:37:76:a0:cc:84:40:7d:67:b2:3e:bc:2a:b6: 60:76:81:a2:39:9d:58:fd:70:98:fd:0b:1d:e2:87:ed:cf:bf: 94:6c:ce:98:e6:de:c5:82:51:8b:e4:53:0a:fc:42:78:93:91: c5:dc:a5:53:9a:6f:cf:1f:a2:16:26:64:94:e7:47:94:5d:0c: d7:c6:61:31:ab:c0:2c:73:64:a7:53:b3:a7:c1:0f:a8:89:bf: 9d:68:1b:04:8b:e5:c7:77:87:20:32:52:87:f8:41:e5:f4:e8: 15:ec:40:6b:81:3a:6b:7b:08:9f:93:76:46:f1:3c:cc:55:ab: d6:4d:42:a0:db:1a:82:7c:6e:a5:32:33:c2:cb:27:f7:c7:b3: 76:15:9c:89:e3:64:44:60:ce:5a:6c:8f:80:29:4a:5d:cf:b4: 6b:08:bd:38:85:b9:32:70:2f:d4:df:2c:c2:40:36:5b:08:1e: b1:7e:f2:f3:92:19:13:1b:0f:5c:7d:6e:ab:2d:88:6d:4d:c2: 2c:7f:26:29:c6:70:8a:b2:45:96:3a:41:f0:6d:3b:61:71:23: bc:64:eb:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUwNDA1MDEyODM3WhcNMjUwNDEyMDEyODM3WjAYMRYwFAYD VQQDEw02N2YwODc0NS1kMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaauP/caH21692vinqhom0dKONCWJ9oG11pnXaNSjbAyVFgIDtQfsC4MDsHc RB17WzsZtowdYdJ3IX4lqdRLiYw6r+k6ycZ6BBP9tqYaAe2duMwfIjSgcK9M+ZZZ HaVlZ7HB/aB3pRYySyijinnmj0cEEqhGxpB4Um8aQguffv0OonCARIxna5KMyLCV BjK/fCOBytouGKrSx2FczSDM4fTvbWWmQx+xLS1uq98tGT1jfksJqGjtywO652zv EXcgN0Lv12Jrpvm+LYPtFtBxexSADD+p58el7vPktuEeblHifFjW1bXK8VNkLFgK zrJi94gQQNkFK/yIe53NUQNv3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7UYK4J l4RcFpFWcX7v29pneYfiMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/DCuieUYD0DiTO+HLdejoOVK67cvKOfpGjeEZDEbJ+JgKWZudDBFG vzd2oMyEQH1nsj68KrZgdoGiOZ1Y/XCY/Qsd4oftz7+UbM6Y5t7FglGL5FMK/EJ4 k5HF3KVTmm/PH6IWJmSU50eUXQzXxmExq8Asc2SnU7OnwQ+oib+daBsEi+XHd4cg MlKH+EHl9OgV7EBrgTprewifk3ZG8TzMVavWTUKg2xqCfG6lMjPCyyf3x7N2FZyJ 42REYM5abI+AKUpdz7RrCL04hbkycC/U3yzCQDZbCB6xfvLzkhkTGw9cfW6rLYht TcIsfyYpxnCKskWWOkHwbTthcSO8ZOvi -----END CERTIFICATE-----Generated at Sun Apr 6 07:53:14 2025 by rpki-client