$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: IiwaEmhYHr1vYY/NYp/kkleGDijWWU2Ae4NN2sfR7Y4= Subject key identifier: A1:77:EC:E8:BB:22:16:1F:1B:39:E3:D4:11:5F:B5:AF:FB:1B:62:8A Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: 56 Signing time: Thu 17 Apr 2025 05:59:03 +0000 Manifest this update: Thu 17 Apr 2025 05:59:02 +0000 Manifest next update: Thu 24 Apr 2025 05:59:02 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: vl4htdWoBS79y/Iq/M0wDGLtff59qdlsqxAZC86sG/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Apr 17 05:59:02 2025 GMT Not After : Apr 24 05:59:02 2025 GMT Subject: CN=680098a7-0542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:d7:d3:4c:a7:e6:55:f2:2c:a1:89:12:64: 87:ed:d1:5c:44:b8:86:cc:b4:e8:fd:b6:2e:16:ac: d9:dc:3c:20:02:46:72:4a:2d:13:cf:ae:f1:d8:58: c8:ec:cc:e0:61:eb:16:82:73:57:aa:d5:63:fe:0d: de:61:60:6d:f5:2a:07:bb:d9:da:2d:21:94:21:9f: e8:92:d8:57:ae:cc:86:ba:f5:4f:a1:aa:11:a1:e4: 98:1c:ff:60:20:e2:5c:3c:a7:2d:82:ad:d6:e5:dd: 53:da:e3:f1:44:89:9c:02:a8:1f:b4:8e:d2:5f:d3: 82:58:d6:05:cd:27:58:4b:28:6a:40:8d:b0:f8:65: 2b:44:29:39:40:4b:eb:a3:78:55:a4:dd:23:26:b6: d2:a5:e8:59:11:90:c6:02:f8:21:88:19:cd:1d:69: ac:8e:11:78:9a:7d:f7:26:4f:dc:8e:0f:7c:79:1c: 2d:0a:b4:9e:66:4a:fc:94:08:95:97:4c:07:c0:39: b4:ac:f6:2b:78:34:e7:c3:9a:15:78:89:41:f0:a2: a1:06:e0:30:de:31:4a:f9:e9:99:0a:34:63:63:7c: 9b:20:b2:21:5b:a6:ab:31:70:fb:9d:71:f9:77:59: 3d:8e:b3:20:c6:fc:7d:a9:de:5c:7b:02:c7:96:69: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:77:EC:E8:BB:22:16:1F:1B:39:E3:D4:11:5F:B5:AF:FB:1B:62:8A X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:10:32:07:dd:97:97:f3:62:ab:40:27:b6:7c:48:74:44:15: 6a:04:2e:f7:ff:a6:23:c9:52:fe:c1:b4:fa:0d:b3:6a:ea:9b: 75:13:0a:36:f5:49:b4:de:76:bd:e3:dd:7f:a6:5d:51:c6:7f: b1:23:fb:6c:aa:b4:0b:25:09:27:77:90:67:6c:11:f0:7d:4b: 39:92:43:d8:82:ed:f9:9b:fa:ea:cb:17:b9:7f:85:27:17:b9: 08:9c:0a:63:c7:e5:f0:e3:34:bb:3c:f1:5f:05:8c:61:e4:77: 38:ac:87:9b:5e:45:df:eb:8d:3f:46:56:1a:05:73:7c:3a:44: 89:78:f8:e9:5f:bc:81:62:ea:9c:f8:6e:0c:7d:ed:71:a9:46: 50:c5:e5:71:83:73:b0:b4:c7:c8:f4:0c:c9:56:8a:cf:30:6b: 9a:b2:7e:48:39:2e:8d:32:7d:97:c3:cd:d1:d5:2b:55:90:be: 37:c1:4c:8a:32:c9:3e:c2:67:8e:e2:1e:c4:3c:79:5b:39:48: ee:11:64:60:de:83:34:2e:cc:7c:2c:30:26:7b:03:14:24:af: 66:f1:d0:43:cf:e0:eb:c0:57:8e:a7:2b:e4:01:21:4b:3f:bb: 0d:95:a8:1b:d9:9e:b4:22:d4:cc:63:13:b5:f0:d0:6f:dd:76: f0:1f:5a:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFNDExMC8GA1UEBRMoODY3Nzk5MDUzRUM5MTc0QjExMUNCQjQ2QjI5N0ZBNjQ3 RTk4MkFBNTAeFw0yNTA0MTcwNTU5MDJaFw0yNTA0MjQwNTU5MDJaMBgxFjAUBgNV BAMTDTY4MDA5OGE3LTA1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd9tfTTKfmVfIsoYkSZIft0VxEuIbMtOj9ti4WrNncPCACRnJKLRPPrvHYWMjs zOBh6xaCc1eq1WP+Dd5hYG31Kge72dotIZQhn+iS2FeuzIa69U+hqhGh5Jgc/2Ag 4lw8py2Crdbl3VPa4/FEiZwCqB+0jtJf04JY1gXNJ1hLKGpAjbD4ZStEKTlAS+uj eFWk3SMmttKl6FkRkMYC+CGIGc0daayOEXiaffcmT9yOD3x5HC0KtJ5mSvyUCJWX TAfAObSs9it4NOfDmhV4iUHwoqEG4DDeMUr56ZkKNGNjfJsgsiFbpqsxcPudcfl3 WT2OsyDG/H2p3lx7AseWaReHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoXfs6Lsi Fh8bOePUEV+1r/sbYoowHwYDVR0jBBgwFoAUhneZBT7JF0sRHLtGspf6ZH6YKqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEU0LzU2MDhBNDk4OUE2 NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaG5lWkJUN0pGMHNSSEx0R3NwZjZaSDZZS3FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEU0LzU2MDhBNDk4OUE2NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBz UkhMdEdzcGY2Wkg2WUtxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8QMgfdl5fzYqtAJ7Z8SHREFWoELvf/piPJUv7BtPoNs2rqm3UTCjb1 SbTedr3j3X+mXVHGf7Ej+2yqtAslCSd3kGdsEfB9SzmSQ9iC7fmb+urLF7l/hScX uQicCmPH5fDjNLs88V8FjGHkdzish5teRd/rjT9GVhoFc3w6RIl4+OlfvIFi6pz4 bgx97XGpRlDF5XGDc7C0x8j0DMlWis8wa5qyfkg5Lo0yfZfDzdHVK1WQvjfBTIoy yT7CZ47iHsQ8eVs5SO4RZGDegzQuzHwsMCZ7AxQkr2bx0EPP4OvAV46nK+QBIUs/ uw2VqBvZnrQi1MxjE7Xw0G/ddvAfWg0= -----END CERTIFICATE-----Generated at Sat Apr 19 03:34:57 2025 by rpki-client