$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft File: 0hsNWsWvkZAPUK2WADMT5R7WChA.mft (raw, json) Hash identifier: t80+Ctl+5CkL0e7zP6f9ayeD966Fr3iSB073uldc104= Subject key identifier: B3:79:A3:AA:8E:5F:93:0A:2B:E1:07:63:99:FA:E4:88:D1:BD:04:F5 Authority key identifier: D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10 Certificate issuer: /CN=A91A0E9D/serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft Manifest number: 5C Signing time: Thu 03 Apr 2025 06:29:42 +0000 Manifest this update: Thu 03 Apr 2025 06:29:41 +0000 Manifest next update: Thu 10 Apr 2025 06:29:41 +0000 Files and hashes: 1: 0hsNWsWvkZAPUK2WADMT5R7WChA.crl (hash: 4ptU2fUpqakC0l0OhlNNQAYttrxPP7ciX3broBg7CNM=) 2: 3996C94896D211EF924C486FC4F9AE02.roa (hash: jPKROmghkPyJWap1Ck0b+pE8AGKhobQAaRNerFhIWOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0E9D Validity Not Before: Apr 3 06:29:41 2025 GMT Not After : Apr 10 06:29:41 2025 GMT Subject: CN=67ee2ad5-7d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:9e:31:8f:de:fd:0a:62:1c:9f:67:10:c9: 2c:2e:5b:67:53:3c:40:a4:c1:bc:04:c5:ea:33:88: 21:9c:b5:1f:da:23:dc:5e:0e:07:e7:da:b1:3e:9e: a5:04:8d:cf:07:bd:00:5f:8e:70:83:77:05:00:38: 0d:8e:a0:b6:5a:d2:56:11:b8:b6:03:05:61:f9:12: cd:22:4f:72:87:3a:2c:0e:a2:5e:a0:fb:2a:91:3e: 5f:ed:cc:cd:e4:87:70:63:e9:4d:df:20:6b:bc:ba: 69:d8:38:e3:d8:05:d6:11:ca:96:34:b9:54:fd:6b: ca:1f:ab:36:e0:13:94:6b:be:f2:13:c6:50:d3:24: 98:a0:61:93:8f:38:59:c6:53:fe:b7:2f:ed:35:df: d1:da:a5:84:e5:b2:a3:5f:0d:4e:ad:df:1a:f2:b1: 0d:b1:84:79:e9:83:0c:7d:85:de:47:93:a4:05:ed: 03:a7:90:be:a6:a1:32:71:9f:73:b0:55:76:c7:61: e5:99:f4:0d:99:32:5d:00:16:45:62:aa:70:6f:2f: f6:28:2c:b0:e1:01:81:3d:56:31:1a:57:4b:28:9a: 11:fe:0b:74:1c:0b:11:55:d6:7f:7c:ff:55:52:af: 27:35:0b:93:2d:5e:e1:14:a4:0b:a2:41:a4:b8:58: 7b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:79:A3:AA:8E:5F:93:0A:2B:E1:07:63:99:FA:E4:88:D1:BD:04:F5 X509v3 Authority Key Identifier: keyid:D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:72:90:ce:14:ab:e1:78:b2:6d:9a:b8:58:d5:02:11:07:0f: a8:e9:2e:bc:a4:18:f3:9a:c0:ef:21:6e:1a:5d:53:42:82:f7: 96:51:90:2a:02:cd:3a:41:03:ee:dc:54:99:71:20:41:ea:9b: df:d2:f8:d4:7a:c7:64:4d:41:34:fe:09:00:e3:8e:58:04:87: 1c:c8:a0:2a:87:17:95:5a:a4:aa:98:e7:a7:36:fe:66:9d:f4: 65:0c:29:e3:82:63:e9:f1:75:43:b8:2b:5b:e9:a6:41:2e:38: d2:6c:63:d6:59:5f:54:e2:bd:59:ad:b0:78:da:31:a9:95:fb: 0f:23:bd:db:99:ed:ce:6d:b3:1d:62:15:8e:1f:b0:eb:7e:f1: 51:9a:11:e9:4d:28:ba:41:20:d1:02:e9:18:54:f1:c5:29:09: d7:ea:13:8f:3c:61:50:84:93:89:44:13:22:98:61:75:43:24: 72:9a:f6:83:f7:62:89:db:f9:06:22:5e:df:dc:2c:3b:7e:80: 7e:ef:e3:59:e9:d3:dc:67:6e:54:14:d8:90:5a:86:79:ab:7c: 43:15:a8:af:f0:ad:47:d5:6d:08:21:f5:68:a8:cc:3d:d3:ea: cd:a7:61:9e:44:40:17:00:91:ac:a8:42:69:c9:58:1f:e7:80: ea:84:6f:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEU5RDExMC8GA1UEBRMoRDIxQjBENUFDNUFGOTE5MDBGNTBBRDk2MDAzMzEzRTUx RUQ2MEExMDAeFw0yNTA0MDMwNjI5NDFaFw0yNTA0MTAwNjI5NDFaMBgxFjAUBgNV BAMTDTY3ZWUyYWQ1LTdkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcsZ4xj979CmIcn2cQySwuW2dTPECkwbwExeoziCGctR/aI9xeDgfn2rE+nqUE jc8HvQBfjnCDdwUAOA2OoLZa0lYRuLYDBWH5Es0iT3KHOiwOol6g+yqRPl/tzM3k h3Bj6U3fIGu8umnYOOPYBdYRypY0uVT9a8ofqzbgE5RrvvITxlDTJJigYZOPOFnG U/63L+0139HapYTlsqNfDU6t3xrysQ2xhHnpgwx9hd5Hk6QF7QOnkL6moTJxn3Ow VXbHYeWZ9A2ZMl0AFkViqnBvL/YoLLDhAYE9VjEaV0somhH+C3QcCxFV1n98/1VS ryc1C5MtXuEUpAuiQaS4WHtLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs3mjqo5f kwor4QdjmfrkiNG9BPUwHwYDVR0jBBgwFoAU0hsNWsWvkZAPUK2WADMT5R7WChAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwRTlELzk1NjlBREI0OTVE QjExRUZBNEUyRkI0NUM0RjlBRTAyLzBoc05Xc1d2a1pBUFVLMldBRE1UNVI3V0No QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGhzTldzV3ZrWkFQVUsyV0FETVQ1UjdXQ2hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw RTlELzk1NjlBREI0OTVEQjExRUZBNEUyRkI0NUM0RjlBRTAyLzBoc05Xc1d2a1pB UFVLMldBRE1UNVI3V0NoQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABFykM4Uq+F4sm2auFjVAhEHD6jpLrykGPOawO8hbhpdU0KC95ZRkCoC zTpBA+7cVJlxIEHqm9/S+NR6x2RNQTT+CQDjjlgEhxzIoCqHF5VapKqY56c2/mad 9GUMKeOCY+nxdUO4K1vppkEuONJsY9ZZX1TivVmtsHjaMamV+w8jvduZ7c5tsx1i FY4fsOt+8VGaEelNKLpBINEC6RhU8cUpCdfqE488YVCEk4lEEyKYYXVDJHKa9oP3 Yonb+QYiXt/cLDt+gH7v41np09xnblQU2JBahnmrfEMVqK/wrUfVbQgh9WiozD3T 6s2nYZ5EQBcAkayoQmnJWB/ngOqEb4E= -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:18 2025 by rpki-client