$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json) Hash identifier: sYfFkegbvhvMcWJEjd2WUJRnf2Dti1dExo1L3m5047o= Subject key identifier: 1D:0F:15:6D:91:29:76:57:A9:32:55:D5:B7:AA:4D:7B:1D:7F:30:CE Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft Manifest number: 2B Signing time: Wed 09 Apr 2025 06:33:16 +0000 Manifest this update: Wed 09 Apr 2025 06:33:16 +0000 Manifest next update: Wed 16 Apr 2025 06:33:16 +0000 Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: Abv8+p39FGBrzuvd0PyxmeZKuTbmKFmOwiuHSwsxOec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5 Validity Not Before: Apr 9 06:33:16 2025 GMT Not After : Apr 16 06:33:16 2025 GMT Subject: CN=67f614ac-af24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:6e:f4:1b:4f:dd:ce:58:b6:65:ff:e0:2d: 2e:d2:03:3f:e4:f6:3f:5d:5e:af:b5:20:e2:de:6d: 54:a2:86:a7:4e:f7:44:8d:f5:81:c3:7d:0c:73:18: 76:06:e5:4d:bc:56:84:83:5a:4e:56:98:8e:31:05: cd:cf:ed:9b:6b:bb:cb:85:eb:f2:4a:16:92:5d:3a: 13:0c:7c:2e:7d:b9:07:d4:1a:f6:ae:00:78:0a:fb: 93:13:83:73:57:a3:4a:c2:b7:c8:2e:73:9e:84:54: 98:64:c6:52:82:c1:ad:6e:ed:9f:fe:b3:46:44:51: 0a:e9:83:cb:6b:af:06:ec:7c:1b:d6:0e:76:35:b3: db:e5:1a:39:d6:02:69:b3:a4:fa:58:3b:f9:b7:ba: c2:70:8d:ac:1b:9a:c4:fb:87:b0:21:82:ed:8a:c8: 09:54:30:58:5a:f2:5e:f0:74:e3:6a:1e:80:07:70: 9b:1e:89:2d:e0:0d:89:73:49:15:84:4d:28:91:3f: 35:80:75:67:be:0b:57:e0:09:89:1f:08:0e:0f:18: d9:d2:5f:95:26:4e:09:bf:ca:74:d2:27:d1:8d:d1: c7:2b:8b:12:52:04:b1:7a:79:71:b2:7d:3f:9d:59: 79:89:c9:8d:26:d6:a7:48:7e:27:e2:8b:19:aa:8e: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:15:6D:91:29:76:57:A9:32:55:D5:B7:AA:4D:7B:1D:7F:30:CE X509v3 Authority Key Identifier: keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8e:a6:30:59:85:e4:6f:c2:39:55:b3:07:78:b4:8b:b1:b8: 00:6f:ff:d0:24:88:10:27:4e:5e:23:71:91:1e:63:15:4d:ed: a5:84:f8:3b:d1:b3:b8:8b:29:35:02:ea:29:0e:a2:39:7f:ad: d5:af:4f:64:6b:05:26:ce:f0:4f:9e:6d:7c:38:87:7d:84:d5: 4c:ad:8a:26:ef:40:bf:a6:0a:11:74:63:33:46:77:b9:c7:1e: 22:64:dc:55:9d:71:a8:d3:15:2e:5b:13:f6:26:97:ce:1e:de: a5:9c:c3:e2:35:55:16:88:98:c2:4a:dd:79:8a:b5:dd:47:38: 28:f6:e1:ef:5f:3b:30:ca:70:b1:3b:e0:fa:8b:a1:ab:4f:bd: b1:b6:2a:56:a0:66:a5:56:66:99:45:04:22:6c:c5:e9:c1:af: 7d:9c:a9:fc:e7:c2:29:7c:ea:8d:aa:a7:76:09:b3:83:b5:85: b0:f8:63:2e:d1:e0:be:c8:1e:0d:fd:fe:0f:27:7a:cb:01:b3: 22:05:60:5d:be:5c:04:b9:0b:49:ce:0f:05:e5:3b:a6:da:a1: 8a:be:d0:7b:02:76:24:cd:f8:12:95:55:a6:04:d4:ff:43:a1: 57:79:f7:d5:2f:7a:e1:83:b4:10:3f:15:92:0e:76:52:a1:4d: 08:e8:61:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoOTg3QTI0MDM1QzE1MzkxNzAyMEI2NTFEQjk4RjA5MUYw QUFBMzIyNzAeFw0yNTA0MDkwNjMzMTZaFw0yNTA0MTYwNjMzMTZaMBgxFjAUBgNV BAMTDTY3ZjYxNGFjLWFmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrBG70G0/dzli2Zf/gLS7SAz/k9j9dXq+1IOLebVSihqdO90SN9YHDfQxzGHYG 5U28VoSDWk5WmI4xBc3P7Ztru8uF6/JKFpJdOhMMfC59uQfUGvauAHgK+5MTg3NX o0rCt8guc56EVJhkxlKCwa1u7Z/+s0ZEUQrpg8trrwbsfBvWDnY1s9vlGjnWAmmz pPpYO/m3usJwjawbmsT7h7Ahgu2KyAlUMFha8l7wdONqHoAHcJseiS3gDYlzSRWE TSiRPzWAdWe+C1fgCYkfCA4PGNnSX5UmTgm/ynTSJ9GN0ccrixJSBLF6eXGyfT+d WXmJyY0m1qdIfifiixmqjh25AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHQ8VbZEp dlepMlXVt6pNex1/MM4wHwYDVR0jBBgwFoAUmHokA1wVORcCC2UduY8JHwqqMicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0FGREVGRTU0RDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1JjQ0MyVWR1WThKSHdxcU1p Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUhva0Exd1ZPUmNDQzJVZHVZOEpId3FxTWljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0FGREVGRTU0RDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1Jj Q0MyVWR1WThKSHdxcU1pYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGOpjBZheRvwjlVswd4tIuxuABv/9AkiBAnTl4jcZEeYxVN7aWE+DvR s7iLKTUC6ikOojl/rdWvT2RrBSbO8E+ebXw4h32E1UytiibvQL+mChF0YzNGd7nH HiJk3FWdcajTFS5bE/Yml84e3qWcw+I1VRaImMJK3XmKtd1HOCj24e9fOzDKcLE7 4PqLoatPvbG2KlagZqVWZplFBCJsxenBr32cqfznwil86o2qp3YJs4O1hbD4Yy7R 4L7IHg39/g8nessBsyIFYF2+XAS5C0nODwXlO6baoYq+0HsCdiTN+BKVVaYE1P9D oVd599UveuGDtBA/FZIOdlKhTQjoYd8= -----END CERTIFICATE-----Generated at Thu Apr 10 16:35:16 2025 by rpki-client