$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json) Hash identifier: 6C1kBZu47N0iVw54tKNvHvWnLm1dAAATBerHQmiVox4= Subject key identifier: 19:74:A6:A7:C2:38:C1:81:A5:6E:8E:E3:88:F3:66:E8:BF:72:DE:B0 Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft Manifest number: 0460 Signing time: Sat 05 Apr 2025 00:15:49 +0000 Manifest this update: Sat 05 Apr 2025 00:15:49 +0000 Manifest next update: Sat 12 Apr 2025 00:15:49 +0000 Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: 0wXCG4vNurpzpRrE5zpNCjJGMzkT/dFY8VRlLN47jjs=) 2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: Ib+CF/sk+KvnPvMxoim8MHqeWZYKc+NyST1cJiaAhsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC4E Validity Not Before: Apr 5 00:15:49 2025 GMT Not After : Apr 12 00:15:49 2025 GMT Subject: CN=67f07635-1006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:32:d5:9d:9f:4e:0c:20:8c:b1:a9:5b:fc: 5b:2d:4b:9f:29:21:a5:d8:62:a7:ff:59:4f:3f:dd: e3:45:91:02:47:68:81:5d:0b:c8:df:9b:45:eb:78: ed:09:ad:98:2d:ac:51:55:f2:d1:aa:cf:0c:42:bc: f8:87:b5:36:90:bf:49:cd:1e:23:0a:c7:a7:d2:85: da:28:eb:23:73:32:4f:a4:2b:11:cb:ff:6b:a1:81: bb:8f:68:14:1b:1c:2f:01:24:44:4d:c9:d1:68:e1: 96:10:ea:f5:a6:5c:af:ca:08:86:f0:b6:77:5f:f9: 11:c2:2f:26:78:27:ef:d7:55:6e:87:ee:59:94:bb: 2a:ae:7a:f4:ab:7e:ac:20:65:f2:32:a5:6c:cf:33: 27:18:56:d8:45:eb:95:7b:16:07:5d:96:08:25:38: b0:b4:b6:a5:ac:fb:24:89:ae:19:6e:54:1b:67:35: 9d:b2:7c:5a:9a:94:92:4f:8b:a6:b2:ac:e8:0a:91: 06:c2:46:dd:e3:92:7e:ba:63:99:f6:6a:54:5c:5e: b3:91:9f:0d:3f:bd:25:5d:52:ef:93:8b:9e:7b:c4: c0:d9:c3:e2:4a:c7:fb:5d:ad:38:70:1f:b1:8f:2e: 42:25:d2:56:87:f1:18:19:81:ff:52:87:e7:08:89: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:A6:A7:C2:38:C1:81:A5:6E:8E:E3:88:F3:66:E8:BF:72:DE:B0 X509v3 Authority Key Identifier: keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:37:83:45:4a:19:76:14:45:86:11:a3:5a:14:f1:0b:83:62: a1:c1:01:b7:0b:c9:16:18:8d:0b:0e:82:61:8f:c5:8a:a6:bd: 81:1d:1f:a0:8d:3f:25:4c:0f:88:e4:d6:79:4c:5f:00:8a:b7: 5e:9f:d9:d7:1a:a6:cb:b5:b3:91:66:2b:a1:f7:89:22:09:44: 94:13:7f:8b:8f:c3:86:1c:68:c7:8c:4f:3c:40:08:bf:97:61: 0e:81:c5:6c:60:89:38:67:57:40:c8:f7:b2:1f:a1:17:d5:25: 10:f8:cf:d2:11:e1:7e:84:67:49:e1:09:14:ef:5f:8b:ea:15: 70:8d:1b:e8:53:a5:65:1b:9c:01:e6:60:81:8b:58:db:eb:79: 90:5d:93:5c:e0:73:00:9d:32:96:25:f1:d3:e8:cd:af:15:ef: 95:f0:d0:d4:5a:03:dd:d1:7d:85:a0:f1:0a:60:c8:80:a3:98: 75:a9:79:ba:80:a1:59:ff:74:00:4f:81:2b:56:b8:17:b7:e1: 25:9c:98:12:c0:20:d6:2b:bf:8f:c7:f0:45:3c:0a:ad:6b:33: 7a:03:de:3c:22:84:14:e3:15:1b:e9:e9:34:d3:de:8f:e9:e7: a3:1d:37:b3:25:78:7b:f0:31:de:02:52:3d:24:7b:93:ed:44: 8f:4f:95:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNEUxMTAvBgNVBAUTKDFFRkVEQTM0Mjg3Rjg1OEREQ0Y0RENFODQyOEMzM0I2 MUM0MUQ5OUEwHhcNMjUwNDA1MDAxNTQ5WhcNMjUwNDEyMDAxNTQ5WjAYMRYwFAYD VQQDEw02N2YwNzYzNS0xMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7Iy1Z2fTgwgjLGpW/xbLUufKSGl2GKn/1lPP93jRZECR2iBXQvI35tF63jt Ca2YLaxRVfLRqs8MQrz4h7U2kL9JzR4jCsen0oXaKOsjczJPpCsRy/9roYG7j2gU GxwvASRETcnRaOGWEOr1plyvygiG8LZ3X/kRwi8meCfv11Vuh+5ZlLsqrnr0q36s IGXyMqVszzMnGFbYReuVexYHXZYIJTiwtLalrPskia4ZblQbZzWdsnxampSST4um sqzoCpEGwkbd45J+umOZ9mpUXF6zkZ8NP70lXVLvk4uee8TA2cPiSsf7Xa04cB+x jy5CJdJWh/EYGYH/UofnCIlzbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl0pqfC OMGBpW6O44jzZui/ct6wMB8GA1UdIwQYMBaAFB7+2jQof4WN3PTc6EKMM7YcQdma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0RS9GQjIyMUQ0MDQy OTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZM2M5TnpvUW93enRoeEIy Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2N2FOQ2hfaFkzYzlOem9Rb3d6dGh4QjJaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0RS9GQjIyMUQ0MDQyOTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZ M2M5TnpvUW93enRoeEIyWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEN4NFShl2FEWGEaNaFPELg2KhwQG3C8kWGI0LDoJhj8WKpr2BHR+g jT8lTA+I5NZ5TF8Airden9nXGqbLtbORZiuh94kiCUSUE3+Lj8OGHGjHjE88QAi/ l2EOgcVsYIk4Z1dAyPeyH6EX1SUQ+M/SEeF+hGdJ4QkU71+L6hVwjRvoU6VlG5wB 5mCBi1jb63mQXZNc4HMAnTKWJfHT6M2vFe+V8NDUWgPd0X2FoPEKYMiAo5h1qXm6 gKFZ/3QAT4ErVrgXt+ElnJgSwCDWK7+Px/BFPAqtazN6A948IoQU4xUb6ek0096P 6eejHTezJXh78DHeAlI9JHuT7USPT5Vz -----END CERTIFICATE-----Generated at Sun Apr 6 12:54:33 2025 by rpki-client