$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: T6hXo2MwUQVZrxxdSxO3f7bzzyVp/79LJq5Ii4uq+j8= Subject key identifier: 1F:26:DB:49:CE:4D:BB:CA:60:19:DD:F8:88:1A:BA:CD:06:56:4E:F7 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 13EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 13E4 Signing time: Fri 04 Apr 2025 17:01:51 +0000 Manifest this update: Fri 04 Apr 2025 17:01:51 +0000 Manifest next update: Fri 11 Apr 2025 17:01:51 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: /aAbNkHF35HEBeRwYDY3vUdgnsqYmJjeZHsyAgfUUig=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: 5pUcv+0LLLp1O/NzGX71FS1/aeQUGa83zSCV7bRjRQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5100 (0x13ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286 Validity Not Before: Apr 4 17:01:51 2025 GMT Not After : Apr 11 17:01:51 2025 GMT Subject: CN=67f0107f-d6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:81:6c:40:67:89:28:a2:bb:74:19:4f:ed:70: 55:a1:07:6e:2f:41:4e:a2:4d:3c:0f:bc:c1:5a:f2: fa:fe:77:8e:a3:03:9d:37:85:2f:0f:88:75:0c:98: 42:98:23:78:c3:53:61:df:da:c7:4d:c0:3d:04:5b: 18:3e:c4:cd:9d:c1:70:09:20:e1:d6:3d:c8:2b:60: 75:6b:d5:92:15:3e:53:23:09:8e:a1:c8:88:67:3b: 97:62:ea:84:e3:e6:ee:2a:7d:44:19:a0:05:30:4b: d8:d9:11:d1:4e:82:69:65:8b:e4:94:13:b9:3f:bd: 62:ce:28:78:0b:9c:7a:84:74:ad:9a:f1:9f:f4:08: 00:9c:bf:23:08:85:d8:9e:5a:7a:d1:0b:86:e4:de: af:19:12:02:dd:31:f9:fd:41:f2:f1:f2:be:c3:21: 6e:48:9c:8d:0e:4a:e0:a2:b7:24:b5:e2:ca:9e:7c: dc:0f:1e:29:e1:ed:d8:37:b1:81:c7:55:38:67:69: 64:e1:01:1c:cf:74:26:e5:b5:1a:5f:45:d7:a5:ef: 7f:df:da:f8:12:6a:6e:f4:a9:bd:67:27:8f:1e:8a: aa:85:95:94:66:3c:f1:ee:67:25:81:f9:e5:3c:14: 42:47:3a:85:d1:99:29:9e:1a:34:27:38:86:07:70: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:26:DB:49:CE:4D:BB:CA:60:19:DD:F8:88:1A:BA:CD:06:56:4E:F7 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:51:4e:77:98:77:a2:47:de:ae:dd:d9:3c:a7:08:c1:13:56: e6:bc:8f:28:a4:e6:65:98:d1:79:a8:b7:97:1c:d1:2f:05:27: 6a:f0:e4:68:1a:9d:0f:d0:f3:d8:7c:9f:e7:3d:dd:00:60:c2: 9d:f8:7d:2c:89:5d:1d:6a:be:8c:61:9f:a7:0d:19:a0:d7:4d: 9a:2d:91:41:07:27:19:61:af:20:3e:3d:10:37:8b:b5:a3:d6: 97:f5:33:59:e8:5e:49:5d:65:96:e0:07:c3:76:f2:ff:cc:c2: a4:9b:48:b3:fd:f7:f1:5c:dc:1d:ee:11:32:9d:d2:57:43:15: 48:77:24:44:1a:4e:af:51:33:3c:37:44:95:91:75:49:d6:d5: 90:e0:7b:da:5a:d0:14:27:f2:49:b4:58:44:1e:5b:b2:a1:48: 1c:80:4d:46:dc:41:83:06:f7:02:43:b6:e1:e8:bb:db:ca:12: f7:06:01:24:32:59:31:3e:58:34:fb:35:cf:8e:89:48:e5:fe: 2b:db:ac:04:a4:3d:bf:f6:41:91:04:a1:db:28:4f:19:fe:37: 99:82:61:8e:c5:e4:48:a1:d7:f9:b4:a7:61:a0:32:6c:06:1c: e0:b8:db:22:53:fa:cd:1c:c0:78:7b:f5:6f:6d:71:d1:41:f8: 56:8a:74:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUwNDA0MTcwMTUxWhcNMjUwNDExMTcwMTUxWjAYMRYwFAYD VQQDEw02N2YwMTA3Zi1kNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoFsQGeJKKK7dBlP7XBVoQduL0FOok08D7zBWvL6/neOowOdN4UvD4h1DJhC mCN4w1Nh39rHTcA9BFsYPsTNncFwCSDh1j3IK2B1a9WSFT5TIwmOociIZzuXYuqE 4+buKn1EGaAFMEvY2RHRToJpZYvklBO5P71izih4C5x6hHStmvGf9AgAnL8jCIXY nlp60QuG5N6vGRIC3TH5/UHy8fK+wyFuSJyNDkrgorckteLKnnzcDx4p4e3YN7GB x1U4Z2lk4QEcz3Qm5bUaX0XXpe9/39r4Empu9Km9ZyePHoqqhZWUZjzx7mclgfnl PBRCRzqF0Zkpnho0JziGB3DXcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8m20nO TbvKYBnd+Igaus0GVk73MB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChUU53mHeiR96u3dk8pwjBE1bmvI8opOZlmNF5qLeXHNEvBSdq8ORo Gp0P0PPYfJ/nPd0AYMKd+H0siV0dar6MYZ+nDRmg102aLZFBBycZYa8gPj0QN4u1 o9aX9TNZ6F5JXWWW4AfDdvL/zMKkm0iz/ffxXNwd7hEyndJXQxVIdyREGk6vUTM8 N0SVkXVJ1tWQ4HvaWtAUJ/JJtFhEHluyoUgcgE1G3EGDBvcCQ7bh6LvbyhL3BgEk MlkxPlg0+zXPjolI5f4r26wEpD2/9kGRBKHbKE8Z/jeZgmGOxeRIodf5tKdhoDJs BhzguNsiU/rNHMB4e/VvbXHRQfhWinQG -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:44 2025 by rpki-client