$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: d77BjaZUaxHpVGYSSeJIdRX+xw25FXkU4JpVfKjb67c= Subject key identifier: 24:C0:36:77:5F:AF:BE:1C:F2:BF:27:AC:0F:5C:CD:F1:30:9B:67:49 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0411 Signing time: Wed 09 Apr 2025 00:09:14 +0000 Manifest this update: Wed 09 Apr 2025 00:09:13 +0000 Manifest next update: Wed 16 Apr 2025 00:09:13 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: vGz24vyg8dPFwFRq6vnqUPlKg33mNjIYL9QSx7s0Yic=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: amJzS7fS0qwVdajHhOHPPRxX4Ss5Ng0s6L0nYbstO78=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 76rKPM4Cl24qOxvpyPfe4PxAfRqCYHAiT0+M4zUtc90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B Validity Not Before: Apr 9 00:09:13 2025 GMT Not After : Apr 16 00:09:13 2025 GMT Subject: CN=67f5baa9-3721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:22:fc:a8:66:e5:ce:f7:0f:12:d2:74:85: 65:fd:99:0b:4a:48:b1:20:71:02:bf:14:98:35:d9: 4c:ba:8f:c7:30:6c:c7:04:f1:35:a6:70:ac:af:b2: d3:bb:52:64:72:65:a5:b9:2e:25:e1:aa:7b:8f:cf: c9:d7:b9:ba:dd:4d:6a:05:02:17:6c:14:0e:45:a6: c5:6b:30:cd:0c:b1:14:10:95:1f:90:b7:88:68:8f: 6d:87:02:b6:b0:73:f7:ef:5c:1a:3c:36:e9:a7:c5: be:69:e7:0c:97:51:78:75:21:22:61:b3:5f:74:86: 19:71:5d:1e:a1:92:10:94:3d:9f:75:85:ac:0b:03: 29:85:6c:1a:60:cf:d4:0f:93:ad:a0:c8:fb:6a:c2: 2d:b4:1e:9f:4c:c6:08:ab:b5:02:b0:2c:5b:db:b1: 7f:f7:02:02:0a:ad:1c:e7:6d:cb:13:63:4a:ee:ec: c2:58:63:cb:4b:9d:3e:49:36:ac:b8:a7:9c:74:07: 02:9a:18:e4:f6:22:e8:97:19:6e:c8:78:2f:20:a5: bf:61:ef:80:96:82:6d:65:33:ed:d2:b1:60:84:31: 2e:1b:fc:2e:9f:56:5c:a7:36:e8:d2:ac:a3:c9:55: 1f:fd:58:a5:ae:91:34:21:6b:0e:b7:f3:c9:76:b8: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:36:77:5F:AF:BE:1C:F2:BF:27:AC:0F:5C:CD:F1:30:9B:67:49 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d6:30:b2:f4:54:e2:86:2a:45:94:10:9b:f9:78:a2:f1:0d: 1f:dd:35:11:3c:34:4e:11:dd:cb:36:cf:5d:cf:30:7b:42:b0: f3:a6:d4:2b:87:00:43:0d:2e:27:8b:28:be:a7:18:6f:02:0a: c3:ce:a8:76:88:96:38:ff:76:0e:b9:60:72:5f:4a:61:d9:8f: 60:c6:70:2b:14:f7:3b:99:ba:86:31:94:26:bd:0b:22:5a:09: 4f:54:7d:8a:23:92:bd:f2:c3:4d:14:39:20:02:52:2f:5c:eb: 71:4a:a4:a3:5b:b0:1a:46:b7:f2:4f:9f:59:e2:26:23:c4:a4: e7:ca:c3:40:d2:c7:22:eb:e0:d5:f4:ec:bf:34:ca:ed:4d:0d: 46:d7:9a:10:5e:f4:9b:63:8a:36:a2:2d:02:18:10:ae:4c:08: 6d:8d:30:f4:de:09:c5:f9:62:f1:ba:8a:88:68:2e:be:2e:1c: 6c:11:cc:44:09:18:6b:bc:84:fb:b6:14:6a:1a:9b:6d:64:b1: a2:5f:7b:89:e2:93:be:38:2a:80:1f:f9:c7:41:b7:e9:2e:08: c4:64:4c:a0:a8:f4:e1:12:af:1a:bb:c8:ee:e9:2e:c3:c3:4e: c6:3d:79:e5:72:6d:0d:3b:0c:3e:dc:71:0c:a0:04:c9:6c:51: 9f:27:e5:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwNDA5MDAwOTEzWhcNMjUwNDE2MDAwOTEzWjAYMRYwFAYD VQQDEw02N2Y1YmFhOS0zNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvEi/Khm5c73DxLSdIVl/ZkLSkixIHECvxSYNdlMuo/HMGzHBPE1pnCsr7LT u1JkcmWluS4l4ap7j8/J17m63U1qBQIXbBQORabFazDNDLEUEJUfkLeIaI9thwK2 sHP371waPDbpp8W+aecMl1F4dSEiYbNfdIYZcV0eoZIQlD2fdYWsCwMphWwaYM/U D5OtoMj7asIttB6fTMYIq7UCsCxb27F/9wICCq0c523LE2NK7uzCWGPLS50+STas uKecdAcCmhjk9iLolxluyHgvIKW/Ye+AloJtZTPt0rFghDEuG/wun1Zcpzbo0qyj yVUf/VilrpE0IWsOt/PJdrjakQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTANndf r74c8r8nrA9czfEwm2dJMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv1jCy9FTihipFlBCb+Xii8Q0f3TURPDROEd3LNs9dzzB7QrDzptQr hwBDDS4niyi+pxhvAgrDzqh2iJY4/3YOuWByX0ph2Y9gxnArFPc7mbqGMZQmvQsi WglPVH2KI5K98sNNFDkgAlIvXOtxSqSjW7AaRrfyT59Z4iYjxKTnysNA0sci6+DV 9Oy/NMrtTQ1G15oQXvSbY4o2oi0CGBCuTAhtjTD03gnF+WLxuoqIaC6+LhxsEcxE CRhrvIT7thRqGpttZLGiX3uJ4pO+OCqAH/nHQbfpLgjEZEygqPThEq8au8ju6S7D w07GPXnlcm0NOww+3HEMoATJbFGfJ+XM -----END CERTIFICATE-----Generated at Fri Apr 11 19:44:31 2025 by rpki-client