$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: j1Q77IzhjvaAUf9O/9hwhdWXivMrTOtws4Z7Wnp5Adw= Subject key identifier: C2:F2:18:62:0B:39:F9:F5:07:3D:4D:43:CF:04:7C:BA:A2:C0:25:68 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 060F Signing time: Fri 18 Apr 2025 22:49:33 +0000 Manifest this update: Fri 18 Apr 2025 22:49:32 +0000 Manifest next update: Fri 25 Apr 2025 22:49:32 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: Uh/FzLUl6KrBWq1RY/J5Xbpk2VGuJUdntCG6fKUvwPM=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: qG6STwlDbN6NW6ARno6ilKFIOOqEukZRWb32de5Epio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Apr 18 22:49:32 2025 GMT Not After : Apr 25 22:49:32 2025 GMT Subject: CN=6802d6fd-1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:1f:0c:52:a0:47:a8:7d:43:5f:aa:9f:6a: 1b:3c:90:9e:32:d1:bb:53:4e:96:6a:54:42:c1:8f: 92:d7:18:13:1e:df:9f:fe:39:d0:2b:17:60:68:d3: 3c:31:c8:59:20:14:3b:9e:59:c4:25:ba:6b:c2:11: fb:61:df:e8:cc:f8:db:ba:03:bc:4c:55:5e:7f:8c: 16:50:f8:c7:3b:8b:cf:ab:d7:93:b4:98:b7:82:43: 97:f6:cb:32:e3:90:39:49:e9:79:e9:4e:c3:e7:71: 99:02:0e:83:bc:c7:42:b8:72:ac:f0:5c:a9:7f:f1: 6d:87:e9:50:b1:2a:f7:0e:ac:c7:53:08:71:b4:89: 10:4e:48:6b:52:44:9b:c5:09:bd:98:00:51:34:c9: eb:d2:bd:97:05:8f:42:42:3d:8b:90:ad:1a:1d:65: f7:12:25:f1:68:e6:be:cc:42:6a:e1:57:1e:00:22: 59:c7:c3:bd:3a:51:a1:71:35:18:30:54:74:65:a3: e6:3e:f2:7f:6c:5a:4f:38:fd:f5:54:76:eb:e5:f4: b5:4b:16:53:d9:5b:01:86:c7:97:e0:49:e8:7a:81: bf:b2:91:d1:20:a6:a9:3f:e4:2f:78:ff:75:19:b1: 4a:91:f5:c5:ae:7f:30:c1:72:7f:ef:48:ad:2d:58: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:18:62:0B:39:F9:F5:07:3D:4D:43:CF:04:7C:BA:A2:C0:25:68 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:21:11:86:70:29:f7:39:27:af:35:d6:1b:39:ad:73:4b: cd:64:95:d9:6c:92:6c:6d:56:d1:99:75:c4:ab:4e:60:83:44: 89:bb:67:57:3f:3a:5a:1c:86:15:4d:f3:2e:01:e4:01:4e:2a: 6b:26:c9:90:75:dd:2a:d3:a8:52:ba:fb:64:5b:9e:14:70:4a: f8:30:73:ce:1c:e7:51:d6:28:46:43:c3:82:a8:1e:55:aa:78: ee:35:c7:48:22:ff:84:f7:10:4f:d1:02:c2:16:3a:0d:d2:53: ed:15:3b:db:6c:c2:67:f8:7f:82:41:b1:f4:bc:38:33:6c:5c: fa:ec:bc:f1:11:be:14:6f:28:13:64:0d:51:56:bd:3d:3e:b6: 0b:2a:59:9e:4b:c8:fc:69:01:e5:44:91:bd:f8:84:cc:42:c4: 59:da:e4:2f:c2:c4:5c:78:1b:67:f9:54:1f:96:f5:f3:c2:83: 54:9a:0a:f6:ae:32:ce:27:55:86:ad:b7:a7:ec:06:1b:90:6d: 9d:3a:bc:ce:48:68:59:97:8c:8b:e0:33:14:8c:fd:84:31:7e: c5:0e:de:bf:f6:05:e2:06:1b:c3:03:d0:91:51:07:01:b4:09: ec:fd:f3:8c:2c:28:32:01:81:13:76:56:ed:4f:cc:d4:46:ee: 05:d5:c5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjUwNDE4MjI0OTMyWhcNMjUwNDI1MjI0OTMyWjAYMRYwFAYD VQQDEw02ODAyZDZmZC0xNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+IfDFKgR6h9Q1+qn2obPJCeMtG7U06WalRCwY+S1xgTHt+f/jnQKxdgaNM8 MchZIBQ7nlnEJbprwhH7Yd/ozPjbugO8TFVef4wWUPjHO4vPq9eTtJi3gkOX9ssy 45A5Sel56U7D53GZAg6DvMdCuHKs8Fypf/Fth+lQsSr3DqzHUwhxtIkQTkhrUkSb xQm9mABRNMnr0r2XBY9CQj2LkK0aHWX3EiXxaOa+zEJq4VceACJZx8O9OlGhcTUY MFR0ZaPmPvJ/bFpPOP31VHbr5fS1SxZT2VsBhseX4EnoeoG/spHRIKapP+QveP91 GbFKkfXFrn8wwXJ/70itLVg79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLyGGIL Ofn1Bz1NQ88EfLqiwCVoMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz1iERhnAp9zknrzXWGzmtc0vNZJXZbJJsbVbRmXXEq05gg0SJu2dX PzpaHIYVTfMuAeQBTiprJsmQdd0q06hSuvtkW54UcEr4MHPOHOdR1ihGQ8OCqB5V qnjuNcdIIv+E9xBP0QLCFjoN0lPtFTvbbMJn+H+CQbH0vDgzbFz67LzxEb4UbygT ZA1RVr09PrYLKlmeS8j8aQHlRJG9+ITMQsRZ2uQvwsRceBtn+VQflvXzwoNUmgr2 rjLOJ1WGrben7AYbkG2dOrzOSGhZl4yL4DMUjP2EMX7FDt6/9gXiBhvDA9CRUQcB tAns/fOMLCgyAYETdlbtT8zURu4F1cXg -----END CERTIFICATE-----Generated at Sat Apr 19 03:17:04 2025 by rpki-client