$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json) Hash identifier: 6m5xERpQCyFz7tnw/qu3Jx2DCwOEFmhqXu+wJai4Vcs= Subject key identifier: 58:0E:ED:8B:9F:9B:3E:FD:16:F4:A1:DB:63:24:65:DB:7B:C7:FE:BF Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 34FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft Manifest number: 34BB Signing time: Fri 04 Apr 2025 14:16:02 +0000 Manifest this update: Fri 04 Apr 2025 14:16:01 +0000 Manifest next update: Fri 11 Apr 2025 14:16:01 +0000 Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: F+3O6PuEniiKWsQzOiyQh6W+IluCakZNB8CUpNx6B54=) 2: 3D6EDF86EDA711ED91155885C4F9AE02.roa (hash: mXb8AscVsTwHQGsL7M6XAxSIWwOh5epna0XlBQIQUOY=) 3: D3DAACB2507E11EF91EDBA52C4F9AE02.roa (hash: Whq1SIyvQYa1mALpVqGVZuuCi11KV+H9HrjJKdS2dN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13567 (0x34ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76 Validity Not Before: Apr 4 14:16:01 2025 GMT Not After : Apr 11 14:16:01 2025 GMT Subject: CN=67efe9a1-74aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:b9:aa:6c:0a:e7:da:3f:eb:11:66:7e:fd: 4f:ee:0e:f0:fc:b1:8e:7d:4a:27:3c:2a:d0:12:48: b5:d3:fd:7e:02:64:ec:b1:c5:11:c3:be:72:66:3d: a3:53:eb:05:82:4c:df:d9:d4:df:ba:5a:40:71:29: 0a:99:5f:f8:63:c0:13:fa:8a:e1:5d:56:62:53:02: f7:32:e1:f2:1e:ec:9e:37:36:b7:dc:cb:5e:f0:f6: 1b:3e:fa:f4:cb:c1:f1:26:ab:5e:e0:3e:63:f8:8b: 67:c3:1c:22:f3:74:48:12:fa:97:e8:ee:04:9f:5a: 50:c1:6f:48:30:49:72:b6:e8:e8:91:24:0c:d6:dd: d9:74:e2:cb:a7:b1:1d:a0:97:d6:aa:4e:77:c8:e8: 29:71:8c:39:1d:c0:9e:b6:8f:fb:ab:33:5b:48:1e: f6:15:7b:3d:77:48:93:b2:16:a0:ca:96:92:7a:e7: 13:b0:d5:17:5a:7c:3f:89:3e:89:b0:4a:71:b8:10: 36:34:0b:26:23:a3:4c:00:92:16:63:fa:31:a6:9e: ae:36:8f:e5:2e:2c:01:8c:48:33:be:7b:fa:96:19: a0:24:23:9a:90:47:5b:94:0f:1c:08:20:14:02:a3: 7c:fb:64:a7:76:2c:22:40:a4:92:21:44:a0:6e:c6: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:ED:8B:9F:9B:3E:FD:16:F4:A1:DB:63:24:65:DB:7B:C7:FE:BF X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:bf:df:ab:4a:8a:92:aa:27:89:7d:4d:05:15:5b:6e:54:24: 63:de:77:c3:70:11:4e:6a:87:c3:66:d8:18:ab:40:e3:30:e5: 7f:52:c5:56:aa:16:52:7c:55:79:43:0c:0c:5c:91:90:28:67: 0e:d3:aa:8e:94:f8:16:19:67:66:95:19:1d:d6:28:9a:c8:5d: 51:ab:ba:0a:7b:fb:cd:ba:7d:c2:4b:2e:19:c8:f0:5e:94:8d: a6:8c:b4:b6:97:66:20:18:35:9a:04:fd:d1:14:20:b3:3f:d5: 80:e2:cf:62:01:7c:a0:86:a9:8e:1c:87:7e:08:fe:f3:c7:93: 04:65:b0:e9:3b:e9:51:10:30:d0:88:6f:2c:7f:b3:2d:a3:c6: 2f:9d:89:75:49:a5:4a:a5:a2:cb:a5:c6:20:b9:cf:6b:16:0b: c3:54:74:89:86:88:26:71:ee:1f:60:55:18:3c:c6:6d:1d:4f: 46:91:22:82:1c:32:a0:f1:7f:b5:09:6d:20:a4:cd:3a:bb:d9: 9f:b8:ae:61:ed:8e:de:2e:b1:eb:e3:1f:a6:23:d2:b2:16:cd: 0a:2e:32:ad:92:9c:c4:09:f6:eb:52:f5:3c:f7:e0:24:c3:4a: 7c:c9:6e:54:f7:2b:d1:ab:05:5c:53:55:0b:24:8a:c1:21:86: f7:62:8d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjUwNDA0MTQxNjAxWhcNMjUwNDExMTQxNjAxWjAYMRYwFAYD VQQDEw02N2VmZTlhMS03NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLe5qmwK59o/6xFmfv1P7g7w/LGOfUonPCrQEki10/1+AmTsscURw75yZj2j U+sFgkzf2dTfulpAcSkKmV/4Y8AT+orhXVZiUwL3MuHyHuyeNza33Mte8PYbPvr0 y8HxJqte4D5j+Itnwxwi83RIEvqX6O4En1pQwW9IMElytujokSQM1t3ZdOLLp7Ed oJfWqk53yOgpcYw5HcCeto/7qzNbSB72FXs9d0iTshagypaSeucTsNUXWnw/iT6J sEpxuBA2NAsmI6NMAJIWY/oxpp6uNo/lLiwBjEgzvnv6lhmgJCOakEdblA8cCCAU AqN8+2SndiwiQKSSIUSgbsZG1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgO7Yuf mz79FvSh22MkZdt7x/6/MB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAov9+rSoqSqieJfU0FFVtuVCRj3nfDcBFOaofDZtgYq0DjMOV/UsVW qhZSfFV5QwwMXJGQKGcO06qOlPgWGWdmlRkd1iiayF1Rq7oKe/vNun3CSy4ZyPBe lI2mjLS2l2YgGDWaBP3RFCCzP9WA4s9iAXyghqmOHId+CP7zx5MEZbDpO+lREDDQ iG8sf7Mto8YvnYl1SaVKpaLLpcYguc9rFgvDVHSJhogmce4fYFUYPMZtHU9GkSKC HDKg8X+1CW0gpM06u9mfuK5h7Y7eLrHr4x+mI9KyFs0KLjKtkpzECfbrUvU89+Ak w0p8yW5U9yvRqwVcU1ULJIrBIYb3Yo3p -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:39 2025 by rpki-client