$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: R4tJRk/33WNDVhd9xubygNL9kiBaQN/7zjmGwDtQQ0o= Subject key identifier: 5D:D9:47:D1:79:22:52:CD:61:D5:22:9C:83:A5:84:14:40:90:D2:F2 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 0639 Signing time: Fri 04 Apr 2025 22:45:23 +0000 Manifest this update: Fri 04 Apr 2025 22:45:22 +0000 Manifest next update: Fri 11 Apr 2025 22:45:22 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: upD03z8RsfdBl7JNCEYHQsCIFKWQST1tfw80cgWvUys=) 2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED Validity Not Before: Apr 4 22:45:22 2025 GMT Not After : Apr 11 22:45:22 2025 GMT Subject: CN=67f06103-10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:15:f9:86:f3:1a:cf:68:07:9e:ac:01:0f: b8:37:42:00:64:0f:80:19:ab:c4:44:d6:dc:58:4e: 71:51:58:df:93:5b:d1:04:27:b7:53:17:bf:16:db: 39:65:e3:59:82:91:0b:88:71:75:67:22:b1:f7:bf: a0:51:c0:be:00:96:bd:dc:d0:da:1c:2d:5d:4b:3d: 03:0f:ec:c7:e3:31:57:53:a9:33:64:94:d3:fb:6f: 01:90:22:c0:26:95:e5:6a:1b:3a:8c:f6:43:e7:65: 9f:2e:62:39:f0:8d:fd:7c:58:f3:bb:09:5c:99:a6: 19:04:87:8d:f5:99:14:da:d6:d5:7c:80:3f:87:3d: da:4a:ad:86:fc:9b:72:7e:84:51:36:bc:a3:86:82: 04:20:ec:c4:f4:ac:f8:d8:ae:33:22:47:62:e0:0c: 36:59:64:5c:69:ae:1b:fd:87:30:24:46:2f:ea:84: 58:99:c0:0c:01:19:f1:27:2f:c4:0c:34:10:95:47: fc:9f:8c:1e:87:22:09:3f:e7:39:77:0e:a4:fa:3f: 2f:e4:d3:91:33:c1:7c:8f:bf:4d:c9:e5:37:bf:fa: 0b:f3:46:40:98:3f:9a:af:55:9d:b5:f3:77:61:7e: a4:14:46:e0:a6:88:21:6f:86:37:48:cb:cb:ab:d8: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D9:47:D1:79:22:52:CD:61:D5:22:9C:83:A5:84:14:40:90:D2:F2 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5a:14:05:3e:7b:e2:4d:a5:b5:a3:ee:31:21:a7:35:9e:e2: 68:ec:0e:46:06:ab:d3:48:df:04:9c:1e:af:13:0a:c7:96:cc: 93:92:1f:dc:cd:36:7c:94:3a:6d:95:e6:87:8c:56:5b:15:60: 6b:05:90:b6:e0:f2:e5:32:7d:76:f0:da:fd:17:5d:85:c3:af: 74:52:cf:fe:72:27:28:e6:a2:9a:66:20:7f:15:a3:77:ca:3f: ba:68:c4:bf:f2:29:65:0c:bf:f7:98:e5:9e:3a:06:ca:1a:61: 23:de:f2:7e:2b:85:6b:3e:c3:d5:8a:7c:63:7c:4c:fd:c2:54: 93:08:f8:b9:e3:da:d5:a3:fd:d1:89:50:8f:14:3c:a1:0d:bf: f9:33:18:1d:90:9c:23:01:9a:9e:39:cb:64:b4:e0:cc:5e:d3: 22:4a:f8:02:08:be:da:27:37:44:be:98:1c:5c:70:04:6e:42: 7a:48:81:da:c7:5b:34:ec:4a:f7:41:d3:25:b8:c3:04:d6:42: 2e:88:05:1a:66:03:5d:61:5a:46:02:a9:95:0b:37:85:25:75: 92:2d:07:24:f8:1c:e6:33:5e:78:46:39:aa:5a:c6:f3:2a:79: 5e:12:08:51:cc:d2:f8:3b:2f:ee:20:78:93:7a:93:94:29:27: d3:3f:1a:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNDA0MjI0NTIyWhcNMjUwNDExMjI0NTIyWjAYMRYwFAYD VQQDEw02N2YwNjEwMy0xMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRIV+YbzGs9oB56sAQ+4N0IAZA+AGavERNbcWE5xUVjfk1vRBCe3Uxe/Fts5 ZeNZgpELiHF1ZyKx97+gUcC+AJa93NDaHC1dSz0DD+zH4zFXU6kzZJTT+28BkCLA JpXlahs6jPZD52WfLmI58I39fFjzuwlcmaYZBIeN9ZkU2tbVfIA/hz3aSq2G/Jty foRRNryjhoIEIOzE9Kz42K4zIkdi4Aw2WWRcaa4b/YcwJEYv6oRYmcAMARnxJy/E DDQQlUf8n4wehyIJP+c5dw6k+j8v5NORM8F8j79NyeU3v/oL80ZAmD+ar1WdtfN3 YX6kFEbgpoghb4Y3SMvLq9iN8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3ZR9F5 IlLNYdUinIOlhBRAkNLyMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYWhQFPnviTaW1o+4xIac1nuJo7A5GBqvTSN8EnB6vEwrHlsyTkh/c zTZ8lDptleaHjFZbFWBrBZC24PLlMn128Nr9F12Fw690Us/+cico5qKaZiB/FaN3 yj+6aMS/8illDL/3mOWeOgbKGmEj3vJ+K4VrPsPVinxjfEz9wlSTCPi549rVo/3R iVCPFDyhDb/5MxgdkJwjAZqeOctktODMXtMiSvgCCL7aJzdEvpgcXHAEbkJ6SIHa x1s07Er3QdMluMME1kIuiAUaZgNdYVpGAqmVCzeFJXWSLQck+BzmM154RjmqWsbz KnleEghRzNL4Oy/uIHiTepOUKSfTPxoy -----END CERTIFICATE-----Generated at Sat Apr 5 18:48:16 2025 by rpki-client