$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: 2KV5E6IVI/bboP3CEHrn56+EtwVVQSLleW/NOIyoQ0g= Subject key identifier: EA:7B:44:D0:9D:21:A2:A0:93:57:6A:67:71:DF:D8:0D:98:CA:0A:EB Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 016E Signing time: Thu 03 Apr 2025 03:18:37 +0000 Manifest this update: Thu 03 Apr 2025 03:18:37 +0000 Manifest next update: Thu 10 Apr 2025 03:18:37 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: ZXmDmLL0a/6uKMxNp1ACnfONj54K7arKYe47TfARpGg=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: mfE8FVHaGAKjd3z9L57ng4sztMrGr2OeILKa3QTIK7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F Validity Not Before: Apr 3 03:18:37 2025 GMT Not After : Apr 10 03:18:37 2025 GMT Subject: CN=67edfe0d-adbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:81:e8:a3:dc:39:45:63:bc:34:37:e0:45: 7a:69:c5:d1:03:56:21:0f:f5:c6:b2:0b:53:00:11: 61:77:15:a3:8b:36:e0:14:d9:d8:6b:6f:07:85:2b: 5a:15:51:78:d6:4b:0d:5b:ad:2e:43:c2:8d:bd:22: 66:46:fb:33:5d:e6:64:91:f4:f6:a6:f0:b6:9f:de: 4b:ec:e5:91:48:e0:d3:11:b1:1d:ff:6d:91:91:02: 49:51:25:4c:55:16:82:e5:80:e9:72:b9:f2:b0:e7: 4e:ae:4f:c0:a5:e2:05:a3:92:6a:d8:bb:ed:16:3c: 67:66:bf:17:45:62:09:e1:2b:85:6c:99:cd:af:ea: a8:e5:19:f4:8c:18:2e:b8:4c:f4:be:21:64:a7:30: cd:ff:49:f3:1d:25:40:31:64:3c:22:e6:ff:f3:38: 1a:82:b7:49:50:57:0a:6c:72:be:f6:1a:1f:61:f4: 65:19:e5:19:db:c1:50:81:11:ba:ac:ad:93:db:05: d3:05:64:55:b0:a3:8f:78:7e:09:f8:19:53:38:ea: c2:a3:a1:96:6a:5a:6d:25:2d:d6:52:1b:68:d1:e3: 36:7e:63:ec:e8:4d:7a:8a:a2:6f:33:90:9f:78:34: 1f:82:aa:91:61:4e:12:c6:48:ae:fb:fd:3b:ad:bb: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7B:44:D0:9D:21:A2:A0:93:57:6A:67:71:DF:D8:0D:98:CA:0A:EB X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b0:20:ab:23:79:64:a4:a4:36:8d:7a:09:25:d1:ef:9f:d1: 5e:7c:e0:5c:20:6d:88:a7:11:9c:b1:e4:51:6a:19:ff:0e:8c: 9a:1d:38:35:45:25:89:9f:96:27:a9:c1:c9:bd:e3:c1:31:9a: 00:06:b4:1a:de:a9:54:9e:f1:24:aa:3b:db:5f:c8:61:b4:19: 81:8f:0f:65:2e:0c:57:1e:08:fb:78:6e:3f:fe:e8:46:0a:e7: c5:ff:19:ec:c1:d7:fe:4a:27:89:9a:9a:93:0d:5d:7e:f1:19: 10:0a:13:4d:77:c4:9d:99:bd:0f:42:79:41:85:77:7e:6f:5b: 65:f5:bd:4e:fa:20:d6:6d:55:4f:a0:5c:d3:db:18:6f:83:7c: 38:43:3b:06:7f:e6:a1:f4:1a:5a:ba:5a:5a:03:cc:2f:b5:88: 4d:44:61:e8:9a:89:4c:e3:3c:e4:d6:11:cc:b5:5d:c1:23:7d: 8f:62:8c:85:a1:f7:a4:d9:85:81:11:58:58:95:38:a3:22:83: 09:b7:9f:4d:fc:dc:56:61:eb:18:8a:17:4c:dc:8d:0d:28:5f: 40:9d:f6:93:cc:f6:59:e9:e3:a9:20:7f:d5:63:35:71:d6:01: ba:43:bf:bb:1b:e6:19:7e:1d:f6:a6:35:6b:f2:ca:18:7e:d4: 88:e0:25:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUwNDAzMDMxODM3WhcNMjUwNDEwMDMxODM3WjAYMRYwFAYD VQQDEw02N2VkZmUwZC1hZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjKB6KPcOUVjvDQ34EV6acXRA1YhD/XGsgtTABFhdxWjizbgFNnYa28HhSta FVF41ksNW60uQ8KNvSJmRvszXeZkkfT2pvC2n95L7OWRSODTEbEd/22RkQJJUSVM VRaC5YDpcrnysOdOrk/ApeIFo5Jq2LvtFjxnZr8XRWIJ4SuFbJnNr+qo5Rn0jBgu uEz0viFkpzDN/0nzHSVAMWQ8Iub/8zgagrdJUFcKbHK+9hofYfRlGeUZ28FQgRG6 rK2T2wXTBWRVsKOPeH4J+BlTOOrCo6GWalptJS3WUhto0eM2fmPs6E16iqJvM5Cf eDQfgqqRYU4Sxkiu+/07rbuZrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp7RNCd IaKgk1dqZ3Hf2A2YygrrMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5sCCrI3lkpKQ2jXoJJdHvn9FefOBcIG2IpxGcseRRahn/DoyaHTg1 RSWJn5YnqcHJvePBMZoABrQa3qlUnvEkqjvbX8hhtBmBjw9lLgxXHgj7eG4//uhG CufF/xnswdf+SieJmpqTDV1+8RkQChNNd8Sdmb0PQnlBhXd+b1tl9b1O+iDWbVVP oFzT2xhvg3w4QzsGf+ah9BpaulpaA8wvtYhNRGHomolM4zzk1hHMtV3BI32PYoyF ofek2YWBEVhYlTijIoMJt59N/NxWYesYihdM3I0NKF9AnfaTzPZZ6eOpIH/VYzVx 1gG6Q7+7G+YZfh32pjVr8soYftSI4CUH -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:42 2025 by rpki-client