$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: /TFgjeYpkZzninBwyPxVjRl19Dw+Ny6bHoUmkWS172w= Subject key identifier: 1A:3F:E0:3D:9E:B4:4C:32:48:3B:C8:56:48:00:B6:9B:98:2E:BB:D6 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 025C Signing time: Sat 29 Mar 2025 02:01:43 +0000 Manifest this update: Sat 29 Mar 2025 02:01:43 +0000 Manifest next update: Sat 05 Apr 2025 02:01:43 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: wGm0wOtO4TIET//TvSrZddORjMmMrorsMD750UbyYW8=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D Validity Not Before: Mar 29 02:01:43 2025 GMT Not After : Apr 5 02:01:43 2025 GMT Subject: CN=67e75487-5fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:46:61:96:b7:a1:7c:7b:0a:8f:3f:4e:49: 96:29:12:34:d7:f1:cd:f8:fb:be:bc:39:b3:37:ac: 0f:83:e7:64:03:9c:f9:d0:e0:b6:df:18:99:f8:d9: 7d:33:2f:3b:a2:3c:16:09:90:96:a1:03:7f:8d:aa: 61:60:16:44:e2:97:f9:25:ab:21:f2:e0:11:80:81: ae:9c:fc:49:b6:f0:28:76:2e:42:bd:0f:f4:21:e8: aa:25:74:32:18:fe:cd:99:29:84:b1:ff:80:f3:74: 88:d5:b8:3c:0c:79:a9:ac:40:76:f5:b8:83:c1:a2: c0:82:04:fc:72:8a:41:5d:db:21:3d:3b:40:34:73: 67:6c:05:e5:e2:84:b6:b1:b8:b9:eb:2a:8f:5b:e2: c7:ba:1f:a4:bb:de:5e:f0:dc:9f:7b:58:de:02:c7: ff:1c:2d:7a:0b:ee:ef:9e:f0:55:f8:ff:a3:f0:21: 33:81:97:f6:64:09:6c:f7:88:98:91:db:24:c2:b3: 44:75:f6:27:f4:80:b8:98:f1:09:82:97:6f:94:d3: 51:d2:c8:ae:af:1c:89:38:a6:5e:7a:45:ee:f8:44: 1a:a2:0b:d8:5c:1a:de:e9:8c:84:37:b6:63:e2:0f: df:f9:b3:14:ed:2a:ae:72:49:cd:90:57:e8:4c:f0: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:E0:3D:9E:B4:4C:32:48:3B:C8:56:48:00:B6:9B:98:2E:BB:D6 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:91:c8:a2:bd:df:14:e7:fd:8a:90:d6:8e:98:de:c0:0e:01: 95:be:d7:db:cc:ef:90:68:5b:49:f0:ba:3f:0e:ca:ad:20:a4: 61:f1:9d:f4:49:54:1c:2c:d4:4b:26:5e:48:5e:fa:cc:cd:8b: 75:79:3a:05:d7:19:47:45:d4:a0:05:db:62:f3:be:27:5f:5b: c3:06:ac:c7:61:70:e2:54:4d:45:04:d5:18:1d:7b:26:d5:b8: d0:29:9c:ad:7d:f0:ea:da:73:89:c2:65:88:0f:74:47:87:f3: 32:0e:11:60:7e:8a:4e:b1:28:ca:e2:50:22:2d:c0:6a:09:a9: da:24:8a:ac:ce:c7:97:c1:2b:a9:a4:c2:ea:95:4f:0e:77:df: 08:11:00:b5:63:ee:c1:79:e1:93:b7:a2:28:81:ca:a6:54:48: f9:ef:33:cd:b1:77:27:87:57:1e:db:66:31:bc:67:6f:28:00: ac:f5:18:df:e0:11:70:5c:e4:91:35:d5:90:28:ec:cc:24:53: 9d:23:33:07:dd:90:1d:63:34:8a:e6:9e:7e:bb:23:52:32:c2: 81:ad:29:67:6b:48:65:39:04:7b:30:c8:95:cc:53:5c:0b:71: fc:bc:5c:01:70:e8:00:4b:b6:61:26:5d:fd:33:27:58:35:37: 37:a9:1a:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwMzI5MDIwMTQzWhcNMjUwNDA1MDIwMTQzWjAYMRYwFAYD VQQDEw02N2U3NTQ4Ny01ZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKdGYZa3oXx7Co8/TkmWKRI01/HN+Pu+vDmzN6wPg+dkA5z50OC23xiZ+Nl9 My87ojwWCZCWoQN/japhYBZE4pf5Jash8uARgIGunPxJtvAodi5CvQ/0IeiqJXQy GP7NmSmEsf+A83SI1bg8DHmprEB29biDwaLAggT8copBXdshPTtANHNnbAXl4oS2 sbi56yqPW+LHuh+ku95e8Nyfe1jeAsf/HC16C+7vnvBV+P+j8CEzgZf2ZAls94iY kdskwrNEdfYn9IC4mPEJgpdvlNNR0siurxyJOKZeekXu+EQaogvYXBre6YyEN7Zj 4g/f+bMU7SqucknNkFfoTPBT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBo/4D2e tEwySDvIVkgAtpuYLrvWMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCkciivd8U5/2KkNaOmN7ADgGVvtfbzO+QaFtJ8Lo/DsqtIKRh8Z30 SVQcLNRLJl5IXvrMzYt1eToF1xlHRdSgBdti874nX1vDBqzHYXDiVE1FBNUYHXsm 1bjQKZytffDq2nOJwmWID3RHh/MyDhFgfopOsSjK4lAiLcBqCanaJIqszseXwSup pMLqlU8Od98IEQC1Y+7BeeGTt6IogcqmVEj57zPNsXcnh1ce22YxvGdvKACs9Rjf 4BFwXOSRNdWQKOzMJFOdIzMH3ZAdYzSK5p5+uyNSMsKBrSlna0hlOQR7MMiVzFNc C3H8vFwBcOgAS7ZhJl39MydYNTc3qRrU -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:38 2025 by rpki-client