$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft File: Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json) Hash identifier: BnDjK36R1HIJvCnvh9u2D/KLUDvtXsJtCL/A+GdZNOg= Subject key identifier: A5:41:CE:A6:DF:8F:CE:E3:64:95:9D:F7:87:E6:2C:9F:9F:53:F6:9F Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft Manifest number: 0681 Signing time: Fri 28 Mar 2025 22:37:09 +0000 Manifest this update: Fri 28 Mar 2025 22:37:09 +0000 Manifest next update: Fri 04 Apr 2025 22:37:09 +0000 Files and hashes: 1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: HZWcLj2jyKZxuSDVHhOL7oYIpfazLuvCIGEfWZk2gxU=) 2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=) 3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: 00yFzXA+JQ5htpGD8ADiNSIhDTumFOoTTNXL9w2q2PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5606 Validity Not Before: Mar 28 22:37:09 2025 GMT Not After : Apr 4 22:37:09 2025 GMT Subject: CN=67e72495-297a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:1d:0e:3a:8c:5c:32:2a:82:59:21:86:ea: 11:84:8c:15:ce:7e:67:e3:ff:44:e6:bb:92:11:e2: a8:a5:3d:13:9b:8d:56:39:8d:6f:08:e3:09:65:8e: b4:27:fe:6b:97:c9:0c:83:99:3f:7a:bd:83:84:7d: 70:d4:c4:82:5d:c2:8c:21:b1:4d:2c:5d:0c:9d:59: 70:c8:a2:b3:03:a1:a9:4b:f5:9a:ec:64:d1:e5:bd: f7:5e:34:aa:de:56:33:2a:aa:81:71:db:2a:97:6e: b2:40:6c:97:f5:6e:53:1c:39:9f:cb:8a:bb:6b:2a: 19:7f:d4:87:8e:8d:02:fd:ff:e7:2b:39:b5:f6:28: a7:a4:de:a7:c6:6b:2a:45:02:65:8d:09:8f:ac:70: 35:ce:27:22:d5:64:8f:05:d4:9b:ca:9f:f7:bf:09: 27:2a:ed:ef:14:89:17:0b:67:fb:fa:8d:3a:b8:d3: 1d:89:a1:9a:4e:01:64:a6:16:5f:e1:8c:b0:8a:92: b6:52:4d:45:80:5c:84:6c:05:3b:1b:1c:17:08:26: 5d:ac:d9:1e:d6:9e:f2:36:2e:1e:0c:46:2c:8c:8f: 4a:ff:6f:ba:04:e1:f7:9a:f0:e2:8c:74:2c:69:89: e1:d7:c3:28:46:86:1c:e3:57:07:0a:3f:71:ad:ae: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:CE:A6:DF:8F:CE:E3:64:95:9D:F7:87:E6:2C:9F:9F:53:F6:9F X509v3 Authority Key Identifier: keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:da:b1:84:8e:5f:39:9d:ab:6b:72:52:54:7c:74:32:cf:a8: 88:67:e6:eb:f4:ae:0f:3d:12:47:7f:e9:de:ba:34:0b:1b:0e: 98:12:5c:d6:e2:49:89:c1:92:5a:a3:54:9e:1c:11:f7:0a:31: 76:ff:8a:a9:0b:3e:62:5b:2e:2a:31:de:aa:4d:61:85:8d:b3: 40:bc:21:98:11:13:86:c0:02:2c:82:3e:db:01:15:19:b5:d4: 36:d8:af:96:e2:e6:1b:8a:28:4d:c3:0e:17:c0:f4:c9:ef:13: aa:47:f0:93:9b:91:74:1d:06:fe:d7:ad:ba:ed:28:69:96:2d: 29:a2:51:6c:bc:9e:d2:41:45:25:48:f2:4b:fb:af:f0:2d:ba: 68:27:92:eb:ae:c1:da:f2:9d:29:a3:78:17:78:4d:63:8a:ce: 9c:7a:03:65:d4:a3:20:10:a1:1d:e5:32:31:85:ba:53:ca:cc: ac:61:0e:0b:4f:12:8c:a4:f1:88:e1:a4:a4:44:73:9d:70:e5: bf:5f:44:ee:ee:9f:41:f6:80:79:81:50:c5:4a:95:d8:e8:16: 74:9a:e4:73:6c:c3:3f:57:41:7a:d1:08:4f:75:98:63:e4:65: 78:1a:14:7d:97:84:5f:1c:08:8e:b1:2e:95:2d:10:81:22:1e: 8f:3e:89:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MDYxMTAvBgNVBAUTKDFFMTZGODNEMEM0MDMzNUQ3OTZCRTVCQTIxQzkwQ0JF RTk5NzU5QkMwHhcNMjUwMzI4MjIzNzA5WhcNMjUwNDA0MjIzNzA5WjAYMRYwFAYD VQQDEw02N2U3MjQ5NS0yOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsodDjqMXDIqglkhhuoRhIwVzn5n4/9E5ruSEeKopT0Tm41WOY1vCOMJZY60 J/5rl8kMg5k/er2DhH1w1MSCXcKMIbFNLF0MnVlwyKKzA6GpS/Wa7GTR5b33XjSq 3lYzKqqBcdsql26yQGyX9W5THDmfy4q7ayoZf9SHjo0C/f/nKzm19iinpN6nxmsq RQJljQmPrHA1zici1WSPBdSbyp/3vwknKu3vFIkXC2f7+o06uNMdiaGaTgFkphZf 4YywipK2Uk1FgFyEbAU7GxwXCCZdrNke1p7yNi4eDEYsjI9K/2+6BOH3mvDijHQs aYnh18MoRoYc41cHCj9xra5ipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVBzqbf j87jZJWd94fmLJ+fU/afMB8GA1UdIwQYMBaAFB4W+D0MQDNdeWvluiHJDL7pl1m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwNi85NDBDNUQ5Qzcx MDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0xMTVhLVc2SWNrTXZ1bVhX YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hoYjRQUXhBTTExNWEtVzZJY2tNdnVtWFdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwNi85NDBDNUQ5QzcxMDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0x MTVhLVc2SWNrTXZ1bVhXYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE2rGEjl85natrclJUfHQyz6iIZ+br9K4PPRJHf+neujQLGw6YElzW 4kmJwZJao1SeHBH3CjF2/4qpCz5iWy4qMd6qTWGFjbNAvCGYEROGwAIsgj7bARUZ tdQ22K+W4uYbiihNww4XwPTJ7xOqR/CTm5F0HQb+16267Shpli0polFsvJ7SQUUl SPJL+6/wLbpoJ5LrrsHa8p0po3gXeE1jis6cegNl1KMgEKEd5TIxhbpTysysYQ4L TxKMpPGI4aSkRHOdcOW/X0Tu7p9B9oB5gVDFSpXY6BZ0muRzbMM/V0F60QhPdZhj 5GV4GhR9l4RfHAiOsS6VLRCBIh6PPole -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:58 2025 by rpki-client