$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: nSebdToD0Ss+VyqkG5RnTGKOsm1/8D32tFD2e7o8JIg= Subject key identifier: 2F:3D:00:F8:0F:C3:2B:75:C1:A5:D7:4E:1D:DD:0C:A1:53:1B:47:C6 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: B6 Signing time: Thu 03 Apr 2025 05:18:11 +0000 Manifest this update: Thu 03 Apr 2025 05:18:11 +0000 Manifest next update: Thu 10 Apr 2025 05:18:11 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: BYEOrZ6npT/XxfIAZRaKShybjah58OOBiDqiWZITqTE=) 2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: eAATcw+wwIntluEWHwykA3g4lnWZ04SXuQGRkoYM9h4=) 3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: kIIwTAeW+pDEZ3yhH1JwOUrEmJAAi9ldowt4J7C/CXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F Validity Not Before: Apr 3 05:18:11 2025 GMT Not After : Apr 10 05:18:11 2025 GMT Subject: CN=67ee1a13-51c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:b9:fd:cf:f8:de:5f:9b:af:2a:f1:e0:7c: 67:dc:1d:a7:a2:af:88:c1:cb:5a:54:9e:52:97:ad: a6:c5:96:d3:99:1c:e9:1f:50:c7:74:e5:0c:1e:c2: cc:84:b9:4d:8c:25:71:41:0f:eb:31:b4:e5:f2:b5: 7b:0d:9f:ae:64:cf:c3:d0:88:bb:42:59:b8:aa:82: 0a:4a:91:e3:83:4a:78:98:33:eb:a6:19:b2:da:4c: 0f:62:75:0f:80:f8:e5:cf:92:5e:77:f7:36:64:c8: 23:b5:32:a2:28:0f:e2:60:cb:24:f0:b1:5c:ca:9c: e9:57:66:43:ce:f8:4d:4d:c1:eb:67:62:31:58:ab: 32:2b:e6:ce:ce:a7:7b:cf:92:c6:eb:8c:c8:84:cf: 6d:28:d3:76:0b:d5:d5:20:22:16:d4:e3:50:81:f1: 12:f1:81:b8:be:05:6f:bf:35:2c:fa:ee:2f:0b:b8: 31:0c:f8:be:aa:f9:f1:f9:6d:36:31:19:bb:9b:0e: 45:16:9b:41:20:2f:2b:d8:1e:64:8a:2d:19:1b:48: c5:b2:09:67:fc:ea:81:b8:52:d6:21:28:19:06:da: d6:e2:97:65:b8:c7:6f:cc:3f:e5:bd:f6:81:18:27: 57:77:aa:14:ec:fd:f7:f8:98:b1:7d:bd:1a:30:51: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3D:00:F8:0F:C3:2B:75:C1:A5:D7:4E:1D:DD:0C:A1:53:1B:47:C6 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:de:68:08:c6:1f:a9:15:97:7b:4b:ae:1c:f2:dc:d3:7c:42: de:8e:43:b4:c2:20:23:82:3f:de:0a:eb:58:53:70:1f:db:80: 21:74:39:17:a5:6e:13:d3:a6:fa:34:78:14:c4:a3:a3:51:84: 98:97:8c:88:c2:ee:ce:89:3a:68:7c:37:ac:80:b0:65:4a:1f: 4a:32:6f:37:b5:62:4d:1c:4f:07:f0:dd:d7:cb:2d:66:e6:8d: 40:45:f3:af:b4:1f:6d:ff:e8:01:30:a0:f0:c0:a5:cf:19:f0: cd:0f:44:2d:69:2c:29:d4:1c:ac:de:ec:73:2e:ea:ad:ce:95: 15:8b:6d:3b:37:05:47:91:2c:01:72:16:ca:7d:98:5d:0a:d9: 94:4b:cb:dd:e9:82:1c:4b:c3:8b:f2:e0:39:73:10:4c:98:ab: 4c:8c:99:2d:8a:6e:fc:02:9a:88:f2:a8:84:3c:2d:87:3a:18: ef:fc:bf:4d:fa:9d:ec:c7:10:1b:75:ad:2f:10:ea:fb:a1:fd: 72:d4:2f:b5:f6:77:0d:5d:a2:8b:cd:85:c3:f2:a1:5c:23:71: 5a:a5:d3:db:83:70:3e:f6:42:b1:58:e7:08:45:d3:a1:31:d7: fc:2c:7a:4a:38:18:bf:da:d4:d6:68:16:68:54:71:4a:b5:64: 12:a2:f7:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjUwNDAzMDUxODExWhcNMjUwNDEwMDUxODExWjAYMRYwFAYD VQQDEw02N2VlMWExMy01MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Be5/c/43l+bryrx4Hxn3B2noq+IwctaVJ5Sl62mxZbTmRzpH1DHdOUMHsLM hLlNjCVxQQ/rMbTl8rV7DZ+uZM/D0Ii7Qlm4qoIKSpHjg0p4mDPrphmy2kwPYnUP gPjlz5Jed/c2ZMgjtTKiKA/iYMsk8LFcypzpV2ZDzvhNTcHrZ2IxWKsyK+bOzqd7 z5LG64zIhM9tKNN2C9XVICIW1ONQgfES8YG4vgVvvzUs+u4vC7gxDPi+qvnx+W02 MRm7mw5FFptBIC8r2B5kii0ZG0jFsgln/OqBuFLWISgZBtrW4pdluMdvzD/lvfaB GCdXd6oU7P33+Jixfb0aMFHt/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC89APgP wyt1waXXTh3dDKFTG0fGMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV3mgIxh+pFZd7S64c8tzTfELejkO0wiAjgj/eCutYU3Af24AhdDkX pW4T06b6NHgUxKOjUYSYl4yIwu7OiTpofDesgLBlSh9KMm83tWJNHE8H8N3Xyy1m 5o1ARfOvtB9t/+gBMKDwwKXPGfDND0QtaSwp1Bys3uxzLuqtzpUVi207NwVHkSwB chbKfZhdCtmUS8vd6YIcS8OL8uA5cxBMmKtMjJktim78ApqI8qiEPC2HOhjv/L9N +p3sxxAbda0vEOr7of1y1C+19ncNXaKLzYXD8qFcI3FapdPbg3A+9kKxWOcIRdOh Mdf8LHpKOBi/2tTWaBZoVHFKtWQSove4 -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:41 2025 by rpki-client