$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: YDUj7i0/5aT0dVvi3yNb3NfiUIv5dXyVC+MACksLteQ= Subject key identifier: D0:29:1C:16:CE:A6:78:6F:37:24:E2:A4:68:FA:54:07:06:6C:C6:76 Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0CF0 Signing time: Fri 04 Apr 2025 18:12:39 +0000 Manifest this update: Fri 04 Apr 2025 18:12:38 +0000 Manifest next update: Fri 11 Apr 2025 18:12:38 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: 0hw/qR4Zey3ttO3hkGrnKpe8FCFRoTTRFmavLO2Qlso=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: iNF26PQV2QDxZAqXThwlTn9eA9VPYLTtDdkUTHz7O7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162 Validity Not Before: Apr 4 18:12:38 2025 GMT Not After : Apr 11 18:12:38 2025 GMT Subject: CN=67f02116-4df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:e3:09:3c:ae:8c:f3:f7:7a:4d:b4:0b:30: c1:11:06:1d:25:b7:50:c8:ac:a5:20:64:a0:be:08: 95:8d:42:6d:83:5d:8d:cb:a3:fa:2b:32:1c:60:df: 5b:51:1c:74:cf:c4:22:7e:5e:f5:a8:a9:b2:bf:88: 93:0b:3b:8b:27:17:b8:6c:14:c6:c4:9c:4e:c6:a8: b2:99:03:1d:61:6c:91:e6:e2:83:5d:50:11:f6:ee: 60:07:6f:6b:34:3a:5d:a4:26:17:23:fb:55:7b:e8: 5e:72:7b:6b:23:18:d7:f0:f3:43:c3:83:3e:fe:1a: ee:ee:fd:12:17:bb:0b:f4:da:94:2b:eb:98:10:dd: 54:5d:4d:3b:f8:8d:9f:db:65:0c:ad:b6:fc:36:27: ae:9b:1e:2b:e8:53:62:12:5e:6f:46:50:85:37:01: bf:da:3a:09:15:d7:e9:80:19:f4:aa:81:ad:e9:b1: c2:ab:4f:1a:4c:8f:ad:14:91:98:1a:e2:ef:d8:f7: 5a:09:df:80:45:4c:45:f8:a4:83:17:00:4a:32:c5: 27:e1:01:79:99:89:f8:94:42:fa:c6:cb:88:f0:8a: 22:56:53:18:12:76:26:87:76:7c:40:9b:75:aa:37: 4c:7a:eb:29:58:70:64:1c:11:d1:c9:ac:b2:58:50: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:1C:16:CE:A6:78:6F:37:24:E2:A4:68:FA:54:07:06:6C:C6:76 X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:39:63:fe:86:a8:31:9e:52:62:34:7a:91:f7:97:43:8c:7f: 3b:a7:9a:b5:7f:66:89:34:a6:21:2f:b8:a2:f8:be:a7:b3:86: 3e:79:4c:64:1f:77:d6:2c:c8:59:f2:6d:71:b8:fb:b1:fd:46: a6:55:b7:8a:c4:9f:38:65:fa:94:d6:3e:c4:7f:56:c7:a9:8e: c3:f4:99:dc:96:e1:6a:d1:5a:1d:2c:aa:fd:ac:7f:89:35:dc: 36:ba:fd:6c:a9:20:c0:5a:96:96:e0:59:47:a3:3e:c7:25:8b: 89:42:f8:00:82:9e:3d:26:17:eb:db:2e:6c:63:84:2f:49:62: c3:15:3b:b8:1b:2b:17:ed:cf:85:b7:03:a5:4e:8b:99:f0:36: 69:97:4e:fb:5d:41:3b:59:ef:7e:83:18:3b:eb:22:78:54:74: d9:e6:c6:c1:7f:cc:cd:ae:c3:32:55:29:5f:5b:32:e2:5e:ce: 00:df:0c:73:20:57:59:4c:d7:fb:3c:38:af:02:db:af:f0:40: 19:74:a0:81:7f:ef:19:c6:dc:16:56:80:79:24:b9:33:c7:79: 27:e5:6e:a2:0b:e0:dd:a5:1e:79:c0:5f:8c:46:40:48:a3:c3: 42:23:3c:8c:5d:ae:42:cc:37:a3:34:e9:a8:f3:e6:c7:09:f7: 52:60:66:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjUwNDA0MTgxMjM4WhcNMjUwNDExMTgxMjM4WjAYMRYwFAYD VQQDEw02N2YwMjExNi00ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72HjCTyujPP3ek20CzDBEQYdJbdQyKylIGSgvgiVjUJtg12Ny6P6KzIcYN9b URx0z8Qifl71qKmyv4iTCzuLJxe4bBTGxJxOxqiymQMdYWyR5uKDXVAR9u5gB29r NDpdpCYXI/tVe+hecntrIxjX8PNDw4M+/hru7v0SF7sL9NqUK+uYEN1UXU07+I2f 22UMrbb8Nieumx4r6FNiEl5vRlCFNwG/2joJFdfpgBn0qoGt6bHCq08aTI+tFJGY GuLv2PdaCd+ARUxF+KSDFwBKMsUn4QF5mYn4lEL6xsuI8IoiVlMYEnYmh3Z8QJt1 qjdMeuspWHBkHBHRyayyWFAkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNApHBbO pnhvNyTipGj6VAcGbMZ2MB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3OWP+hqgxnlJiNHqR95dDjH87p5q1f2aJNKYhL7ii+L6ns4Y+eUxk H3fWLMhZ8m1xuPux/UamVbeKxJ84ZfqU1j7Ef1bHqY7D9JncluFq0VodLKr9rH+J Ndw2uv1sqSDAWpaW4FlHoz7HJYuJQvgAgp49Jhfr2y5sY4QvSWLDFTu4GysX7c+F twOlTouZ8DZpl077XUE7We9+gxg76yJ4VHTZ5sbBf8zNrsMyVSlfWzLiXs4A3wxz IFdZTNf7PDivAtuv8EAZdKCBf+8ZxtwWVoB5JLkzx3kn5W6iC+DdpR55wF+MRkBI o8NCIzyMXa5CzDejNOmo8+bHCfdSYGZA -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:14 2025 by rpki-client