$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: XDbWZb5dh0dwSY8WyNtJqnOjtFRIs2FLq0KrKeIiJq0= Subject key identifier: F4:56:55:9E:6B:7D:30:CD:2C:AD:CC:49:03:31:86:B9:5A:73:01:7E Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 048E Signing time: Thu 03 Apr 2025 00:01:15 +0000 Manifest this update: Thu 03 Apr 2025 00:01:15 +0000 Manifest next update: Thu 10 Apr 2025 00:01:15 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: hMtYnmpF97xVunJkc+SfTY6lsb6YPfEBKR5IJjajTU0=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: Do6OgnR2E8Iy4DGGhWcszr7SeA/TupAI+DlFPIrWpNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3 Validity Not Before: Apr 3 00:01:15 2025 GMT Not After : Apr 10 00:01:15 2025 GMT Subject: CN=67edcfcb-7963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:76:c8:30:77:70:8c:68:e9:26:e0:fa:13: bb:f5:b5:1e:0a:7a:a0:48:67:bf:d6:63:d0:5a:01: fa:e7:2f:45:7e:b7:be:f8:c0:c7:12:3d:fc:b1:b0: d8:00:f0:63:ca:a8:56:ff:87:f8:22:96:e5:31:75: 83:1b:ba:fa:a0:ec:b0:2d:de:7d:f1:e0:ef:ee:d2: d7:e2:ea:a0:c2:02:4e:96:c8:ca:1b:68:2b:14:60: 18:63:9f:8d:85:d4:84:fd:6c:45:e1:1c:65:f6:a1: 58:d5:5c:f3:d7:40:fb:cf:41:ad:7d:9d:ed:84:ec: 66:1f:81:b8:f4:17:6a:59:7f:d7:61:a5:ff:e1:ad: a1:ff:f8:b5:d4:4f:ed:69:94:05:b5:b6:1d:bb:ac: 07:76:73:4a:61:09:c7:20:b2:34:7f:5d:cb:e1:06: 25:5e:0d:bf:17:f9:cd:b4:43:8c:c9:03:3b:32:9b: 7f:e1:ad:ed:1d:b0:78:41:16:a8:9f:31:13:4c:cd: 44:a5:92:ab:c5:46:ac:31:13:5a:ec:d3:b9:43:1b: 3f:e2:5f:5e:61:22:63:bf:ac:f9:10:a7:a1:ef:83: 21:39:17:08:ef:27:30:66:30:e0:a7:f3:32:a1:79: 77:05:c7:7a:01:32:d9:eb:03:74:0a:12:66:96:9f: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:56:55:9E:6B:7D:30:CD:2C:AD:CC:49:03:31:86:B9:5A:73:01:7E X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a6:5c:47:43:53:c0:1e:fa:fd:a7:a4:31:9b:3a:74:48:d3: d9:06:98:4a:74:60:2e:82:11:aa:93:59:ba:1d:a7:83:0e:ca: 59:ab:28:f6:ea:61:e0:fe:c6:e4:6a:b9:d1:bb:dd:eb:58:3f: 6f:b1:07:b1:e0:c4:aa:b4:8e:29:7e:20:52:58:68:b1:78:bb: 44:b5:52:05:4c:5a:e7:6e:bc:8e:7b:ab:df:23:cd:67:14:93: 1d:05:80:10:80:37:7d:4c:40:26:a9:7e:ee:d6:71:f2:d2:11: ce:1e:da:da:45:df:3c:67:36:eb:1a:d8:ff:45:52:e3:1b:29: 80:14:53:4d:69:49:e4:f9:02:0d:fe:f8:72:30:be:7c:de:03: 16:52:a1:f9:82:7d:d4:29:ff:a7:d6:51:64:a8:b6:a1:c7:47: 76:f8:ac:00:44:2e:5c:e4:4a:72:ff:f5:81:47:ae:7b:1b:c7: 39:21:57:7e:5e:da:7f:51:86:47:ca:c2:31:28:db:ff:e7:c5: fb:bb:c8:98:8e:b9:0b:5a:91:72:86:b0:3e:87:79:ed:5a:73: d6:2b:22:94:ee:22:b6:27:d2:e7:84:50:d5:3b:a5:16:fa:f3: 4e:e1:77:3d:3f:db:5b:4d:b5:b7:98:6a:f7:b6:07:53:f4:2c: 1c:9e:d1:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjUwNDAzMDAwMTE1WhcNMjUwNDEwMDAwMTE1WjAYMRYwFAYD VQQDEw02N2VkY2ZjYi03OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxh2yDB3cIxo6Sbg+hO79bUeCnqgSGe/1mPQWgH65y9Ffre++MDHEj38sbDY APBjyqhW/4f4IpblMXWDG7r6oOywLd598eDv7tLX4uqgwgJOlsjKG2grFGAYY5+N hdSE/WxF4Rxl9qFY1Vzz10D7z0GtfZ3thOxmH4G49BdqWX/XYaX/4a2h//i11E/t aZQFtbYdu6wHdnNKYQnHILI0f13L4QYlXg2/F/nNtEOMyQM7Mpt/4a3tHbB4QRao nzETTM1EpZKrxUasMRNa7NO5Qxs/4l9eYSJjv6z5EKeh74MhORcI7ycwZjDgp/My oXl3Bcd6ATLZ6wN0ChJmlp/rKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRWVZ5r fTDNLK3MSQMxhrlacwF+MB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoplxHQ1PAHvr9p6Qxmzp0SNPZBphKdGAughGqk1m6HaeDDspZqyj2 6mHg/sbkarnRu93rWD9vsQex4MSqtI4pfiBSWGixeLtEtVIFTFrnbryOe6vfI81n FJMdBYAQgDd9TEAmqX7u1nHy0hHOHtraRd88ZzbrGtj/RVLjGymAFFNNaUnk+QIN /vhyML583gMWUqH5gn3UKf+n1lFkqLahx0d2+KwARC5c5Epy//WBR657G8c5IVd+ Xtp/UYZHysIxKNv/58X7u8iYjrkLWpFyhrA+h3ntWnPWKyKU7iK2J9LnhFDVO6UW +vNO4Xc9P9tbTbW3mGr3tgdT9CwcntHi -----END CERTIFICATE-----Generated at Fri Apr 4 21:21:41 2025 by rpki-client