$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: TXg8fy6KVBjq10l6HYpcplB7UkInm0/KcHNXquOJdwQ= Subject key identifier: 32:D3:C2:9B:02:FB:02:EA:C7:8F:32:D4:04:CE:CA:5B:A3:4B:30:36 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 0417 Signing time: Mon 21 Apr 2025 00:03:36 +0000 Manifest this update: Mon 21 Apr 2025 00:03:36 +0000 Manifest next update: Mon 28 Apr 2025 00:03:36 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: rCRh0MRwCwXTJIix+mYCedXhr3ED0E/htyQuZWInG8c=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Apr 21 00:03:36 2025 GMT Not After : Apr 28 00:03:36 2025 GMT Subject: CN=68058b58-02d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d3:3f:d6:cd:d0:67:61:47:bd:d2:2f:40:ed: eb:44:61:b9:c9:02:ad:78:14:be:9d:a8:7f:4e:33: ca:89:47:48:fa:bb:cc:0b:47:ae:47:8e:87:f6:a5: 58:04:a6:ff:a1:58:a5:1b:41:7f:37:07:a0:b4:dc: d8:d8:d6:d8:c6:b2:3f:d1:67:c2:c8:66:ed:15:8b: a6:c4:19:43:b1:50:86:2e:dd:c3:48:57:08:29:90: 30:aa:ce:5c:4d:fd:49:c3:d4:31:d0:6c:d8:f4:cc: f3:53:58:ac:9d:01:fa:6e:63:06:14:31:c0:a6:50: 18:b4:82:e2:20:3a:06:99:0f:98:0a:15:21:01:db: ff:2b:dc:4d:26:81:83:9b:ac:d7:bf:91:b5:81:63: 6b:f0:8f:dd:89:4c:43:c5:27:b0:7d:90:75:de:ac: 31:a7:50:8d:be:2f:a4:d0:62:1d:f2:4e:2f:b6:2a: a3:4f:d0:a7:2a:b5:f1:a3:84:da:57:3e:72:ee:8f: 2d:ed:0c:d5:fc:73:bb:49:01:4f:3c:83:3d:62:15: 42:24:54:da:0b:c7:4e:85:f2:75:30:38:c9:37:94: 1f:80:82:f9:e1:c3:ed:4d:2a:87:03:0f:9b:6b:e2: 4a:21:67:2e:9c:fa:22:b2:85:6d:66:19:7d:6b:e0: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D3:C2:9B:02:FB:02:EA:C7:8F:32:D4:04:CE:CA:5B:A3:4B:30:36 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:29:3c:f6:7e:ea:62:2d:85:64:18:81:4d:c1:3b:09:db:6a: df:31:91:68:ea:16:9d:6a:9b:a0:0c:c9:39:bf:e9:3c:d9:9b: b5:c8:ad:c2:a6:38:df:84:26:67:29:f5:fb:8a:8e:4b:09:3b: 8a:fe:f9:7a:2b:e8:8c:7b:cf:07:de:9e:0a:03:03:04:67:99: da:b6:99:ea:58:9f:85:27:b5:e9:cf:34:0f:d2:a1:99:69:44: cc:cc:66:2d:4d:30:90:f8:4b:4f:30:b3:f6:7f:85:7f:d9:63: 56:bb:ec:3a:6f:3c:86:93:7d:e7:bd:c1:9b:2d:0e:2b:77:73: 6d:8b:3b:ef:94:47:1b:50:5b:9d:6a:d1:69:c6:bf:f8:2a:32: 45:d1:22:1e:85:92:37:8c:1e:75:99:82:1b:79:25:62:d1:e0: 34:c1:04:eb:31:9f:35:16:1b:41:9c:de:71:b7:71:b3:77:e2: b9:dd:c6:5a:52:01:bb:5c:7a:72:1c:bc:36:d0:a1:24:b4:27: c2:71:26:bb:c4:13:5f:b7:88:a6:79:6b:9d:d2:95:ae:ae:0f: 0f:68:08:af:97:cd:0a:a3:f6:63:fb:c5:d6:49:58:0f:20:0a: aa:31:97:12:06:ca:32:39:c0:9c:de:0c:71:86:f7:d8:17:26: c6:fc:40:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUwNDIxMDAwMzM2WhcNMjUwNDI4MDAwMzM2WjAYMRYwFAYD VQQDEw02ODA1OGI1OC0wMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39M/1s3QZ2FHvdIvQO3rRGG5yQKteBS+nah/TjPKiUdI+rvMC0euR46H9qVY BKb/oVilG0F/NwegtNzY2NbYxrI/0WfCyGbtFYumxBlDsVCGLt3DSFcIKZAwqs5c Tf1Jw9Qx0GzY9MzzU1isnQH6bmMGFDHAplAYtILiIDoGmQ+YChUhAdv/K9xNJoGD m6zXv5G1gWNr8I/diUxDxSewfZB13qwxp1CNvi+k0GId8k4vtiqjT9CnKrXxo4Ta Vz5y7o8t7QzV/HO7SQFPPIM9YhVCJFTaC8dOhfJ1MDjJN5QfgIL54cPtTSqHAw+b a+JKIWcunPoisoVtZhl9a+DKmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLTwpsC +wLqx48y1ATOylujSzA2MB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTKTz2fupiLYVkGIFNwTsJ22rfMZFo6hadapugDMk5v+k82Zu1yK3C pjjfhCZnKfX7io5LCTuK/vl6K+iMe88H3p4KAwMEZ5natpnqWJ+FJ7XpzzQP0qGZ aUTMzGYtTTCQ+EtPMLP2f4V/2WNWu+w6bzyGk33nvcGbLQ4rd3NtizvvlEcbUFud atFpxr/4KjJF0SIehZI3jB51mYIbeSVi0eA0wQTrMZ81FhtBnN5xt3Gzd+K53cZa UgG7XHpyHLw20KEktCfCcSa7xBNft4imeWud0pWurg8PaAivl80Ko/Zj+8XWSVgP IAqqMZcSBsoyOcCc3gxxhvfYFybG/EA/ -----END CERTIFICATE-----Generated at Tue Apr 22 13:49:28 2025 by rpki-client