$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: kQ7e30xQPMW6ZiMzcv0B+UGkSI/arJN/q50siub0Atk= Subject key identifier: 25:5B:0C:F5:6B:38:50:6C:C7:20:1F:E6:18:83:A4:41:39:F8:6C:55 Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 53 Signing time: Thu 03 Apr 2025 06:29:28 +0000 Manifest this update: Thu 03 Apr 2025 06:29:27 +0000 Manifest next update: Thu 10 Apr 2025 06:29:27 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: CF/d8tuLuzENlnIHbqaG+t2wqFlii9JP2JchH6U1uk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A Validity Not Before: Apr 3 06:29:27 2025 GMT Not After : Apr 10 06:29:27 2025 GMT Subject: CN=67ee2ac7-f5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:d6:69:b1:73:18:f6:42:93:b3:7a:4d:08: d2:87:41:6e:07:fc:ec:5d:fd:a2:8e:99:cb:67:00: 69:88:50:6d:34:e6:a0:13:06:2e:ec:b1:5c:28:c7: 2f:9a:26:1e:b0:ee:8f:1c:f2:8a:e1:1a:3d:52:cb: c2:9f:5b:1f:25:7b:44:68:56:1a:43:1e:12:20:4b: b4:16:16:bd:e1:30:6d:32:6c:49:c3:5d:69:d5:c6: 41:56:bd:8f:81:c8:b7:48:e0:5e:f3:db:51:ca:32: db:ba:30:60:5f:8b:d3:3b:e4:8d:78:3c:96:01:81: 5e:13:84:3a:3d:65:a8:34:be:1e:d8:d4:7d:cf:24: 95:fd:d7:f1:a4:14:8e:7e:73:3e:db:41:93:05:93: a2:29:54:30:6f:3d:40:5b:8d:7a:c9:79:e7:e8:97: d6:9a:59:48:89:c9:72:91:7b:84:e6:ef:09:85:63: f5:ef:9e:6b:4b:84:eb:1d:d3:2c:93:40:ca:67:ce: 42:a4:73:1b:60:e9:3c:8b:4b:7d:15:64:45:79:82: 3f:dd:15:2f:54:08:d1:ac:73:82:d6:6f:b3:38:ad: a5:19:a6:b9:3e:b8:12:01:30:7f:c4:76:eb:35:22: 02:f1:8a:aa:45:e3:b9:e0:1f:82:ce:b7:36:29:50: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:0C:F5:6B:38:50:6C:C7:20:1F:E6:18:83:A4:41:39:F8:6C:55 X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:da:18:f5:ee:1e:c5:ca:46:77:9a:11:62:79:84:31:83:a1: aa:74:69:2e:d1:61:86:ca:80:d0:e3:3a:aa:df:43:d2:3b:25: 2f:6f:b0:eb:61:83:ff:37:34:38:ab:03:b9:18:94:35:fe:e0: 35:8e:33:9c:3d:e4:0f:c0:19:54:09:a9:3a:e1:3c:53:29:1a: bc:26:ee:80:10:c7:32:01:ed:90:b7:6c:d2:cf:2d:62:47:20: 20:1c:ce:8d:d0:48:f0:3f:a1:68:a4:34:76:6e:49:ed:0e:93: 72:42:fd:df:89:98:8d:39:88:ae:d7:58:b0:b1:f0:c0:31:a6: 93:f4:dc:8c:1c:31:3b:b5:19:05:4f:d7:a8:01:05:a3:13:14: 2f:06:e3:be:d7:4a:da:cf:e4:1a:0d:19:2d:f6:d7:87:59:50: 62:82:26:27:5a:cb:c9:fb:85:3b:28:7a:3c:c3:94:9e:74:ca: 90:74:06:c3:71:74:89:f9:82:81:5c:d8:70:bb:60:2f:f7:40: 5a:76:ea:b0:12:fa:83:41:42:97:d5:80:f2:5b:1a:be:94:b2: 9b:ea:8d:61:cb:e4:eb:9e:09:c0:04:23:d1:41:de:5f:12:23: 1a:cc:82:1b:a8:7d:9c:63:54:b6:ee:88:94:1e:6d:53:aa:b2: f7:4e:83:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzIwQTExMC8GA1UEBRMoODYzMkNEMjU2NjlERDg3MjIwMjA0NTE3NDA2RTNGNkIy RjEyOTI1MTAeFw0yNTA0MDMwNjI5MjdaFw0yNTA0MTAwNjI5MjdaMBgxFjAUBgNV BAMTDTY3ZWUyYWM3LWY1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUzNZpsXMY9kKTs3pNCNKHQW4H/Oxd/aKOmctnAGmIUG005qATBi7ssVwoxy+a Jh6w7o8c8orhGj1Sy8KfWx8le0RoVhpDHhIgS7QWFr3hMG0ybEnDXWnVxkFWvY+B yLdI4F7z21HKMtu6MGBfi9M75I14PJYBgV4ThDo9Zag0vh7Y1H3PJJX91/GkFI5+ cz7bQZMFk6IpVDBvPUBbjXrJeefol9aaWUiJyXKRe4Tm7wmFY/XvnmtLhOsd0yyT QMpnzkKkcxtg6TyLS30VZEV5gj/dFS9UCNGsc4LWb7M4raUZprk+uBIBMH/Edus1 IgLxiqpF47ngH4LOtzYpUEihAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJVsM9Ws4 UGzHIB/mGIOkQTn4bFUwHwYDVR0jBBgwFoAUhjLNJWad2HIgIEUXQG4/ay8SklEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjBBLzgwQUFFRDgyOTU3 NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2ts RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGpMTkpXYWQySElnSUVVWFFHNF9heThTa2xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjBBLzgwQUFFRDgyOTU3NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJ Z0lFVVhRRzRfYXk4U2tsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLaGPXuHsXKRneaEWJ5hDGDoap0aS7RYYbKgNDjOqrfQ9I7JS9vsOth g/83NDirA7kYlDX+4DWOM5w95A/AGVQJqTrhPFMpGrwm7oAQxzIB7ZC3bNLPLWJH ICAczo3QSPA/oWikNHZuSe0Ok3JC/d+JmI05iK7XWLCx8MAxppP03IwcMTu1GQVP 16gBBaMTFC8G477XStrP5BoNGS3214dZUGKCJiday8n7hTsoejzDlJ50ypB0BsNx dIn5goFc2HC7YC/3QFp26rAS+oNBQpfVgPJbGr6UspvqjWHL5OueCcAEI9FB3l8S IxrMghuofZxjVLbuiJQebVOqsvdOg68= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:38 2025 by rpki-client