$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: CLk4u072iAG5vTJIRdeTt+8AG0IqAp47tbKk4kp+LVE= Subject key identifier: 73:45:EB:81:E6:3F:AA:14:5A:88:D1:5D:E0:7C:BD:24:F7:3D:0B:38 Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 4B Signing time: Sat 31 May 2025 06:51:54 +0000 Manifest this update: Sat 31 May 2025 06:51:53 +0000 Manifest next update: Sat 07 Jun 2025 06:51:53 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: eB/1zqdTVpkumAWiZczYH/LoYsExrT12iSxRQ6pyTRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: May 31 06:51:53 2025 GMT Not After : Jun 7 06:51:53 2025 GMT Subject: CN=683aa709-ba8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:2e:c5:61:89:32:eb:4c:8f:0f:0b:aa:c1: 6a:0b:30:47:a1:c4:cc:34:97:be:11:48:45:0e:ed: 96:c4:8a:75:2b:3c:e2:b8:36:06:58:46:ef:ea:e5: 68:c0:cc:2b:2d:37:18:f9:fa:37:5c:8f:5a:a6:3d: 85:b8:06:7b:99:6c:82:e8:cf:e0:18:7a:d0:c5:15: 87:1f:7d:ea:77:6e:ae:18:00:e9:fd:b4:24:ec:3b: 05:3f:ee:75:67:b4:b0:e1:b1:e2:f4:36:ef:59:02: d8:95:47:92:1d:8f:36:11:e3:19:fe:59:8a:da:18: 90:73:95:74:c5:bc:83:7c:0b:1d:4e:03:01:9c:a4: 8e:44:fc:13:b4:5b:ca:1e:18:0d:c1:b4:5e:0d:ab: 75:39:34:06:99:d3:7c:a9:29:b9:8c:c9:1b:85:65: 82:30:eb:bf:7d:46:bf:d2:3c:88:44:5b:89:72:1b: d7:3a:1c:a0:24:1d:c4:f3:03:8f:4d:3d:40:25:ab: 1e:95:36:69:77:df:ec:b8:8b:53:02:8a:c1:4f:93: 91:9c:17:d8:d1:d8:61:e1:b1:db:31:4e:62:19:7c: fa:6e:b8:01:e3:d1:d5:b7:ba:2d:69:3b:5d:63:fb: 8a:0b:5b:65:22:54:a1:60:75:b4:3e:98:6f:a7:3e: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:45:EB:81:E6:3F:AA:14:5A:88:D1:5D:E0:7C:BD:24:F7:3D:0B:38 X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:41:24:8b:50:d3:50:b5:1c:1e:f3:59:3d:5a:4a:e8:8f:ed: fe:44:c3:98:53:2c:ac:63:ba:68:ce:9a:c4:3d:a2:00:5c:d5: b8:b9:4b:78:cc:ad:22:b4:a0:63:2b:21:82:ce:b7:a5:0e:42: 7c:1c:f6:79:2d:e1:8b:29:91:58:8a:25:00:a6:c6:bc:a9:29: dd:e3:d7:2b:f8:2c:4b:8b:f7:2e:92:a1:f4:e9:65:a4:4a:6b: b5:e0:51:da:f4:2f:bb:20:f1:9a:80:09:80:f6:90:c4:81:f2: df:34:eb:f5:be:c2:e3:61:66:e5:57:13:72:71:e8:16:53:f0: b8:91:ae:fb:8b:21:1b:65:82:fb:81:87:ac:0f:59:22:f5:de: 32:c4:08:8f:a7:d8:b6:24:45:90:75:a2:47:84:7f:a7:0e:79: 1f:44:37:b0:bc:3c:82:56:78:04:1a:f2:a2:89:aa:5e:8e:29: 40:77:89:e7:67:74:76:56:45:0d:9f:a1:79:0f:c7:3f:24:ed: 73:d7:08:31:bb:f9:5a:a9:a1:ff:5b:1d:d2:72:61:c1:f4:77: d2:2c:93:ef:d7:5f:55:5a:a9:b8:35:72:9b:b8:fe:a5:73:a3: 1b:6c:48:c5:6b:50:54:b6:64:d8:d2:c0:84:f8:0f:ba:be:1c: f6:23:55:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoODVDNTY3MjU5MTAzRDlFMjI5MkU2NERCRkI3OUZEMzlC MjU2RkRFNDAeFw0yNTA1MzEwNjUxNTNaFw0yNTA2MDcwNjUxNTNaMBgxFjAUBgNV BAMTDTY4M2FhNzA5LWJhOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2mC7FYYky60yPDwuqwWoLMEehxMw0l74RSEUO7ZbEinUrPOK4NgZYRu/q5WjA zCstNxj5+jdcj1qmPYW4BnuZbILoz+AYetDFFYcffep3bq4YAOn9tCTsOwU/7nVn tLDhseL0Nu9ZAtiVR5IdjzYR4xn+WYraGJBzlXTFvIN8Cx1OAwGcpI5E/BO0W8oe GA3BtF4Nq3U5NAaZ03ypKbmMyRuFZYIw6799Rr/SPIhEW4lyG9c6HKAkHcTzA49N PUAlqx6VNml33+y4i1MCisFPk5GcF9jR2GHhsdsxTmIZfPpuuAHj0dW3ui1pO11j +4oLW2UiVKFgdbQ+mG+nPsjTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc0XrgeY/ qhRaiNFd4Hy9JPc9CzgwHwYDVR0jBBgwFoAUhcVnJZED2eIpLmTb+3n9ObJW/eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzU4M0ZGQzk0Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19l US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNWbkpaRUQyZUlwTG1UYi0zbjlPYkpXX2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzU4M0ZGQzk0Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJ cExtVGItM245T2JKV19lUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1BJItQ01C1HB7zWT1aSuiP7f5Ew5hTLKxjumjOmsQ9ogBc1bi5S3jM rSK0oGMrIYLOt6UOQnwc9nkt4YspkViKJQCmxrypKd3j1yv4LEuL9y6SofTpZaRK a7XgUdr0L7sg8ZqACYD2kMSB8t806/W+wuNhZuVXE3Jx6BZT8LiRrvuLIRtlgvuB h6wPWSL13jLECI+n2LYkRZB1okeEf6cOeR9EN7C8PIJWeAQa8qKJql6OKUB3iedn dHZWRQ2foXkPxz8k7XPXCDG7+Vqpof9bHdJyYcH0d9Isk+/XX1Vaqbg1cpu4/qVz oxtsSMVrUFS2ZNjSwIT4D7q+HPYjVbw= -----END CERTIFICATE-----Generated at Sat May 31 17:12:52 2025 by rpki-client