$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: Xg0hklZxj4/QLFdd/9Bab9FRf/aoR2n7PXMpzMMWZIQ= Subject key identifier: 2C:2A:82:1D:97:FE:F7:D6:8E:EB:2A:02:F0:91:C2:63:CF:4E:71:A7 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 10 Signing time: Wed 05 Feb 2025 06:28:29 +0000 Manifest this update: Wed 05 Feb 2025 06:28:28 +0000 Manifest next update: Wed 12 Feb 2025 06:28:28 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: T0RGYDOKIiI6np6lyh9zM99eer2/r2hHHPFC+5pUUAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578 Validity Not Before: Feb 5 06:28:28 2025 GMT Not After : Feb 12 06:28:28 2025 GMT Subject: CN=67a3050c-d55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:55:69:cb:fa:6d:15:76:aa:e9:0c:ec:b6: d3:8b:14:81:75:ff:24:39:44:b6:bf:2e:d5:4e:e0: 19:37:06:d5:99:4c:2e:08:af:32:a6:28:7a:98:8f: a1:73:38:3b:2e:e5:3e:39:12:33:5f:60:87:2c:57: c6:41:ee:d1:d6:85:fe:ef:95:32:3f:28:69:a8:09: 55:72:78:dc:1b:84:46:6d:33:fe:a7:94:02:94:ef: a8:71:98:3a:09:fc:68:ae:1a:db:43:98:3f:58:2b: 70:8f:14:88:36:2c:db:b3:88:8f:05:d7:34:97:bc: b8:d3:bf:c8:67:68:a7:97:db:47:db:86:97:38:b9: 61:4e:26:5d:a8:74:80:9e:13:4f:37:b3:54:ba:97: bd:85:cc:12:a7:c5:d3:4b:30:08:2f:fa:59:58:cd: 6c:3a:0c:67:80:72:08:27:fd:a2:df:ed:c9:f3:13: 04:83:78:54:21:f9:91:31:0e:61:1e:e9:d6:fb:f2: 5f:18:df:9a:b2:3b:a3:2a:ac:35:86:8b:2a:8b:a9: c4:ce:cf:33:a8:17:62:52:d8:1f:fa:90:76:38:a5: 3e:2c:5f:92:50:8b:88:12:b9:aa:90:10:2f:5e:a8: 4e:f3:a9:dd:5f:48:19:70:e1:7b:fc:0b:1f:4f:3c: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2A:82:1D:97:FE:F7:D6:8E:EB:2A:02:F0:91:C2:63:CF:4E:71:A7 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:dc:b6:53:4e:18:ee:71:48:05:16:f2:8e:21:0f:6d:0f:ea: 13:a2:69:e7:25:68:87:b6:6a:1a:8a:4a:2b:33:b5:d1:a5:74: 93:01:51:35:70:ea:13:00:d3:be:9a:60:18:33:20:30:fc:60: 48:32:11:06:17:11:d5:b2:63:60:b5:12:7e:a0:9b:7e:aa:ff: 45:2c:8e:bc:4e:93:4e:d1:c2:0a:c9:36:d4:1b:a6:41:0e:a4: 1f:12:19:06:43:c9:1c:04:56:90:cd:1e:47:91:3f:bb:39:ef: 89:6d:43:6d:15:8f:61:ef:fd:e8:b6:b7:87:c7:29:22:d2:4e: 36:b4:22:05:23:7b:77:95:76:b6:45:d2:7a:ea:86:c1:dc:9d: 2c:1a:a0:2b:ae:bd:cd:63:81:1f:49:c0:3d:c7:8e:43:c2:b8: 09:64:a4:3c:0f:b0:44:a2:3c:ee:ee:be:0a:93:ac:49:ad:16: 56:a7:43:b0:24:0f:11:15:8c:d3:64:54:7f:87:b6:2a:5f:72: 7f:c0:57:be:ca:e0:58:eb:5b:4d:3a:8e:8c:52:ec:ed:45:13: e2:9b:aa:c6:2d:12:ec:45:db:fb:8f:cb:18:e2:d6:a7:5c:7e: 8a:d1:bb:38:6f:14:ef:e3:5b:f5:de:91:1d:bd:10:cf:27:5c: e4:61:c4:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUU5QjBEMTYzQ0UwQUExMUU5MUQ1NTYwRjVBM0NDNjY5 RTMyOTFFRjAeFw0yNTAyMDUwNjI4MjhaFw0yNTAyMTIwNjI4MjhaMBgxFjAUBgNV BAMTDTY3YTMwNTBjLWQ1NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu6lVpy/ptFXaq6QzsttOLFIF1/yQ5RLa/LtVO4Bk3BtWZTC4IrzKmKHqYj6Fz ODsu5T45EjNfYIcsV8ZB7tHWhf7vlTI/KGmoCVVyeNwbhEZtM/6nlAKU76hxmDoJ /GiuGttDmD9YK3CPFIg2LNuziI8F1zSXvLjTv8hnaKeX20fbhpc4uWFOJl2odICe E083s1S6l72FzBKnxdNLMAgv+llYzWw6DGeAcggn/aLf7cnzEwSDeFQh+ZExDmEe 6db78l8Y35qyO6MqrDWGiyqLqcTOzzOoF2JS2B/6kHY4pT4sX5JQi4gSuaqQEC9e qE7zqd1fSBlw4Xv8Cx9PPFmXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULCqCHZf+ 99aO6yoC8JHCY89OcacwHwYDVR0jBBgwFoAUHpsNFjzgqhHpHVVg9aPMZp4yke8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzA5NTMwQThDQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtl OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHBzTkZqemdxaEhwSFZWZzlhUE1acDR5a2U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzA5NTMwQThDQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhI cEhWVmc5YVBNWnA0eWtlOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfctlNOGO5xSAUW8o4hD20P6hOiaeclaIe2ahqKSisztdGldJMBUTVw 6hMA076aYBgzIDD8YEgyEQYXEdWyY2C1En6gm36q/0UsjrxOk07RwgrJNtQbpkEO pB8SGQZDyRwEVpDNHkeRP7s574ltQ20Vj2Hv/ei2t4fHKSLSTja0IgUje3eVdrZF 0nrqhsHcnSwaoCuuvc1jgR9JwD3HjkPCuAlkpDwPsESiPO7uvgqTrEmtFlanQ7Ak DxEVjNNkVH+Htipfcn/AV77K4FjrW006joxS7O1FE+KbqsYtEuxF2/uPyxji1qdc forRuzhvFO/jW/XekR29EM8nXORhxPU= -----END CERTIFICATE-----Generated at Thu Feb 6 03:51:43 2025 by rpki-client