$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: LxiFfDX8dRUS4xq1hfVn9cyon5j9CPJ0sj8GFVCoYQE= Subject key identifier: BF:A7:DE:93:BB:48:BB:00:9E:C5:B8:10:94:6E:DE:6F:46:9F:0F:D0 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 038C Signing time: Fri 25 Apr 2025 00:34:43 +0000 Manifest this update: Fri 25 Apr 2025 00:34:43 +0000 Manifest next update: Fri 02 May 2025 00:34:43 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: rCpPa9eRw+sAi+E4hQ0ObAgxNfHtPgK/PsaChQj13f4=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Apr 25 00:34:43 2025 GMT Not After : May 2 00:34:43 2025 GMT Subject: CN=680ad8a3-984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:46:a5:6b:c4:8f:ef:4e:f3:00:eb:97:e0:58: 96:15:2a:a6:86:bf:6d:fb:95:ed:1a:dc:0e:5a:7c: 44:4a:b9:8c:f6:5e:81:9e:4a:eb:17:e7:69:c4:37: 28:ee:18:5a:ce:67:20:cd:b8:ab:f0:93:95:0a:ce: 53:9d:c2:64:21:b3:28:bd:af:63:83:fd:35:2d:7d: 44:f9:38:75:0a:bf:12:9c:31:01:98:65:ea:16:33: f7:b7:f8:b7:01:28:a9:ec:39:3a:db:5e:b3:d5:a1: 1d:50:dd:a7:09:97:73:11:22:c8:04:9e:6a:42:2d: c8:17:86:69:2f:af:ef:82:35:21:ac:6e:9f:12:a7: 5d:57:60:81:d7:83:bc:f7:11:d3:6d:03:f2:c7:da: 6e:11:65:7f:14:d0:ed:bf:d0:a6:7e:5b:59:3b:bf: a8:be:0f:99:a8:08:80:d6:5b:b0:bb:d9:5f:1f:ea: c2:2b:b9:93:5d:26:11:18:4c:54:31:6d:e2:30:f9: 7e:b9:62:1e:8c:f9:da:20:1d:56:a0:25:bd:21:2f: 03:87:76:df:60:29:b6:38:f9:6a:b1:3d:ac:ec:94: 0d:de:dc:3a:8d:79:f4:1b:fc:a0:e8:a6:8a:c8:8e: e8:48:76:36:d1:4a:ff:6b:ac:78:1a:aa:d1:11:e6: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:DE:93:BB:48:BB:00:9E:C5:B8:10:94:6E:DE:6F:46:9F:0F:D0 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:dd:4c:23:d6:89:23:54:5f:2a:82:7b:82:a3:40:18:da:51: 57:40:3e:2a:97:81:01:ad:c5:3f:f4:c6:77:6a:8b:94:f5:98: 65:ed:86:31:99:51:34:f3:9d:4c:1c:5f:49:d5:07:0b:3b:4b: 5b:16:ee:25:96:f2:cc:19:1f:b2:7c:bf:98:3c:98:ba:67:3c: 61:75:ea:3c:12:d1:5c:89:33:98:0a:87:75:f7:68:54:f6:3a: 16:38:9e:1c:fd:ac:a4:ec:c8:5d:c5:94:28:39:91:d2:e1:92: 09:98:ab:9e:79:77:cd:84:89:50:bb:53:8e:72:b8:63:1a:89: cb:f6:af:ca:65:22:71:b8:7b:cf:ca:61:b6:aa:22:7c:a8:31: c6:37:da:fd:10:f7:cc:56:88:82:3c:17:41:7d:d2:2a:c7:a8: ae:59:c2:a9:44:87:49:93:4c:b4:ee:36:74:73:e0:d7:d2:57: 6b:03:eb:7e:f2:f3:e5:82:26:e4:fc:79:d3:28:79:2d:7b:5e: e8:2f:f0:54:14:12:2e:56:6a:0d:b2:38:6e:50:82:87:09:ba: f0:ad:cb:9e:3b:72:ba:2b:9d:0a:1b:78:dd:23:4a:32:ea:05: c3:e7:aa:7a:0e:9d:0a:6b:30:c8:c7:66:ff:a6:74:a7:cc:c3: c3:fb:00:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUwNDI1MDAzNDQzWhcNMjUwNTAyMDAzNDQzWjAYMRYwFAYD VQQDEw02ODBhZDhhMy05ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80ala8SP707zAOuX4FiWFSqmhr9t+5XtGtwOWnxESrmM9l6BnkrrF+dpxDco 7hhazmcgzbir8JOVCs5TncJkIbMova9jg/01LX1E+Th1Cr8SnDEBmGXqFjP3t/i3 ASip7Dk6216z1aEdUN2nCZdzESLIBJ5qQi3IF4ZpL6/vgjUhrG6fEqddV2CB14O8 9xHTbQPyx9puEWV/FNDtv9CmfltZO7+ovg+ZqAiA1luwu9lfH+rCK7mTXSYRGExU MW3iMPl+uWIejPnaIB1WoCW9IS8Dh3bfYCm2OPlqsT2s7JQN3tw6jXn0G/yg6KaK yI7oSHY20Ur/a6x4GqrREebqlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+n3pO7 SLsAnsW4EJRu3m9Gnw/QMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ3Uwj1okjVF8qgnuCo0AY2lFXQD4ql4EBrcU/9MZ3aouU9Zhl7YYx mVE0851MHF9J1QcLO0tbFu4llvLMGR+yfL+YPJi6Zzxhdeo8EtFciTOYCod192hU 9joWOJ4c/ayk7MhdxZQoOZHS4ZIJmKueeXfNhIlQu1OOcrhjGonL9q/KZSJxuHvP ymG2qiJ8qDHGN9r9EPfMVoiCPBdBfdIqx6iuWcKpRIdJk0y07jZ0c+DX0ldrA+t+ 8vPlgibk/HnTKHkte17oL/BUFBIuVmoNsjhuUIKHCbrwrcueO3K6K50KG3jdI0oy 6gXD56p6Dp0KazDIx2b/pnSnzMPD+wDt -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:46 2025 by rpki-client