$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: bLxSx255RlH+15z9m3UZ2VDabJR24RyD/FPNL0XeFto= Subject key identifier: D2:64:D0:DF:C9:75:D6:62:DF:FD:E4:A0:20:93:E1:A6:91:B2:90:A8 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01BF Signing time: Fri 25 Apr 2025 02:13:53 +0000 Manifest this update: Fri 25 Apr 2025 02:13:53 +0000 Manifest next update: Fri 02 May 2025 02:13:53 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: yHQQ/RWQWDYrjSvk4fV+BOBF16QYIxHBs0S+mtPBo4I=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Apr 25 02:13:53 2025 GMT Not After : May 2 02:13:53 2025 GMT Subject: CN=680aefe1-8475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:0c:19:d4:5b:f6:6e:24:1a:31:c4:73:f2: 93:74:c7:12:c6:fc:da:73:7b:2a:67:63:52:06:c4: a2:07:15:dc:c1:55:3f:6b:05:41:39:ba:95:b2:b3: 45:aa:59:8a:dd:ef:44:64:bf:0d:7a:b5:c6:77:2e: 53:d6:d1:7b:ea:e0:9a:88:32:de:16:5d:24:b1:e3: 81:77:fa:cf:69:cf:c3:1c:20:6c:3b:6d:e4:bf:df: 31:52:ad:02:9c:b8:d8:67:19:76:78:5e:e2:68:7b: 83:0c:d6:11:9c:d4:67:45:ff:75:ca:0e:11:87:43: bb:4b:9e:32:90:4b:9d:4b:bd:b5:38:73:0e:27:5b: 46:a7:de:5d:b5:a9:f5:47:bc:ff:c2:47:e8:68:87: ea:d5:4e:bd:4b:e5:86:c6:cc:e6:1a:9b:7e:3f:6a: 11:b0:8e:4e:1f:58:66:38:dd:6b:8d:02:43:26:6f: a7:ef:e4:70:4f:65:1b:87:8e:a4:cc:61:8b:55:f9: e4:2e:d8:69:e2:3c:79:d7:75:d1:ee:28:5b:8e:9e: 8a:e6:43:fc:68:6b:88:83:b2:14:31:e2:74:a5:e3: 3b:5f:ec:2a:f4:94:80:d1:9a:b5:7c:77:f5:ad:04: c3:16:c0:19:9b:42:0c:fa:05:f9:24:68:40:0b:09: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:64:D0:DF:C9:75:D6:62:DF:FD:E4:A0:20:93:E1:A6:91:B2:90:A8 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:c3:7f:4b:8b:de:cc:a7:d3:d1:95:ef:b6:2f:f5:2e:34: 2d:34:c0:e7:24:be:ff:df:28:8d:ff:69:4b:8f:c2:89:cf:6d: b5:23:08:6a:d4:56:97:dd:ae:e8:3a:c2:a1:3f:70:bd:e1:9e: e7:1f:5d:23:0f:08:c3:86:53:0e:84:52:6b:a6:7d:93:ae:ac: a1:4d:03:97:75:b6:d4:3d:e1:a0:cc:8c:42:63:b3:a5:09:65: db:33:30:c6:75:1c:d3:7d:7d:95:8e:e2:de:41:96:e5:bb:31: 6f:52:a9:65:8c:10:1b:a7:e7:e1:98:2b:48:c7:e5:26:8b:93: 07:c7:e0:e1:f7:e7:f7:2c:6b:78:fd:24:a3:4e:a2:99:34:c2: df:c2:68:0b:4c:40:63:ed:67:23:ca:35:3e:6b:a8:79:9f:4b: db:63:9b:8b:47:a2:b2:2b:65:d1:48:07:d2:38:58:7d:1f:67: ee:10:dc:46:e9:cc:0e:49:da:2c:2b:aa:8e:d9:33:a0:af:89: f7:ef:d4:2c:4c:3b:fe:28:07:22:6e:b8:38:22:90:b5:41:0e: dc:6b:83:62:aa:42:78:91:2a:d7:ce:a9:47:18:fa:2b:2b:0a: 53:90:35:db:82:d1:80:df:57:a2:22:58:0e:f5:f2:f9:3c:2b: 7a:71:63:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwNDI1MDIxMzUzWhcNMjUwNTAyMDIxMzUzWjAYMRYwFAYD VQQDEw02ODBhZWZlMS04NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3wMGdRb9m4kGjHEc/KTdMcSxvzac3sqZ2NSBsSiBxXcwVU/awVBObqVsrNF qlmK3e9EZL8NerXGdy5T1tF76uCaiDLeFl0kseOBd/rPac/DHCBsO23kv98xUq0C nLjYZxl2eF7iaHuDDNYRnNRnRf91yg4Rh0O7S54ykEudS721OHMOJ1tGp95dtan1 R7z/wkfoaIfq1U69S+WGxszmGpt+P2oRsI5OH1hmON1rjQJDJm+n7+RwT2Ubh46k zGGLVfnkLthp4jx513XR7ihbjp6K5kP8aGuIg7IUMeJ0peM7X+wq9JSA0Zq1fHf1 rQTDFsAZm0IM+gX5JGhACwmuZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJk0N/J ddZi3/3koCCT4aaRspCoMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV/MN/S4vezKfT0ZXvti/1LjQtNMDnJL7/3yiN/2lLj8KJz221Iwhq 1FaX3a7oOsKhP3C94Z7nH10jDwjDhlMOhFJrpn2TrqyhTQOXdbbUPeGgzIxCY7Ol CWXbMzDGdRzTfX2VjuLeQZbluzFvUqlljBAbp+fhmCtIx+Umi5MHx+Dh9+f3LGt4 /SSjTqKZNMLfwmgLTEBj7WcjyjU+a6h5n0vbY5uLR6KyK2XRSAfSOFh9H2fuENxG 6cwOSdosK6qO2TOgr4n379QsTDv+KAcibrg4IpC1QQ7ca4NiqkJ4kSrXzqlHGPor KwpTkDXbgtGA31eiIlgO9fL5PCt6cWO9 -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:34 2025 by rpki-client