$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: M2E7bHXqi7fTSaHmHCRFlh4ArH7Nj1RNedUS0yi8yog= Subject key identifier: 3F:8B:F8:48:06:27:DB:8A:50:30:11:C8:40:7B:4F:39:F6:28:97:95 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 3488 Signing time: Thu 24 Apr 2025 14:25:55 +0000 Manifest this update: Thu 24 Apr 2025 14:25:55 +0000 Manifest next update: Thu 01 May 2025 14:25:55 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: HpcL5XBA4hxEeeYzePDRb7Tou5LSLQMfAsDwWY+UXa0=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: O+j9Zx5sSnGiEmDp3bX6jlKG4hSKXF0a15C+swghh6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Apr 24 14:25:55 2025 GMT Not After : May 1 14:25:55 2025 GMT Subject: CN=680a49f3-47fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:ea:db:9d:93:b3:6a:c5:33:fe:ad:97:91: 28:74:de:f7:6c:11:14:88:74:19:42:40:f7:8c:1f: e9:f0:a3:de:c8:61:03:bf:ba:a3:63:dd:1a:80:08: d3:6d:6d:c0:1f:90:75:c2:a8:9d:5b:c7:74:a1:20: 88:3c:69:21:e9:36:41:9f:30:0e:8e:57:1b:a5:67: df:d3:90:44:6c:85:a7:1a:9a:31:10:95:ff:0a:aa: c2:28:9f:16:99:c5:49:82:43:a3:f4:b9:7d:fb:b8: 37:95:68:5b:46:fc:42:3f:b8:bd:cf:61:4c:c6:52: c1:da:30:04:8c:dc:7c:ac:bc:68:ce:da:e4:5c:87: 3a:75:8a:bb:6d:ff:5a:ba:0c:dc:88:a2:19:83:28: ae:47:42:7e:5e:ae:2e:00:97:de:df:09:c7:8d:94: 78:a8:fc:4c:db:11:bd:8e:7d:d7:f4:9d:14:71:30: 03:96:f8:49:6c:27:12:2c:af:14:38:c8:49:f1:f7: f5:18:03:e6:a0:85:73:fb:b4:5b:ec:61:69:35:ec: 9d:93:b3:22:8b:15:81:46:75:8e:f0:69:51:46:45: 58:db:6f:4f:c5:44:d4:08:f3:b5:2b:2b:c3:d0:b0: b7:3d:75:54:55:2f:09:63:7b:9a:ef:52:ca:bd:d2: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8B:F8:48:06:27:DB:8A:50:30:11:C8:40:7B:4F:39:F6:28:97:95 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:7c:61:5b:d7:d4:24:0e:89:30:61:4d:0b:7a:20:25:8d: 68:07:d4:53:98:a1:1f:aa:de:76:72:2f:22:56:8c:de:08:07: 51:6e:82:ca:ff:96:6e:61:46:33:0c:65:f6:e4:c1:97:3a:b1: 76:0f:fb:45:de:f1:45:7e:aa:40:0b:ed:05:e1:e2:ea:87:dc: 81:c3:d5:c0:07:a8:2d:bf:3f:50:15:b4:47:a7:83:46:4f:2b: 6d:8b:f3:3f:0c:c4:b0:14:af:8b:fd:fd:78:d0:03:45:9b:6d: b8:45:17:01:74:0d:57:87:c8:79:1c:e5:e0:54:ce:24:8d:e6: 4e:48:98:dc:15:35:0d:ff:6f:c6:69:d0:07:68:74:4f:90:68: 91:11:75:61:73:67:da:9e:f6:b8:f3:17:a1:d9:7b:fb:d0:d7: fe:80:79:50:6e:da:6f:45:c9:0a:ac:01:48:8d:f4:a9:f2:63: e3:58:cb:0b:84:0f:5f:d0:cd:16:eb:73:e3:1b:fd:7e:dc:8c: bd:7d:98:9e:3a:f1:c1:46:4b:a4:d0:30:0c:74:27:ec:23:9b: 1f:10:ec:e8:ac:c0:a8:a6:35:07:1b:d4:66:c9:0e:c2:3c:3c: b2:39:11:99:6d:e9:08:8f:62:d7:d8:03:d6:61:04:e7:7b:82: 1f:92:8b:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUwNDI0MTQyNTU1WhcNMjUwNTAxMTQyNTU1WjAYMRYwFAYD VQQDEw02ODBhNDlmMy00N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsTq252Ts2rFM/6tl5EodN73bBEUiHQZQkD3jB/p8KPeyGEDv7qjY90agAjT bW3AH5B1wqidW8d0oSCIPGkh6TZBnzAOjlcbpWff05BEbIWnGpoxEJX/CqrCKJ8W mcVJgkOj9Ll9+7g3lWhbRvxCP7i9z2FMxlLB2jAEjNx8rLxoztrkXIc6dYq7bf9a ugzciKIZgyiuR0J+Xq4uAJfe3wnHjZR4qPxM2xG9jn3X9J0UcTADlvhJbCcSLK8U OMhJ8ff1GAPmoIVz+7Rb7GFpNeydk7MiixWBRnWO8GlRRkVY229PxUTUCPO1KyvD 0LC3PXVUVS8JY3ua71LKvdITpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+L+EgG J9uKUDARyEB7Tzn2KJeVMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD9nxhW9fUJA6JMGFNC3ogJY1oB9RTmKEfqt52ci8iVozeCAdRboLK /5ZuYUYzDGX25MGXOrF2D/tF3vFFfqpAC+0F4eLqh9yBw9XAB6gtvz9QFbRHp4NG Tytti/M/DMSwFK+L/f140ANFm224RRcBdA1Xh8h5HOXgVM4kjeZOSJjcFTUN/2/G adAHaHRPkGiREXVhc2fanva48xeh2Xv70Nf+gHlQbtpvRckKrAFIjfSp8mPjWMsL hA9f0M0W63PjG/1+3Iy9fZieOvHBRkuk0DAMdCfsI5sfEOzorMCopjUHG9RmyQ7C PDyyORGZbekIj2LX2APWYQTne4IfkosZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:49 2025 by rpki-client