$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: uwykg/AGrSPyWFCVN/E2bXSCzlbp8ezI0vxU/fYcfWg= Subject key identifier: 67:71:BC:44:40:D0:9B:22:B3:20:A5:22:FB:9C:F1:B9:2A:14:05:56 Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 010A Signing time: Fri 25 Apr 2025 04:06:50 +0000 Manifest this update: Fri 25 Apr 2025 04:06:50 +0000 Manifest next update: Fri 02 May 2025 04:06:50 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: Vakt/Bt+nfaYbWzjtZjuGPqbbNdk4dqy3+BP/dj07iY=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Apr 25 04:06:50 2025 GMT Not After : May 2 04:06:50 2025 GMT Subject: CN=680b0a5a-eb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:a0:5a:f8:63:62:a7:25:c2:8b:e4:a7:d4: c7:da:0c:8f:21:87:c6:86:4b:0d:eb:32:9a:b2:e2: f6:a8:66:07:20:31:f5:54:78:f1:12:7b:3d:a2:bd: 6d:8c:09:fe:4a:95:49:8e:3d:15:07:5b:9a:4b:0e: 23:10:c0:83:05:b8:9e:44:22:56:a6:d9:7a:55:8b: 32:73:a1:05:7e:9a:7d:b2:d8:b0:7f:cd:4e:6e:2e: 31:de:87:c2:ab:82:87:31:fe:d8:e1:a2:93:e6:6f: 50:36:fc:c6:0d:9c:bc:e0:fe:4f:b7:d0:60:3a:5f: 27:06:e9:a5:41:55:81:f6:e5:26:03:84:bb:f0:d6: 0c:b7:66:f4:fc:98:40:ba:b6:3f:00:e6:80:35:d8: 55:cc:6c:74:8a:2c:04:8b:d0:26:47:aa:e6:6c:ab: 57:e3:32:b0:2d:67:6a:2b:b4:2e:55:9b:76:d7:9b: 2f:16:9b:68:6e:6e:9c:60:aa:9b:48:e0:e9:15:45: 75:b1:80:b8:bd:7c:11:ad:af:9d:c7:2d:e8:a4:25: 76:a4:93:31:76:25:c1:33:37:a8:ce:51:86:d0:39: 0e:2c:d7:da:46:73:ae:fc:1c:14:08:8a:07:5c:fe: e0:60:7e:c0:7d:5c:c4:30:67:1c:1a:d4:31:bf:98: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:71:BC:44:40:D0:9B:22:B3:20:A5:22:FB:9C:F1:B9:2A:14:05:56 X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b4:09:8a:c9:a2:b9:8a:80:6b:d1:aa:49:db:90:95:79:26: f5:eb:02:25:fc:f7:50:1d:98:21:0f:3b:75:33:fd:68:61:04: a8:30:be:ab:5f:4e:1d:9c:34:4e:81:78:2f:10:78:42:dd:e3: 5e:a5:66:b4:b2:3b:de:d6:65:f9:d7:4c:08:bd:50:0b:9d:ed: c8:61:24:e0:18:31:d6:ff:fc:a7:59:b6:e6:af:35:d7:3e:3a: 3e:37:7f:84:ab:0f:05:49:04:2d:e6:5f:8b:cf:45:88:a4:2d: ea:c8:4c:f7:71:64:5e:2c:c2:4a:fc:d5:95:b0:09:3e:59:50: da:17:fb:8a:15:9d:11:51:65:30:96:bf:ae:46:2a:7e:71:02: 6c:7e:75:1e:98:cf:b2:9d:70:90:fc:64:9a:a3:90:c1:52:65: 8e:86:d6:65:e6:70:56:f1:9e:cf:16:1b:89:0f:1d:2f:d6:ba: b1:35:2e:24:04:3b:8f:91:56:7b:52:aa:59:90:2e:c7:5c:9f: 5f:aa:93:4e:89:83:00:0c:ed:9b:f5:2e:9c:c0:db:2d:4d:21: 83:6e:27:3b:25:1e:08:31:b1:b3:ef:0b:76:f2:89:05:69:02: 20:4d:61:c1:54:43:5b:d3:f4:76:b0:60:55:58:64:17:3e:5d: 56:95:9f:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjUwNDI1MDQwNjUwWhcNMjUwNTAyMDQwNjUwWjAYMRYwFAYD VQQDEw02ODBiMGE1YS1lYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFOgWvhjYqclwovkp9TH2gyPIYfGhksN6zKasuL2qGYHIDH1VHjxEns9or1t jAn+SpVJjj0VB1uaSw4jEMCDBbieRCJWptl6VYsyc6EFfpp9stiwf81Obi4x3ofC q4KHMf7Y4aKT5m9QNvzGDZy84P5Pt9BgOl8nBumlQVWB9uUmA4S78NYMt2b0/JhA urY/AOaANdhVzGx0iiwEi9AmR6rmbKtX4zKwLWdqK7QuVZt215svFptobm6cYKqb SODpFUV1sYC4vXwRra+dxy3opCV2pJMxdiXBMzeozlGG0DkOLNfaRnOu/BwUCIoH XP7gYH7AfVzEMGccGtQxv5iB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdxvERA 0JsisyClIvuc8bkqFAVWMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJtAmKyaK5ioBr0apJ25CVeSb16wIl/PdQHZghDzt1M/1oYQSoML6r X04dnDROgXgvEHhC3eNepWa0sjve1mX510wIvVALne3IYSTgGDHW//ynWbbmrzXX Pjo+N3+Eqw8FSQQt5l+Lz0WIpC3qyEz3cWReLMJK/NWVsAk+WVDaF/uKFZ0RUWUw lr+uRip+cQJsfnUemM+ynXCQ/GSao5DBUmWOhtZl5nBW8Z7PFhuJDx0v1rqxNS4k BDuPkVZ7UqpZkC7HXJ9fqpNOiYMADO2b9S6cwNstTSGDbic7JR4IMbGz7wt28okF aQIgTWHBVENb0/R2sGBVWGQXPl1WlZ/8 -----END CERTIFICATE-----Generated at Sat Apr 26 03:26:52 2025 by rpki-client