$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: 5pou/b40J4av/thOr1C/SS4dokFzGdejRYe3OKCXp4g= Subject key identifier: 20:91:C5:0C:AE:B5:F6:E6:71:C2:F9:FC:32:9D:C3:42:DF:7B:1A:70 Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 0348 Signing time: Fri 25 Apr 2025 00:47:48 +0000 Manifest this update: Fri 25 Apr 2025 00:47:47 +0000 Manifest next update: Fri 02 May 2025 00:47:47 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: Nyedslwjp+t3ZIf7qszi1lfxXzSBQPId63jkOVV6jt0=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: m/bIsnc72f+GKlsPAyrWqEs82wNRpWBNpwKZDStdnM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: Apr 25 00:47:47 2025 GMT Not After : May 2 00:47:47 2025 GMT Subject: CN=680adbb4-4c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:0c:02:bd:d2:72:59:bf:a7:2b:65:1c:83: dd:38:9d:b5:39:36:88:3a:2d:47:2e:29:fc:38:b9: eb:ef:8b:5d:2c:3b:6d:33:75:a9:7c:b7:ad:fe:8e: f7:03:4d:da:99:ab:5b:c6:69:6b:76:d7:0e:c2:e7: e6:b0:c6:df:71:2b:91:55:60:43:36:8a:50:a3:29: a1:2e:85:b3:5f:31:10:f2:02:ed:37:fe:4a:3b:0f: 7e:6a:db:38:41:ce:12:f8:39:eb:96:39:84:1a:e7: 01:47:10:5a:8a:2b:55:5b:a9:8c:82:6e:b2:f0:e2: c0:8d:bf:7b:c1:87:17:d3:28:e4:5e:3c:a4:b7:e2: fc:dd:1d:b4:a2:89:b4:ab:53:2e:c6:50:90:9c:ab: 99:6e:b0:4a:0c:a5:b3:85:ac:04:48:d9:8d:7b:34: f7:8c:35:96:8f:dc:d4:c0:97:cd:1e:ff:83:ad:61: 36:b7:d3:15:01:c5:ff:d2:a6:b5:21:e1:de:f9:d7: 1c:1e:eb:8f:95:b6:ad:f8:30:f0:d5:47:12:1f:32: 11:ee:48:c1:ac:36:34:27:78:97:f6:80:1b:22:20: e5:05:73:c7:4a:33:55:e7:62:59:03:09:5d:50:69: 5a:29:35:88:69:86:43:86:63:4c:e3:fa:84:f5:f2: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:91:C5:0C:AE:B5:F6:E6:71:C2:F9:FC:32:9D:C3:42:DF:7B:1A:70 X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:91:e3:69:e0:80:f7:6c:81:ef:09:fc:af:de:1c:8f:5e:f0: 81:d8:50:5b:01:f5:ed:30:9b:9e:88:72:81:c2:ca:dd:7d:64: 38:c4:f8:1b:f5:47:93:72:fd:b6:cd:88:65:f7:6c:0f:6a:c6: dc:1f:74:b1:8d:30:b5:c2:ba:19:f0:7a:b5:86:c0:c7:ee:c5: 45:5c:39:1a:14:3f:b0:74:47:20:03:4d:d7:85:c2:e7:0f:0e: a6:94:9c:83:ff:0f:44:93:2f:44:af:a8:ba:78:fc:95:5c:db: f2:fa:b2:78:d5:94:f2:f2:e2:2b:9c:bf:67:33:82:7d:d8:66: fc:c5:ae:05:35:eb:91:a4:a8:db:46:92:6a:18:3e:b5:bb:17: 3a:b1:2c:84:b6:71:35:e1:cc:f5:81:5e:ba:8e:13:ca:62:2a: 33:4f:91:77:c1:ef:87:59:60:b2:d0:d3:f3:8d:ba:a4:05:e1: 1c:05:d6:06:4f:c4:e4:41:ed:5d:d0:99:98:91:ef:a7:40:d3: df:78:3a:dc:f3:8a:54:89:61:6d:d9:f9:fb:03:cc:17:8b:41: dc:c7:e1:aa:87:06:12:9d:90:65:11:9a:93:8d:b6:9b:f7:fa: 1c:71:28:db:ca:16:0c:dc:d4:1b:78:32:b2:fa:f7:a4:3a:be: 75:1d:c2:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjUwNDI1MDA0NzQ3WhcNMjUwNTAyMDA0NzQ3WjAYMRYwFAYD VQQDEw02ODBhZGJiNC00YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjIMAr3Sclm/pytlHIPdOJ21OTaIOi1HLin8OLnr74tdLDttM3WpfLet/o73 A03amatbxmlrdtcOwufmsMbfcSuRVWBDNopQoymhLoWzXzEQ8gLtN/5KOw9+ats4 Qc4S+DnrljmEGucBRxBaiitVW6mMgm6y8OLAjb97wYcX0yjkXjykt+L83R20oom0 q1MuxlCQnKuZbrBKDKWzhawESNmNezT3jDWWj9zUwJfNHv+DrWE2t9MVAcX/0qa1 IeHe+dccHuuPlbat+DDw1UcSHzIR7kjBrDY0J3iX9oAbIiDlBXPHSjNV52JZAwld UGlaKTWIaYZDhmNM4/qE9fJzpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCRxQyu tfbmccL5/DKdw0LfexpwMB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkeNp4ID3bIHvCfyv3hyPXvCB2FBbAfXtMJueiHKBwsrdfWQ4xPgb 9UeTcv22zYhl92wPasbcH3SxjTC1wroZ8Hq1hsDH7sVFXDkaFD+wdEcgA03XhcLn Dw6mlJyD/w9Eky9Er6i6ePyVXNvy+rJ41ZTy8uIrnL9nM4J92Gb8xa4FNeuRpKjb RpJqGD61uxc6sSyEtnE14cz1gV66jhPKYiozT5F3we+HWWCy0NPzjbqkBeEcBdYG T8TkQe1d0JmYke+nQNPfeDrc84pUiWFt2fn7A8wXi0Hcx+GqhwYSnZBlEZqTjbab 9/occSjbyhYM3NQbeDKy+vekOr51HcKE -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:24 2025 by rpki-client