$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: K2zM/HxzKZdpQ+pxhHvKg22hEXifzsVx/Sd/0HV6Mds= Subject key identifier: F4:E1:91:66:26:E4:C3:44:73:D8:99:92:2A:94:4D:01:51:7D:5B:8A Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 7B Signing time: Fri 25 Apr 2025 05:48:59 +0000 Manifest this update: Fri 25 Apr 2025 05:48:58 +0000 Manifest next update: Fri 02 May 2025 05:48:58 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: 7rvuD2JvsLGgrTTlmVEOCDR3H930FckkwGa4B+kbv/c=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Apr 25 05:48:58 2025 GMT Not After : May 2 05:48:58 2025 GMT Subject: CN=680b224b-9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:f0:93:a0:75:14:38:6e:a4:af:64:b1:b8: c5:e9:2d:a2:26:96:63:98:2c:76:82:4c:e7:1c:12: 2c:49:de:d0:5a:a1:35:73:a2:be:7a:e4:99:06:60: 34:2b:42:24:ab:7b:de:aa:47:64:2f:3f:db:a1:67: 7b:be:36:56:07:eb:4d:e5:63:27:b8:2a:28:2d:e7: 65:17:f3:af:a3:a6:5b:3e:a0:dd:85:e2:1b:25:ec: dd:2d:9b:bc:53:df:b6:3c:7a:3f:f4:cb:63:72:d6: 63:b1:37:e4:1a:cb:0c:4d:c6:ae:8a:9f:ce:e3:ea: be:53:0f:a2:0b:32:db:27:3a:f5:e3:39:29:8d:97: 1e:10:05:5d:e0:62:cd:d9:c2:82:ef:a5:30:b9:d8: ef:3c:7f:8b:82:64:95:17:da:86:f5:c7:be:59:ea: c0:37:74:ec:18:37:aa:0e:e2:fd:e5:b6:60:7e:61: 6e:a3:3b:03:af:eb:7e:43:1e:f3:01:b7:5d:de:36: 03:b8:af:47:b5:c9:cf:79:d6:54:15:74:d3:9b:4a: 93:b1:bf:87:5e:ad:21:99:8e:2f:ea:66:8a:ab:94: b8:e5:5e:ab:3e:d5:ac:84:ad:b3:91:b1:46:fc:86: 1f:2c:54:43:5e:55:8b:db:f9:0b:47:fe:4a:02:d1: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:91:66:26:E4:C3:44:73:D8:99:92:2A:94:4D:01:51:7D:5B:8A X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:82:31:67:ba:8d:45:88:96:26:49:52:01:3d:c5:ca:8a:cf: 37:0e:cb:a8:4d:29:45:e3:8a:59:86:04:e9:ef:4e:53:45:93: 3a:f4:b5:90:3d:f6:6a:53:80:ef:89:c3:53:a6:90:ba:a9:de: e0:06:62:f9:7c:13:ab:be:7c:ac:c9:e7:ef:2a:91:76:84:01: cb:e0:ed:42:82:90:10:c2:1c:c2:36:1b:7f:b7:fc:41:3b:ac: d4:a3:96:74:f8:0f:d9:46:7b:70:88:a0:e9:09:39:d0:43:5d: 8c:05:a1:dd:e3:f2:6a:e0:90:32:3d:26:0c:35:21:ef:7d:30: dc:b5:06:14:aa:45:9b:d6:3b:d8:6c:1c:39:12:5b:e2:fc:64: 55:db:ad:c9:74:be:7d:a9:e6:3c:bf:e4:41:0c:19:85:24:80: d7:70:cb:1f:51:22:69:dd:ee:5d:91:c6:a8:de:ad:62:87:14: e7:5f:b2:6f:9a:51:a8:db:f9:82:fa:0e:d7:bb:20:37:48:1b: a1:3b:c0:09:30:62:20:a2:a6:88:a6:0b:a6:ec:1d:28:96:fd: 05:a0:83:02:89:88:87:1c:94:16:55:30:4d:c3:d6:db:16:5d: 80:d8:40:3f:6a:99:5f:76:74:25:97:57:59:b2:7c:53:a9:b2: 35:68:f9:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwNDI1MDU0ODU4WhcNMjUwNTAyMDU0ODU4WjAYMRYwFAYD VQQDEw02ODBiMjI0Yi05NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6vwk6B1FDhupK9ksbjF6S2iJpZjmCx2gkznHBIsSd7QWqE1c6K+euSZBmA0 K0Ikq3veqkdkLz/boWd7vjZWB+tN5WMnuCooLedlF/Ovo6ZbPqDdheIbJezdLZu8 U9+2PHo/9MtjctZjsTfkGssMTcauip/O4+q+Uw+iCzLbJzr14zkpjZceEAVd4GLN 2cKC76UwudjvPH+LgmSVF9qG9ce+WerAN3TsGDeqDuL95bZgfmFuozsDr+t+Qx7z Abdd3jYDuK9HtcnPedZUFXTTm0qTsb+HXq0hmY4v6maKq5S45V6rPtWshK2zkbFG /IYfLFRDXlWL2/kLR/5KAtFw4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPThkWYm 5MNEc9iZkiqUTQFRfVuKMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcgjFnuo1FiJYmSVIBPcXKis83DsuoTSlF44pZhgTp705TRZM69LWQ PfZqU4DvicNTppC6qd7gBmL5fBOrvnysyefvKpF2hAHL4O1CgpAQwhzCNht/t/xB O6zUo5Z0+A/ZRntwiKDpCTnQQ12MBaHd4/Jq4JAyPSYMNSHvfTDctQYUqkWb1jvY bBw5Elvi/GRV263JdL59qeY8v+RBDBmFJIDXcMsfUSJp3e5dkcao3q1ihxTnX7Jv mlGo2/mC+g7XuyA3SBuhO8AJMGIgoqaIpgum7B0olv0FoIMCiYiHHJQWVTBNw9bb Fl2A2EA/aplfdnQll1dZsnxTqbI1aPkZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:35 2025 by rpki-client