$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: KEFCCG99PbFnFhbwwR/DOyvm7pI4CMWTCvrlRAu90Ew= Subject key identifier: 20:AD:8F:B4:85:08:8F:B8:CA:AE:85:9C:C9:69:CF:AB:2A:6A:C3:A7 Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 0642 Signing time: Thu 24 Apr 2025 22:23:35 +0000 Manifest this update: Thu 24 Apr 2025 22:23:35 +0000 Manifest next update: Thu 01 May 2025 22:23:35 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: zdDmuwW1CzjZZjnUIxP/nMPQgiD/jgq+58tmHMJnjfU=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: iRYRVo5lbaJTFKYyTxWAHiXDjG/PpAWNzoZqTqR4jfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Apr 24 22:23:35 2025 GMT Not After : May 1 22:23:35 2025 GMT Subject: CN=680ab9e7-8356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:a0:f5:74:85:73:35:29:fc:33:17:16:ab: 2f:81:f3:29:57:91:b1:bb:99:15:fb:49:43:a1:bf: 3b:ee:a5:f9:14:45:5f:de:9b:36:a6:b2:a2:6e:67: ac:99:06:2c:15:b7:9b:d4:1c:57:61:9a:24:8b:89: 1d:f7:fb:07:f3:54:f2:dd:f1:9d:d9:03:99:bd:99: 8a:7b:07:b4:d9:48:58:2a:72:88:2a:2f:31:aa:16: 61:a8:56:07:d2:81:49:f4:04:54:4c:5f:7b:59:fb: 9a:fa:fe:99:f8:73:04:09:eb:a4:37:6e:19:69:42: d4:41:a1:72:a7:f1:29:6f:30:41:70:1c:58:86:10: b8:5c:7a:db:f3:ea:2d:ea:49:e3:be:39:a8:a4:99: 1e:31:c4:42:26:ee:ca:6a:71:42:53:16:d0:c5:00: 4b:6f:4a:e3:6c:08:16:51:e1:eb:cc:62:2d:a4:55: 17:2d:b2:fa:63:e6:84:34:7a:51:d1:72:69:b1:cc: 97:03:1a:9c:0a:36:4e:91:b2:79:b6:67:93:2a:ab: 3e:6d:60:6c:f0:0b:26:dd:97:d8:3d:11:7b:f6:46: 76:46:b0:7a:68:1b:82:79:ba:e6:fb:42:41:66:90: bf:d5:b6:5b:3f:c7:81:99:f0:60:98:7b:52:1c:fa: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AD:8F:B4:85:08:8F:B8:CA:AE:85:9C:C9:69:CF:AB:2A:6A:C3:A7 X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:62:2d:83:e8:f1:2b:44:38:91:50:95:da:bb:0f:2f:fd:c7: 66:67:c3:47:95:3f:90:25:90:cc:35:01:20:67:2f:ed:8f:03: 3a:1f:94:23:4b:77:ee:d3:a9:3b:b6:ea:78:23:bf:b6:62:39: 88:6e:cf:65:73:d7:f7:56:6d:57:9b:8a:eb:62:e5:cc:aa:6d: 65:9e:d0:a9:ce:d6:97:6f:c9:32:b4:2f:ae:a4:e4:55:8e:b3: d6:33:3b:6b:15:ac:c6:31:00:4b:f1:63:e9:b2:3b:1a:1a:d0: 83:7c:79:75:b3:5a:81:56:c9:4f:8f:16:04:8d:8c:ea:11:33: 6d:d4:b7:cf:70:86:78:d0:a4:61:d4:30:e7:db:43:0f:ca:7c: 05:22:69:70:d6:80:ac:bf:0e:ea:42:73:c7:5d:1b:3f:d3:89: 08:de:12:fe:ff:18:1d:73:da:56:51:c1:29:13:98:4d:bc:72: e9:8c:9a:0e:48:b4:cf:3e:b3:65:6a:31:cc:46:14:55:dd:81: 86:01:91:cb:0a:7d:e1:89:6e:6d:a8:b1:4f:df:c1:0e:ce:a7: 25:da:ae:77:99:63:7d:3b:56:48:52:bc:87:2e:1a:1c:74:d2: 7b:8e:95:52:13:24:5d:5a:59:4d:0b:4b:19:50:75:d2:1e:9b: 9f:f3:50:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUwNDI0MjIyMzM1WhcNMjUwNTAxMjIyMzM1WjAYMRYwFAYD VQQDEw02ODBhYjllNy04MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskOg9XSFczUp/DMXFqsvgfMpV5Gxu5kV+0lDob877qX5FEVf3ps2prKibmes mQYsFbeb1BxXYZoki4kd9/sH81Ty3fGd2QOZvZmKewe02UhYKnKIKi8xqhZhqFYH 0oFJ9ARUTF97Wfua+v6Z+HMECeukN24ZaULUQaFyp/EpbzBBcBxYhhC4XHrb8+ot 6knjvjmopJkeMcRCJu7KanFCUxbQxQBLb0rjbAgWUeHrzGItpFUXLbL6Y+aENHpR 0XJpscyXAxqcCjZOkbJ5tmeTKqs+bWBs8Asm3ZfYPRF79kZ2RrB6aBuCebrm+0JB ZpC/1bZbP8eBmfBgmHtSHPpWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCtj7SF CI+4yq6FnMlpz6sqasOnMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGYi2D6PErRDiRUJXauw8v/cdmZ8NHlT+QJZDMNQEgZy/tjwM6H5Qj S3fu06k7tup4I7+2YjmIbs9lc9f3Vm1Xm4rrYuXMqm1lntCpztaXb8kytC+upORV jrPWMztrFazGMQBL8WPpsjsaGtCDfHl1s1qBVslPjxYEjYzqETNt1LfPcIZ40KRh 1DDn20MPynwFImlw1oCsvw7qQnPHXRs/04kI3hL+/xgdc9pWUcEpE5hNvHLpjJoO SLTPPrNlajHMRhRV3YGGAZHLCn3hiW5tqLFP38EOzqcl2q53mWN9O1ZIUryHLhoc dNJ7jpVSEyRdWllNC0sZUHXSHpuf81Aw -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:44 2025 by rpki-client