$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json) Hash identifier: 3M/8b+JfQMJF3ajPJNqI2GW0Dwh6M1ultxVXRT3j9dA= Subject key identifier: 58:0B:1C:BA:F3:1E:55:0B:88:99:E3:58:4A:2F:A4:8C:18:02:A5:F5 Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft Manifest number: 05A7 Signing time: Thu 24 Apr 2025 22:57:23 +0000 Manifest this update: Thu 24 Apr 2025 22:57:23 +0000 Manifest next update: Thu 01 May 2025 22:57:23 +0000 Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: XFyn5tFson1bKA6/dE3RNPREoBhloAKzQnnmr38C4Ck=) 2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: E/ZSFb0w8l7IP55HohiEiKQ/xTqSgiZ1I0q7vfGX9Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Validity Not Before: Apr 24 22:57:23 2025 GMT Not After : May 1 22:57:23 2025 GMT Subject: CN=680ac1d3-6ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:24:c9:59:f5:e4:fb:37:aa:17:e6:ef:34: d4:e7:8e:5d:fb:7f:87:7d:7a:28:46:ac:49:a7:49: ab:86:c2:f6:d3:55:b1:26:03:19:2d:b9:1d:41:28: 02:8d:a3:f1:55:ef:22:41:69:e1:00:4e:b6:97:ce: c2:1d:a3:41:85:05:0d:ee:b4:1c:3b:f4:87:eb:40: f7:70:76:c1:f9:0f:d1:66:8b:9c:24:fe:01:ea:fd: 55:e3:d3:a4:3d:9e:fb:f7:8e:c0:05:88:b9:e1:fc: 84:88:74:b4:f4:a1:0c:2f:d5:ff:d9:89:4c:2f:6f: 05:25:1d:b2:95:57:7a:39:27:bd:8a:4e:58:3b:eb: 72:ce:9c:73:02:a9:46:90:15:56:6e:a1:57:24:0a: 41:56:23:50:3d:33:87:e7:91:90:15:b7:95:5d:f3: 09:14:2d:2f:9e:a9:15:13:50:f3:43:e9:d7:c9:de: e6:05:03:10:3d:5a:c4:d4:bd:ac:5e:e1:6c:dd:f1: 10:2b:04:96:85:bd:6f:4b:db:5d:dc:07:b1:bf:12: 34:ba:70:0f:18:97:e4:8e:75:6d:20:8a:ab:f8:7b: 73:7d:31:64:68:74:d6:f9:a1:00:8c:80:28:69:3e: 21:44:36:ca:06:b3:3c:80:a2:95:14:e8:ab:d3:71: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:1C:BA:F3:1E:55:0B:88:99:E3:58:4A:2F:A4:8C:18:02:A5:F5 X509v3 Authority Key Identifier: keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d1:21:d2:ca:45:5b:99:03:a3:02:b3:96:02:2c:85:e2:a3: bc:26:5c:b2:96:69:35:07:e4:8f:b1:4c:dc:28:37:69:fd:54: 58:fd:26:3a:bd:27:67:4e:c8:88:df:56:6a:a7:69:af:b0:41: a1:aa:63:ac:bf:62:65:ce:b7:2a:32:5b:20:3b:68:d7:5a:dc: b7:bb:0a:1c:ad:a3:8d:19:30:29:e1:23:03:52:53:df:8e:3c: 4d:62:43:ae:04:40:01:a6:3f:3a:70:24:d8:66:68:39:82:91: b3:f4:f3:a4:5e:cd:47:26:49:f8:21:08:e3:3d:23:32:5b:b1: 9a:8d:8e:51:a9:8c:99:1b:7c:1c:60:15:88:16:fd:c0:7b:ff: 00:4a:07:a0:7c:e1:7b:c7:27:b3:98:41:17:f9:82:a9:ec:72: 2a:e2:18:5d:56:c0:14:fd:e5:c6:37:bd:06:cc:72:0d:46:33: 6c:07:8d:1c:7c:1d:8a:28:e7:37:ec:35:8a:37:68:dd:4a:45: 8d:37:10:d5:9f:c1:14:c9:12:40:e9:fa:21:dc:49:21:76:00: e0:c1:59:10:c0:f5:ec:63:09:cf:ec:be:5a:36:10:ec:1e:4d: 08:6d:f5:8c:62:b9:78:ae:35:f7:ad:04:a3:8e:9d:d5:19:b5: 76:41:ef:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5 MDk1QzVGRkIwHhcNMjUwNDI0MjI1NzIzWhcNMjUwNTAxMjI1NzIzWjAYMRYwFAYD VQQDEw02ODBhYzFkMy02Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS0kyVn15Ps3qhfm7zTU545d+3+HfXooRqxJp0mrhsL201WxJgMZLbkdQSgC jaPxVe8iQWnhAE62l87CHaNBhQUN7rQcO/SH60D3cHbB+Q/RZoucJP4B6v1V49Ok PZ77947ABYi54fyEiHS09KEML9X/2YlML28FJR2ylVd6OSe9ik5YO+tyzpxzAqlG kBVWbqFXJApBViNQPTOH55GQFbeVXfMJFC0vnqkVE1DzQ+nXyd7mBQMQPVrE1L2s XuFs3fEQKwSWhb1vS9td3AexvxI0unAPGJfkjnVtIIqr+HtzfTFkaHTW+aEAjIAo aT4hRDbKBrM8gKKVFOir03H6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgLHLrz HlULiJnjWEovpIwYAqX1MB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1 NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx0SHSykVbmQOjArOWAiyF4qO8Jlyylmk1B+SPsUzcKDdp/VRY/SY6 vSdnTsiI31Zqp2mvsEGhqmOsv2JlzrcqMlsgO2jXWty3uwocraONGTAp4SMDUlPf jjxNYkOuBEABpj86cCTYZmg5gpGz9POkXs1HJkn4IQjjPSMyW7GajY5RqYyZG3wc YBWIFv3Ae/8ASgegfOF7xyezmEEX+YKp7HIq4hhdVsAU/eXGN70GzHINRjNsB40c fB2KKOc37DWKN2jdSkWNNxDVn8EUyRJA6foh3EkhdgDgwVkQwPXsYwnP7L5aNhDs Hk0IbfWMYrl4rjX3rQSjjp3VGbV2Qe81 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:45 2025 by rpki-client