$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json) Hash identifier: SRj0kRp7GqfYb3+9IFZ+wWCMP0xJgiYKHv+HURl1YTA= Subject key identifier: 1F:78:87:4B:50:08:57:AE:53:E0:07:A6:2F:2F:7B:F3:90:8D:ED:D9 Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft Manifest number: 010F Signing time: Fri 25 Apr 2025 04:00:37 +0000 Manifest this update: Fri 25 Apr 2025 04:00:37 +0000 Manifest next update: Fri 02 May 2025 04:00:37 +0000 Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: +p0Q8ABuv68QhsaYw5DQXAHHgCGjT7bMAXHRVlytAcE=) 2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: KgQSXjT0/AcvVs+PHWWF/UPrCiIk9MVvntWwSCiQouc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: Apr 25 04:00:37 2025 GMT Not After : May 2 04:00:37 2025 GMT Subject: CN=680b08e5-c162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:43:65:2b:9d:58:ac:ce:d3:e4:04:7b:1e: a4:66:42:59:3a:88:79:f5:6c:78:16:bb:cf:da:13: 7f:74:07:d6:13:15:8e:4c:1a:8d:a8:39:74:42:55: c8:0c:02:dd:4b:74:f5:94:00:ac:5e:ae:f3:e0:b8: 39:54:3f:24:4a:a5:06:68:58:24:e9:fb:44:25:82: da:98:97:b3:7d:36:58:ce:78:46:62:e1:62:26:ad: 42:40:e8:53:fd:fb:c3:7a:34:b4:d9:d9:5d:9f:25: 37:86:85:15:7a:c7:e7:81:0e:e6:db:81:62:8b:ae: a1:de:c8:d6:64:9f:28:8b:53:ba:16:e4:bd:dd:fd: cf:01:6c:85:09:fb:a6:bc:c4:f6:d7:27:c5:70:00: 8f:14:51:e4:27:62:c1:53:d2:23:df:5c:15:bf:f1: cf:f0:2d:3c:b5:1b:13:d9:91:e1:1c:e7:54:ff:cf: 94:9a:dd:6e:53:4d:5a:a5:5e:71:2a:d9:73:eb:4e: 78:cc:be:0b:3b:33:11:bd:32:8c:29:fe:86:11:04: 29:26:27:44:8c:18:72:b9:fc:fe:ff:73:be:81:88: 57:7a:68:e2:e5:4b:0d:1d:d2:b7:2c:fe:8a:f7:7e: 33:05:bc:c1:0b:b8:12:79:0a:25:21:27:17:72:8b: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:78:87:4B:50:08:57:AE:53:E0:07:A6:2F:2F:7B:F3:90:8D:ED:D9 X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8b:50:d9:ea:a3:82:c5:91:67:e2:df:da:92:66:a9:3f:6d: 02:58:02:6c:80:8c:57:b5:dd:0d:47:25:1f:b4:b2:01:1b:c4: 62:a5:95:6b:89:6b:7c:59:07:0a:53:25:d4:95:70:64:e6:fb: 4e:04:45:e6:39:e8:b3:d8:db:53:d2:fb:bf:9c:76:eb:a6:03: 1e:f7:4c:35:98:e4:e6:9b:ad:60:c2:c8:04:30:da:ed:65:13: 30:bf:c2:8f:64:b0:9a:ca:e4:e9:dd:47:fd:ae:25:5c:96:8f: 37:d1:2f:25:59:2d:dd:29:6e:10:0a:4a:f4:91:a6:ab:ce:2f: ac:49:ff:06:0c:f7:5f:59:05:52:fc:b2:77:01:8e:82:fb:38: 58:c4:2e:81:ac:7b:97:01:32:9c:ce:1f:97:ba:3d:5b:ad:4b: fd:b0:3f:d7:3a:9d:27:7f:dc:c1:b2:1c:bb:57:0c:01:5d:4f: de:14:23:56:c1:9d:c8:eb:1e:2b:8c:d3:81:c4:26:9a:27:2e: a2:d0:d1:c1:42:34:14:34:f6:fc:60:fd:72:85:3e:29:f7:37: 1d:bf:6d:62:17:ca:37:c1:84:2d:05:2d:fe:0f:9b:71:12:bf: 2f:47:66:aa:be:51:c7:12:68:18:36:d3:ce:ca:f6:ac:db:66: 14:d8:54:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC RDIyM0QzOTMwHhcNMjUwNDI1MDQwMDM3WhcNMjUwNTAyMDQwMDM3WjAYMRYwFAYD VQQDEw02ODBiMDhlNS1jMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8NDZSudWKzO0+QEex6kZkJZOoh59Wx4FrvP2hN/dAfWExWOTBqNqDl0QlXI DALdS3T1lACsXq7z4Lg5VD8kSqUGaFgk6ftEJYLamJezfTZYznhGYuFiJq1CQOhT /fvDejS02dldnyU3hoUVesfngQ7m24Fii66h3sjWZJ8oi1O6FuS93f3PAWyFCfum vMT21yfFcACPFFHkJ2LBU9Ij31wVv/HP8C08tRsT2ZHhHOdU/8+Umt1uU01apV5x Ktlz6054zL4LOzMRvTKMKf6GEQQpJidEjBhyufz+/3O+gYhXemji5UsNHdK3LP6K 934zBbzBC7gSeQolIScXcovtOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB94h0tQ CFeuU+AHpi8ve/OQje3ZMB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0 RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA5RC8wMUZBQzk4QTg0RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVh enctdXByT2JrQks5SWowNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxi1DZ6qOCxZFn4t/akmapP20CWAJsgIxXtd0NRyUftLIBG8RipZVr iWt8WQcKUyXUlXBk5vtOBEXmOeiz2NtT0vu/nHbrpgMe90w1mOTmm61gwsgEMNrt ZRMwv8KPZLCayuTp3Uf9riVclo830S8lWS3dKW4QCkr0kaarzi+sSf8GDPdfWQVS /LJ3AY6C+zhYxC6BrHuXATKczh+Xuj1brUv9sD/XOp0nf9zBshy7VwwBXU/eFCNW wZ3I6x4rjNOBxCaaJy6i0NHBQjQUNPb8YP1yhT4p9zcdv21iF8o3wYQtBS3+D5tx Er8vR2aqvlHHEmgYNtPOyvas22YU2FSL -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:15 2025 by rpki-client