$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: jrlml7/sQRt5SvWWdYsA6yChPBhj2NhP5K1DwlnPrX0= Subject key identifier: E3:D0:FF:E3:C2:81:C3:B4:F0:1F:9A:A6:66:D3:D2:84:37:4C:5E:7B Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 065A Signing time: Wed 30 Apr 2025 22:09:11 +0000 Manifest this update: Wed 30 Apr 2025 22:09:11 +0000 Manifest next update: Wed 07 May 2025 22:09:11 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: CjRwGOlCoHjakKdUr0XlneCDPKnnh4fWBnujlIn64Ps=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: bzwAo1vTwZtUvpqV0SE31TfJe7tyOs8AEfKtkNJnl48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Apr 30 22:09:11 2025 GMT Not After : May 7 22:09:11 2025 GMT Subject: CN=68129f87-1f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:5c:74:b1:b0:78:e0:52:c7:dc:f3:84:b2: b5:ff:e6:ce:d9:80:0b:b4:27:7a:ec:1c:07:4c:25: 75:b8:78:ca:41:be:2a:d5:71:32:66:13:83:b7:16: e8:96:66:62:66:4c:91:20:43:ba:cf:1b:f2:b3:f0: 68:34:99:47:f5:53:61:dd:23:32:bd:37:6d:ab:aa: 47:ca:0f:58:62:47:d4:b8:20:4e:3b:4c:f2:7c:2b: 37:5b:d8:6b:79:09:31:7f:bd:41:bf:0f:91:68:8c: 5d:f1:d6:0c:69:e5:fc:72:15:d2:ef:c5:2b:eb:5f: 62:9c:d3:67:b0:98:e7:21:1c:68:fd:43:94:2b:56: eb:a9:aa:d5:13:c3:53:42:ce:99:a5:6b:b0:1c:a6: 28:5e:44:12:38:17:cd:a4:ee:d4:a8:5a:a6:e6:bb: b7:db:ef:b5:81:09:c8:95:7e:e7:d9:58:d3:bb:a8: 6d:d9:0f:d5:94:e3:6a:32:23:80:a8:b9:02:e0:d4: 90:9b:09:4b:9e:c9:b9:d8:39:eb:bd:a3:75:c0:cf: 1f:4e:b6:ca:31:3f:68:e3:5d:0d:67:20:8f:f4:22: 8f:d8:72:48:a1:33:86:be:2c:4f:4c:bc:80:91:5f: 31:48:dc:42:10:37:11:cb:79:ed:70:ca:a6:21:ea: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D0:FF:E3:C2:81:C3:B4:F0:1F:9A:A6:66:D3:D2:84:37:4C:5E:7B X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:b9:d0:52:10:09:e5:62:4a:9c:5e:36:f2:3a:c0:d1:b0: 97:5d:96:8c:96:22:95:0c:62:4b:f6:02:df:60:50:2a:03:53: bf:06:72:fb:dd:f6:1d:a6:6c:cb:cd:3c:64:79:6c:86:04:a7: fb:a5:f8:10:56:0f:8f:be:38:f7:d9:96:ff:b0:1a:95:58:8d: 6d:8a:cb:e1:fc:e8:74:15:6a:9b:b1:89:0d:ba:eb:3b:28:e8: aa:d9:2a:71:3e:97:31:42:4b:07:fe:99:8d:9d:51:2e:0c:73: 15:62:ab:d1:c9:b7:b2:b5:64:3c:c6:53:33:a5:dc:b9:7c:15: e1:b1:e1:1e:20:28:10:f3:04:09:da:60:68:23:5f:4b:91:ec: b5:ae:80:47:f7:78:30:7a:1b:9e:59:53:83:d4:ac:be:05:19: f7:54:74:7a:81:72:a2:7a:74:e8:7b:47:89:b3:92:80:4d:45: 00:67:5e:2d:cb:48:86:d1:ce:6e:7f:a9:42:a8:c4:52:fd:81: 8b:6f:d7:1f:2e:01:dd:d4:1c:d1:1a:0d:49:fa:74:1d:05:a9: 86:b9:f0:08:dc:c3:31:95:4c:7f:8c:04:49:7f:7b:53:6d:e6: 69:a0:ad:2a:4d:1c:e7:d5:ba:f4:43:d4:94:4f:0c:3e:7d:2e: 07:fd:37:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjUwNDMwMjIwOTExWhcNMjUwNTA3MjIwOTExWjAYMRYwFAYD VQQDEw02ODEyOWY4Ny0xZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvBcdLGweOBSx9zzhLK1/+bO2YALtCd67BwHTCV1uHjKQb4q1XEyZhODtxbo lmZiZkyRIEO6zxvys/BoNJlH9VNh3SMyvTdtq6pHyg9YYkfUuCBOO0zyfCs3W9hr eQkxf71Bvw+RaIxd8dYMaeX8chXS78Ur619inNNnsJjnIRxo/UOUK1brqarVE8NT Qs6ZpWuwHKYoXkQSOBfNpO7UqFqm5ru32++1gQnIlX7n2VjTu6ht2Q/VlONqMiOA qLkC4NSQmwlLnsm52DnrvaN1wM8fTrbKMT9o410NZyCP9CKP2HJIoTOGvixPTLyA kV8xSNxCEDcRy3ntcMqmIeoaCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPQ/+PC gcO08B+apmbT0oQ3TF57MB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGdLnQUhAJ5WJKnF428jrA0bCXXZaMliKVDGJL9gLfYFAqA1O/BnL7 3fYdpmzLzTxkeWyGBKf7pfgQVg+Pvjj32Zb/sBqVWI1tisvh/Oh0FWqbsYkNuus7 KOiq2SpxPpcxQksH/pmNnVEuDHMVYqvRybeytWQ8xlMzpdy5fBXhseEeICgQ8wQJ 2mBoI19Lkey1roBH93gwehueWVOD1Ky+BRn3VHR6gXKienToe0eJs5KATUUAZ14t y0iG0c5uf6lCqMRS/YGLb9cfLgHd1BzRGg1J+nQdBamGufAI3MMxlUx/jARJf3tT beZpoK0qTRzn1br0Q9SUTww+fS4H/TcS -----END CERTIFICATE-----Generated at Thu May 1 16:39:10 2025 by rpki-client