$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft File: haOfEGRko23KJ0v8d_uvewMDh24.mft (raw, json) Hash identifier: lBjGPYY956nJ63TlXOR2McplYA/lX2jS1rYOALNoqQY= Subject key identifier: 41:3F:FD:64:7E:FD:12:DB:9F:B3:38:F7:F2:40:31:8B:98:5A:AD:DA Authority key identifier: 85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E Certificate issuer: /CN=A9131181/serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft Manifest number: 11 Signing time: Fri 25 Apr 2025 07:03:46 +0000 Manifest this update: Fri 25 Apr 2025 07:03:45 +0000 Manifest next update: Fri 02 May 2025 07:03:45 +0000 Files and hashes: 1: haOfEGRko23KJ0v8d_uvewMDh24.crl (hash: Yrf4u+Ci9EqqcNU9ALVtWLnvZHrwevP6xvITrJWtcRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Validity Not Before: Apr 25 07:03:45 2025 GMT Not After : May 2 07:03:45 2025 GMT Subject: CN=680b33d1-d874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:53:72:96:4b:20:2d:2a:b1:a2:8c:00:dd: c9:b3:ed:68:35:b0:8b:4f:1c:55:ca:97:69:54:60: 11:4d:62:d8:96:e1:7c:4f:f1:81:98:84:fc:30:41: 52:3f:b3:e8:50:24:fd:e2:86:d2:c3:89:b7:9c:b5: dc:e0:24:a5:53:e0:bd:7a:68:d1:8b:69:b4:07:41: ba:bf:26:f0:11:ca:35:20:e6:57:55:c6:60:f8:45: a6:33:21:2b:b4:43:15:fe:fc:c2:28:12:2c:b5:ee: 31:3e:46:00:67:a1:97:08:fb:40:4d:57:51:62:36: a5:51:e6:ea:91:4d:b6:e3:bf:4e:fd:6e:59:97:79: 67:3f:2d:a2:70:07:a5:cc:08:8b:76:aa:47:bc:32: 83:3e:df:7a:3a:7f:c6:e3:8a:c1:be:91:ab:10:d5: 50:5e:4b:57:1a:9b:2e:a6:d3:45:b3:84:3f:ac:db: 59:b3:4d:eb:01:e6:ab:c1:15:ff:0d:83:24:d5:8f: f3:c6:57:8b:ab:f4:de:2e:f8:46:aa:17:71:75:d3: ec:a6:5d:60:91:25:cf:d0:38:92:3b:a3:b7:2b:9f: 5d:67:dd:dc:b1:70:39:de:d3:3c:4b:e4:7e:47:68: 39:ca:28:2e:32:79:96:f3:ed:a7:aa:d1:69:56:c7: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3F:FD:64:7E:FD:12:DB:9F:B3:38:F7:F2:40:31:8B:98:5A:AD:DA X509v3 Authority Key Identifier: keyid:85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d2:63:a7:99:f1:f7:07:3e:0a:99:39:95:76:bf:5c:cb:70: ed:5a:73:64:a2:be:02:55:e4:8b:e2:cb:a8:62:74:76:5a:c3: 53:ee:8a:0b:d5:cf:a2:1a:ed:d4:4a:de:57:e0:a2:34:a2:7a: e2:8a:27:5d:54:e0:06:db:38:ba:f2:2b:dd:ea:87:18:5f:40: fb:ae:27:65:a5:3b:9d:db:1c:f8:80:32:38:02:a6:34:72:4b: 0b:8c:07:0c:ff:7b:07:ff:68:0f:1d:2b:25:a1:81:70:f8:a0: f7:7e:3c:1e:c3:51:94:1d:68:ea:e7:cb:49:2c:4e:63:cf:d8: e0:4b:2c:99:0b:18:86:ea:50:94:6b:14:dc:9d:dd:20:35:7b: f4:79:08:61:38:30:12:8b:52:dd:93:8b:41:5e:68:9a:2c:5d: d0:a3:85:7a:9f:4b:4e:1d:37:f7:15:48:80:c3:53:95:07:2d: df:2f:e4:b4:04:2b:9e:84:ca:da:94:71:c1:c3:72:54:ca:e5: a4:29:39:5e:71:e3:c1:62:5f:56:9f:2e:12:c2:88:98:62:21: 4e:1a:fe:31:d1:eb:3b:38:ff:2c:5e:1e:38:d2:e0:e6:3f:36: eb:c9:00:37:8f:51:17:14:bf:25:36:e4:d7:01:2c:48:78:66: 7f:47:a6:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoODVBMzlGMTA2NDY0QTM2RENBMjc0QkZDNzdGQkFGN0Iw MzAzODc2RTAeFw0yNTA0MjUwNzAzNDVaFw0yNTA1MDIwNzAzNDVaMBgxFjAUBgNV BAMTDTY4MGIzM2QxLWQ4NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrnFNylksgLSqxoowA3cmz7Wg1sItPHFXKl2lUYBFNYtiW4XxP8YGYhPwwQVI/ s+hQJP3ihtLDibectdzgJKVT4L16aNGLabQHQbq/JvARyjUg5ldVxmD4RaYzISu0 QxX+/MIoEiy17jE+RgBnoZcI+0BNV1FiNqVR5uqRTbbjv079blmXeWc/LaJwB6XM CIt2qke8MoM+33o6f8bjisG+kasQ1VBeS1camy6m00WzhD+s21mzTesB5qvBFf8N gyTVj/PGV4ur9N4u+EaqF3F10+ymXWCRJc/QOJI7o7crn11n3dyxcDne0zxL5H5H aDnKKC4yeZbz7aeq0WlWx3FpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQT/9ZH79 Etufszj38kAxi5hardowHwYDVR0jBBgwFoAUhaOfEGRko23KJ0v8d/uvewMDh24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0IyRTcxNDYyMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIzS0owdjhkX3V2ZXdNRGgy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFPZkVHUmtvMjNLSjB2OGRfdXZld01EaDI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0IyRTcxNDYyMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIz S0owdjhkX3V2ZXdNRGgyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHSY6eZ8fcHPgqZOZV2v1zLcO1ac2SivgJV5Iviy6hidHZaw1PuigvV z6Ia7dRK3lfgojSieuKKJ11U4AbbOLryK93qhxhfQPuuJ2WlO53bHPiAMjgCpjRy SwuMBwz/ewf/aA8dKyWhgXD4oPd+PB7DUZQdaOrny0ksTmPP2OBLLJkLGIbqUJRr FNyd3SA1e/R5CGE4MBKLUt2Ti0FeaJosXdCjhXqfS04dN/cVSIDDU5UHLd8v5LQE K56EytqUccHDclTK5aQpOV5x48FiX1afLhLCiJhiIU4a/jHR6zs4/yxeHjjS4OY/ NuvJADePURcUvyU25NcBLEh4Zn9Hpow= -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:11 2025 by rpki-client