$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft File: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft (raw, json) Hash identifier: WgHDjqRN1gVnew9YFoS4ok1xzICgh8y1GzWIW/IE6AU= Subject key identifier: EE:E7:5D:47:AA:8B:9F:84:B8:DF:AB:E1:AB:9C:DB:B4:00:22:1E:AD Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89 Certificate issuer: /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589 Certificate serial: 0448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft Manifest number: 04F2 Signing time: Fri 25 Apr 2025 00:08:50 +0000 Manifest this update: Fri 25 Apr 2025 00:08:50 +0000 Manifest next update: Fri 02 May 2025 00:08:50 +0000 Files and hashes: 1: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl (hash: FjtuX2xds4+ilhyzsbpulEQRpP9WCT1r9KYmy+XMfZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1096 (0x448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589 Validity Not Before: Apr 25 00:08:50 2025 GMT Not After : May 2 00:08:50 2025 GMT Subject: CN=680ad292-ba2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:cf:23:c1:82:ec:33:80:5c:4d:db:a7:58: 76:83:79:7f:64:07:21:83:3d:7d:5c:74:fd:b4:92: 18:39:63:80:22:12:87:93:c7:83:25:bb:ed:d4:77: af:a1:22:e5:d3:34:33:ff:21:48:79:42:13:41:bf: 7a:26:cf:eb:c8:39:58:15:0c:eb:5b:0d:9e:77:35: e9:b6:97:c1:89:d6:c1:4b:e0:33:b2:e0:b2:ed:61: 8d:c9:6e:38:c7:ad:0f:95:83:1d:13:4a:76:61:06: 16:de:54:65:c6:4a:3c:08:ca:77:d5:0d:99:fa:09: 9b:5d:a3:a3:38:d2:0e:c7:93:cd:6c:24:16:db:98: df:9f:16:0c:ee:79:b8:04:e6:ea:e3:c6:bc:11:a0: 17:a9:fd:84:d3:c6:6a:b0:4e:d3:be:f1:05:04:68: 61:64:f0:8b:a8:ce:09:4b:c1:a2:cf:dc:e2:f6:af: 5d:5e:df:97:58:90:9a:37:45:e0:33:63:91:aa:c0: 76:6e:04:75:c3:6e:55:4c:79:63:e5:05:49:5d:0b: c1:d0:2c:06:08:b1:31:68:89:2a:a8:db:c1:4b:ef: a7:48:30:1f:43:74:9b:cf:a4:4e:7c:70:ed:03:21: ad:19:04:a0:59:fb:ee:73:48:b9:ff:b5:de:3d:da: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E7:5D:47:AA:8B:9F:84:B8:DF:AB:E1:AB:9C:DB:B4:00:22:1E:AD X509v3 Authority Key Identifier: keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ab:30:d9:dd:a0:aa:d4:c4:46:2a:0b:91:57:e6:88:9e:92: 90:b3:c3:1d:c9:67:90:b6:34:0b:5c:d9:61:6f:91:1a:0d:ca: 8e:ae:76:bf:3f:89:fb:88:c0:9f:e4:89:35:9c:35:49:3e:ad: 24:a1:1d:03:4f:7b:d9:de:e4:e6:7d:4e:79:3a:f4:2c:72:a3: 1d:41:ff:cc:a7:35:1a:f6:2a:ea:2c:10:0d:25:d1:71:08:8d: c5:1f:de:e4:85:7e:ba:50:89:59:ba:25:2e:b3:2e:2e:4f:79: a5:5c:95:b7:a4:fb:20:8d:b2:34:02:c5:79:56:d1:6e:5b:64: f1:d4:99:66:9b:c3:f5:f3:4b:be:a4:8f:2e:d9:6a:fa:bc:13: 44:ce:0f:b9:c9:6a:e7:4b:19:a5:ec:40:eb:31:5e:09:9a:ed: 42:b5:2c:fc:da:50:a2:c1:b3:99:bf:35:62:c0:1e:a4:b6:15: b1:3d:b1:f3:48:d8:c0:0c:94:03:ac:f2:62:9c:65:08:3c:9e: 9b:33:f8:92:b4:85:4d:ab:e1:42:5f:00:cf:8f:21:43:e7:59: 54:ec:e8:90:6a:fe:f3:b7:e7:20:7a:db:85:a2:6f:11:ff:c4: 1a:42:82:12:f9:a0:a5:ef:b3:83:52:48:8a:8e:98:cf:d0:d1: 82:f5:25:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKEZDNzRCMjVDMERBRDg5M0UxOUU1MjJEQUQ5RDlDMDEy RUI4MkY1ODkwHhcNMjUwNDI1MDAwODUwWhcNMjUwNTAyMDAwODUwWjAYMRYwFAYD VQQDEw02ODBhZDI5Mi1iYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyLPI8GC7DOAXE3bp1h2g3l/ZAchgz19XHT9tJIYOWOAIhKHk8eDJbvt1Hev oSLl0zQz/yFIeUITQb96Js/ryDlYFQzrWw2edzXptpfBidbBS+AzsuCy7WGNyW44 x60PlYMdE0p2YQYW3lRlxko8CMp31Q2Z+gmbXaOjONIOx5PNbCQW25jfnxYM7nm4 BObq48a8EaAXqf2E08ZqsE7TvvEFBGhhZPCLqM4JS8Giz9zi9q9dXt+XWJCaN0Xg M2ORqsB2bgR1w25VTHlj5QVJXQvB0CwGCLExaIkqqNvBS++nSDAfQ3Sbz6ROfHDt AyGtGQSgWfvuc0i5/7XePdrHLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7nXUeq i5+EuN+r4auc27QAIh6tMB8GA1UdIwQYMBaAFPx0slwNrYk+GeUi2tnZwBLrgvWJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlUNFo1U0xhMmRuQUV1dUM5 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IU3lYQTJ0aVQ0WjVTTGEyZG5BRXV1QzlZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlU NFo1U0xhMmRuQUV1dUM5WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5qzDZ3aCq1MRGKguRV+aInpKQs8MdyWeQtjQLXNlhb5EaDcqOrna/ P4n7iMCf5Ik1nDVJPq0koR0DT3vZ3uTmfU55OvQscqMdQf/MpzUa9irqLBANJdFx CI3FH97khX66UIlZuiUusy4uT3mlXJW3pPsgjbI0AsV5VtFuW2Tx1Jlmm8P180u+ pI8u2Wr6vBNEzg+5yWrnSxml7EDrMV4Jmu1CtSz82lCiwbOZvzViwB6kthWxPbHz SNjADJQDrPJinGUIPJ6bM/iStIVNq+FCXwDPjyFD51lU7OiQav7zt+cgetuFom8R /8QaQoIS+aCl77ODUkiKjpjP0NGC9SWz -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:45 2025 by rpki-client