$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: tOJ0T0+nngNhKqttHKGRyVjGCQo4hAcYpHrf78wVtBA= Subject key identifier: AA:66:D0:1C:99:73:83:25:3D:B7:8A:35:AE:F8:3D:CA:8F:CD:F6:2C Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0A67 Signing time: Thu 24 Apr 2025 19:32:32 +0000 Manifest this update: Thu 24 Apr 2025 19:32:31 +0000 Manifest next update: Thu 01 May 2025 19:32:31 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: ZOoct9ae6Us1SvPfWX1AiwpSnpIlT8IVzhiPY0T5IiQ=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Apr 24 19:32:31 2025 GMT Not After : May 1 19:32:31 2025 GMT Subject: CN=680a91cf-2bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:21:ba:bd:33:95:38:7b:4f:26:af:a8:9d: 10:41:bf:34:e3:f8:7e:16:dc:af:da:16:4b:0a:85: 74:49:5c:3c:ab:96:66:30:fd:fe:6c:21:05:62:18: 36:0a:50:db:52:ea:7c:cf:93:30:e3:a1:b7:ae:98: 3d:cf:7b:34:d8:4b:db:be:0f:77:83:d0:1f:af:81: 49:ff:18:f0:98:88:b1:f7:77:4f:06:4c:a1:8e:9c: 55:04:c1:45:6f:4d:3a:a0:97:89:7e:f0:0e:1b:76: 71:67:29:ee:9f:41:6f:36:e4:ac:08:7f:19:70:13: 45:70:66:ce:5b:ef:8b:d4:b1:ea:0c:42:12:97:90: f8:05:78:86:40:c4:a1:74:8b:2e:a2:26:a1:f3:36: 8f:59:ca:1e:13:0f:74:f8:b1:b0:4d:ec:59:88:22: ce:79:c0:12:8e:6f:25:ce:b0:13:64:7d:6c:b8:01: 51:1c:01:e5:21:54:1f:97:56:6a:9c:9e:66:b1:96: 18:8b:7e:9b:6c:3c:88:c6:7a:07:e3:d7:68:16:c5: 8e:03:e0:9a:56:4b:81:49:4a:34:05:34:7f:2c:c0: 86:92:35:92:a9:75:0e:67:79:67:8e:03:96:20:d4: be:c6:e0:4b:41:55:52:d8:df:fb:62:50:56:45:ab: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:D0:1C:99:73:83:25:3D:B7:8A:35:AE:F8:3D:CA:8F:CD:F6:2C X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:77:d1:9a:61:02:a8:20:44:ed:81:7e:5f:1e:59:ec:95:a4: 58:46:e0:08:7d:25:b2:f8:b0:27:26:3b:8e:d6:3f:77:bc:b1: 31:b0:62:7d:bc:3b:58:2c:24:9e:29:eb:2e:ff:c1:31:b7:68: d6:10:9e:13:8f:14:63:26:d5:2e:e4:b2:18:09:06:96:d4:88: 7e:2d:5f:8a:f6:5e:85:8e:ea:d0:4f:83:9c:b0:0b:78:da:5b: 4c:8d:91:95:1d:76:15:e1:2f:98:b3:cc:bb:19:12:40:81:e3: a4:36:8d:ec:61:d1:06:0a:85:75:f9:0f:e1:0a:12:23:4a:a3: 54:8c:80:21:33:3f:f2:4d:d1:77:73:9b:0b:bb:36:8d:3d:f4: 6d:3e:9a:a8:be:d8:c3:5f:df:e3:b3:a0:38:ee:16:5d:84:a4: e9:9f:4e:ee:67:19:0f:28:98:cb:30:73:f9:d6:3a:ef:f5:f4: 12:b5:97:1f:88:e9:43:c6:83:6e:13:e6:39:ad:29:ec:a1:1b: 8b:d0:2b:02:29:33:c1:3e:63:73:90:0e:dd:e0:a2:c4:62:32: b7:c7:1b:be:3c:f2:56:d7:d7:cc:d4:91:95:be:13:9b:04:e9: 38:ee:cb:e6:3b:12:7c:ec:c4:f2:0a:e4:09:82:27:61:ea:f7: 53:15:66:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwNDI0MTkzMjMxWhcNMjUwNTAxMTkzMjMxWjAYMRYwFAYD VQQDEw02ODBhOTFjZi0yYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt18hur0zlTh7TyavqJ0QQb804/h+Ftyv2hZLCoV0SVw8q5ZmMP3+bCEFYhg2 ClDbUup8z5Mw46G3rpg9z3s02Evbvg93g9Afr4FJ/xjwmIix93dPBkyhjpxVBMFF b006oJeJfvAOG3ZxZynun0FvNuSsCH8ZcBNFcGbOW++L1LHqDEISl5D4BXiGQMSh dIsuoiah8zaPWcoeEw90+LGwTexZiCLOecASjm8lzrATZH1suAFRHAHlIVQfl1Zq nJ5msZYYi36bbDyIxnoH49doFsWOA+CaVkuBSUo0BTR/LMCGkjWSqXUOZ3lnjgOW INS+xuBLQVVS2N/7YlBWRavSZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpm0ByZ c4MlPbeKNa74PcqPzfYsMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0d9GaYQKoIETtgX5fHlnslaRYRuAIfSWy+LAnJjuO1j93vLExsGJ9 vDtYLCSeKesu/8Ext2jWEJ4TjxRjJtUu5LIYCQaW1Ih+LV+K9l6FjurQT4OcsAt4 2ltMjZGVHXYV4S+Ys8y7GRJAgeOkNo3sYdEGCoV1+Q/hChIjSqNUjIAhMz/yTdF3 c5sLuzaNPfRtPpqovtjDX9/js6A47hZdhKTpn07uZxkPKJjLMHP51jrv9fQStZcf iOlDxoNuE+Y5rSnsoRuL0CsCKTPBPmNzkA7d4KLEYjK3xxu+PPJW19fM1JGVvhOb BOk47svmOxJ87MTyCuQJgidh6vdTFWZq -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:45 2025 by rpki-client