$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft File: 276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json) Hash identifier: bEetXclyhgrpTNV32+ou+1q1xC9H7VmeFybGxKozntk= Subject key identifier: 0D:DF:AD:1E:19:03:24:2A:EF:FC:47:8B:70:E8:A3:EA:2F:B4:01:1E Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft Manifest number: 074E Signing time: Thu 24 Apr 2025 21:28:44 +0000 Manifest this update: Thu 24 Apr 2025 21:28:43 +0000 Manifest next update: Thu 01 May 2025 21:28:43 +0000 Files and hashes: 1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: L6IIDdyL+qhrsxLzhBeSf/XV5zs4GYXUHmgXIx+Vd2E=) 2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: di3lTW+SGjtdOdKQhu7ngXS2N/Oh8YrYx17MC5hYJgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Validity Not Before: Apr 24 21:28:43 2025 GMT Not After : May 1 21:28:43 2025 GMT Subject: CN=680aad0b-ec8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:4a:46:81:91:5d:0d:d6:e5:63:4e:da:44: 50:b3:d1:8d:9f:cb:b4:72:ee:28:87:1c:d8:12:86: 7e:b0:c9:62:d9:cd:b0:42:b5:9a:87:b5:b9:84:c0: 90:65:8d:9e:da:aa:d6:85:53:7b:f9:88:c2:8f:27: 90:95:d0:b8:3f:12:fb:ea:87:29:67:79:e3:34:03: 8a:b0:1e:16:36:c4:19:07:da:89:82:10:a8:bc:e5: ea:4f:2e:20:ce:d9:19:25:1b:3e:8a:84:57:3e:f1: ca:83:0e:cf:9d:69:13:c2:1b:0a:cb:09:da:14:bf: 7f:80:15:02:d0:6d:21:f5:57:e7:ee:2c:c2:9d:f4: 2c:11:9b:6d:8e:a1:9c:1d:7e:93:99:65:6d:da:6d: 1d:94:cf:48:c2:08:03:8e:5b:9a:52:d1:87:a6:76: 7b:f6:5b:ab:ca:0a:58:17:16:e4:18:9f:61:8f:af: 0b:b1:7a:92:8c:cb:8b:9b:93:bc:4d:a5:c4:78:71: 2d:4b:37:84:2b:e2:41:77:d9:aa:f9:43:2a:6e:44: 6e:4e:1e:0c:96:b9:03:b9:68:93:de:ad:96:f9:71: 90:ef:3a:68:f3:9d:a7:f9:06:cc:34:90:5d:57:c3: 84:26:ba:35:69:90:5f:fa:8b:b2:0e:6f:56:8e:13: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DF:AD:1E:19:03:24:2A:EF:FC:47:8B:70:E8:A3:EA:2F:B4:01:1E X509v3 Authority Key Identifier: keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b4:f8:48:45:0a:a3:ef:cb:17:88:f1:75:6b:f0:9f:d5:06: 81:21:10:9f:2d:f8:58:d8:ff:48:2e:e7:8d:c1:55:b0:1b:bb: 14:b3:6f:bd:4a:92:b1:9d:e1:2f:e9:a4:3a:45:80:70:43:79: 2d:03:dd:24:5f:a8:12:05:b3:b9:cc:3e:2e:f0:c5:6e:e5:fa: b9:22:8b:09:fc:5a:55:d0:00:0e:95:8c:55:14:8b:cd:05:a9: 9e:15:a0:5f:22:b6:7e:d3:59:2f:62:a7:68:e9:f9:cb:da:9a: 33:e8:22:13:28:93:a1:18:a0:2b:d0:6b:d0:1e:db:b8:17:45: 53:5b:52:a6:12:20:9b:12:52:40:14:72:37:2c:9e:9e:58:1a: a0:69:a2:bf:4c:b4:75:66:d9:18:e1:69:a2:34:30:58:db:1d: 7c:00:b8:be:63:ad:ff:f1:58:e6:78:5f:82:93:56:bb:cc:b2: 11:11:22:4d:30:79:7f:90:0a:c2:ce:64:34:5d:a7:0b:97:bd: a1:a0:90:06:c6:c3:ad:e5:48:69:32:c0:1c:25:3d:c6:b4:ea: 4b:fe:b7:50:d7:5b:b8:a7:21:91:b7:2e:ae:fa:4a:3b:d0:07: 08:2d:1a:ba:86:c7:04:a0:8f:23:09:94:8a:9a:2f:ae:08:b6: f4:57:96:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1 QkU5ODFCRjAwHhcNMjUwNDI0MjEyODQzWhcNMjUwNTAxMjEyODQzWjAYMRYwFAYD VQQDEw02ODBhYWQwYi1lYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshxKRoGRXQ3W5WNO2kRQs9GNn8u0cu4ohxzYEoZ+sMli2c2wQrWah7W5hMCQ ZY2e2qrWhVN7+YjCjyeQldC4PxL76ocpZ3njNAOKsB4WNsQZB9qJghCovOXqTy4g ztkZJRs+ioRXPvHKgw7PnWkTwhsKywnaFL9/gBUC0G0h9Vfn7izCnfQsEZttjqGc HX6TmWVt2m0dlM9IwggDjluaUtGHpnZ79lurygpYFxbkGJ9hj68LsXqSjMuLm5O8 TaXEeHEtSzeEK+JBd9mq+UMqbkRuTh4MlrkDuWiT3q2W+XGQ7zpo852n+QbMNJBd V8OEJro1aZBf+ouyDm9WjhM2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3frR4Z AyQq7/xHi3Doo+ovtAEeMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAzQS85MjZCNDNFODIxOTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BU dmdXN1cyQWg5MVJiNllHX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEtPhIRQqj78sXiPF1a/Cf1QaBIRCfLfhY2P9ILueNwVWwG7sUs2+9 SpKxneEv6aQ6RYBwQ3ktA90kX6gSBbO5zD4u8MVu5fq5IosJ/FpV0AAOlYxVFIvN BameFaBfIrZ+01kvYqdo6fnL2poz6CITKJOhGKAr0GvQHtu4F0VTW1KmEiCbElJA FHI3LJ6eWBqgaaK/TLR1ZtkY4WmiNDBY2x18ALi+Y63/8VjmeF+Ck1a7zLIRESJN MHl/kArCzmQ0XacLl72hoJAGxsOt5UhpMsAcJT3GtOpL/rdQ11u4pyGRty6u+ko7 0AcILRq6hscEoI8jCZSKmi+uCLb0V5aS -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:30 2025 by rpki-client