$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: PNBo8XGGOlqIYT+Ghs0KuRv8Gr1ms08virIX3xEHUvU= Subject key identifier: 62:E3:55:7A:C6:DE:E3:1E:E7:84:04:21:17:B1:6D:86:84:87:90:83 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0AF1 Signing time: Thu 24 Apr 2025 19:15:12 +0000 Manifest this update: Thu 24 Apr 2025 19:15:11 +0000 Manifest next update: Thu 01 May 2025 19:15:11 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: 4bWneLXLH49KIgoq1ZlD4WB/eVkhpLt6d8di7TulDac=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Apr 24 19:15:11 2025 GMT Not After : May 1 19:15:11 2025 GMT Subject: CN=680a8dc0-6285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:ac:05:79:3b:25:a6:55:e6:82:64:71:7d: 35:cb:88:4e:36:36:d5:bc:a1:09:60:db:3b:53:d4: 39:50:63:e2:f2:56:ce:b1:a4:a1:b5:0e:8b:77:6a: 60:13:1a:31:ea:bb:d1:e0:38:b8:e8:fb:97:29:88: b4:d4:7a:00:83:e2:f0:af:20:b1:37:f5:a6:c6:35: b6:d2:38:5e:37:8c:c3:a1:0a:29:e5:84:92:54:35: 85:96:aa:e9:ac:d6:67:cb:6d:b0:5e:d5:5a:4f:78: df:17:d2:58:9d:db:16:ba:6a:1a:23:94:78:a2:46: 2c:70:9f:27:40:7c:fc:10:46:5f:fb:17:c7:91:a5: 4d:72:8e:36:23:d3:d5:3e:d3:b1:1c:0f:dc:dc:e8: 5c:e2:e5:6e:c9:36:82:48:62:f0:38:0c:4b:02:d8: 22:2b:6b:13:16:74:0d:4d:28:fe:23:45:3f:8f:0d: 87:8b:91:86:fb:31:4c:4d:88:cc:d5:c7:48:30:66: 0d:39:99:5e:5f:c2:70:15:6c:2c:d6:2a:ac:97:e9: b8:ef:78:60:3d:a5:e0:32:9b:6f:11:3b:0e:20:5a: 94:04:3b:3b:67:41:9c:77:80:42:3f:c4:e5:69:3c: f2:66:d7:d8:d6:33:01:be:fe:43:e4:ae:3a:e6:d4: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:55:7A:C6:DE:E3:1E:E7:84:04:21:17:B1:6D:86:84:87:90:83 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4d:26:b6:36:86:40:02:b2:78:61:24:13:6c:17:dd:b2:94: 1d:72:3c:fb:82:44:a8:96:c0:fb:ca:a2:83:8e:e2:95:16:c3: fd:41:2d:9d:13:60:af:bd:5f:ca:b1:4f:a2:92:d5:d4:c0:ae: 29:70:45:d8:50:39:1d:e4:f8:1e:27:c7:01:ec:79:ca:07:0b: 70:90:4a:b0:95:a7:b4:ad:32:80:a4:bb:88:da:86:c7:46:1e: 2f:e0:d5:be:73:ce:36:ae:12:a1:8d:28:d6:8d:bf:a9:64:0b: e8:a6:15:2e:b5:c7:c3:2d:0a:f0:de:be:f3:7e:b9:92:3f:e7: 9c:91:39:ff:c9:ef:2b:c4:4e:8f:a9:4b:06:b7:df:ce:61:f1: 00:8b:ed:49:1e:bc:f6:e6:ef:e6:9f:12:ed:7d:f1:33:64:4f: c6:c6:72:d2:0b:fd:5c:e9:32:7e:41:e3:42:77:ce:c3:33:99: e7:17:a9:51:bb:fe:a5:de:4e:d5:b7:00:be:a3:cc:32:15:7f: 7d:27:3a:be:ca:6f:f1:df:e1:06:fc:1d:b5:0d:8e:80:3a:a9: f1:f9:d2:19:cf:09:76:9c:78:1a:a1:25:d4:b6:3a:0f:c3:4e: ee:75:b9:1c:e8:5f:ba:e6:1d:f7:53:29:a7:24:a8:6d:bd:b6: ea:54:45:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUwNDI0MTkxNTExWhcNMjUwNTAxMTkxNTExWjAYMRYwFAYD VQQDEw02ODBhOGRjMC02Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu62sBXk7JaZV5oJkcX01y4hONjbVvKEJYNs7U9Q5UGPi8lbOsaShtQ6Ld2pg Exox6rvR4Di46PuXKYi01HoAg+LwryCxN/WmxjW20jheN4zDoQop5YSSVDWFlqrp rNZny22wXtVaT3jfF9JYndsWumoaI5R4okYscJ8nQHz8EEZf+xfHkaVNco42I9PV PtOxHA/c3Ohc4uVuyTaCSGLwOAxLAtgiK2sTFnQNTSj+I0U/jw2Hi5GG+zFMTYjM 1cdIMGYNOZleX8JwFWws1iqsl+m473hgPaXgMptvETsOIFqUBDs7Z0Gcd4BCP8Tl aTzyZtfY1jMBvv5D5K465tSD7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLjVXrG 3uMe54QEIRexbYaEh5CDMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANTSa2NoZAArJ4YSQTbBfdspQdcjz7gkSolsD7yqKDjuKVFsP9QS2d E2CvvV/KsU+iktXUwK4pcEXYUDkd5PgeJ8cB7HnKBwtwkEqwlae0rTKApLuI2obH Rh4v4NW+c842rhKhjSjWjb+pZAvophUutcfDLQrw3r7zfrmSP+eckTn/ye8rxE6P qUsGt9/OYfEAi+1JHrz25u/mnxLtffEzZE/GxnLSC/1c6TJ+QeNCd87DM5nnF6lR u/6l3k7VtwC+o8wyFX99Jzq+ym/x3+EG/B21DY6AOqnx+dIZzwl2nHgaoSXUtjoP w07udbkc6F+65h33UymnJKhtvbbqVEWr -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:48 2025 by rpki-client