$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: za8arqwPGM5290q26gaxc+vlW/nQL8vw4Xyw6eBUCIM= Subject key identifier: EF:48:9D:47:42:12:86:1D:67:9F:F3:07:A1:16:24:7E:24:89:1C:05 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0B70 Signing time: Thu 24 Apr 2025 18:57:57 +0000 Manifest this update: Thu 24 Apr 2025 18:57:57 +0000 Manifest next update: Thu 01 May 2025 18:57:57 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: FWNcbY6VDE1mjGJWxdblt/maUNPw7pUujfg5JMv2dC4=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Apr 24 18:57:57 2025 GMT Not After : May 1 18:57:57 2025 GMT Subject: CN=680a89b5-276d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:9f:0f:39:26:f7:25:9d:78:ba:4e:83:93: b7:8f:c8:23:e3:b4:b3:61:04:9e:07:a4:88:ae:38: 76:4d:ae:fa:9c:00:19:0b:f8:27:f7:62:07:de:d6: 0e:bb:cf:6b:4a:f9:c3:e5:88:f0:32:62:a5:b5:56: 68:05:50:79:ff:e1:eb:82:34:46:db:92:29:33:08: 00:09:22:87:38:ff:f0:42:31:4f:98:9d:6a:7e:12: 14:f4:af:0b:cb:de:35:49:e6:31:0d:fa:e5:78:b3: 0d:76:86:1b:49:03:da:c6:5d:15:48:fb:d0:62:f8: fc:0e:42:39:e5:f8:b9:f0:c1:9a:4b:c9:bd:81:45: 42:a1:79:b1:2f:25:90:f9:85:72:44:9c:75:9a:bb: 1d:77:db:3d:79:d0:95:6f:6d:93:28:c0:ab:63:b6: c1:04:a1:df:4c:69:2e:89:2f:8f:07:ef:a8:d2:82: 9a:9a:26:af:d5:ec:36:f9:17:de:cc:d7:81:5f:ef: f5:bb:74:67:81:97:44:f1:2f:ae:50:a0:38:b4:be: 62:a3:78:48:3c:48:6c:02:82:ef:40:36:ab:d3:e1: 70:cb:72:d1:90:37:aa:7b:c1:9e:91:ef:29:7d:2a: 73:8e:07:bc:df:5c:81:e0:a0:2e:3c:e5:38:58:cb: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:48:9D:47:42:12:86:1D:67:9F:F3:07:A1:16:24:7E:24:89:1C:05 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:82:54:0a:93:ac:b1:43:0c:e8:29:58:de:7f:de:a0:4e:5f: 83:c2:d5:d2:d1:03:93:e6:ad:8c:cc:b7:dd:34:12:37:66:e2: 15:d3:f0:18:e0:cd:14:ea:68:6d:22:4d:be:a3:b0:97:77:3c: 79:26:67:ac:38:e7:19:97:c2:98:e5:3b:44:49:ee:30:5c:c1: 7c:88:98:b9:0c:91:f4:50:bc:54:fd:69:c9:e0:f9:77:2a:88: f1:69:88:24:0f:16:9a:76:12:e4:71:32:fa:60:26:a8:6a:13: 8b:12:1d:13:ab:06:93:c6:87:00:56:2d:9a:22:29:47:0a:c2: a7:88:45:3f:bf:1f:36:be:65:8a:cc:b8:9e:eb:e7:61:2c:2d: c2:0b:94:73:bd:df:67:71:22:07:65:e4:c0:d2:51:7d:16:5a: 02:73:a4:0c:64:9c:78:b5:56:8b:26:f5:e1:d5:af:53:3c:af: fa:d6:13:6e:94:5c:9d:95:58:3a:c8:5b:08:ca:ab:d7:49:e5: c2:01:6f:8b:b3:ed:58:27:5c:75:75:e9:a5:5c:5b:c0:4b:42: 09:7c:6e:fa:c4:ac:5b:ea:b4:c9:af:69:31:9c:d9:02:14:e4: 2c:ba:be:c1:bb:62:96:43:8f:13:7e:db:2f:39:18:2b:54:ea: 7d:a5:39:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUwNDI0MTg1NzU3WhcNMjUwNTAxMTg1NzU3WjAYMRYwFAYD VQQDEw02ODBhODliNS0yNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zGfDzkm9yWdeLpOg5O3j8gj47SzYQSeB6SIrjh2Ta76nAAZC/gn92IH3tYO u89rSvnD5YjwMmKltVZoBVB5/+HrgjRG25IpMwgACSKHOP/wQjFPmJ1qfhIU9K8L y941SeYxDfrleLMNdoYbSQPaxl0VSPvQYvj8DkI55fi58MGaS8m9gUVCoXmxLyWQ +YVyRJx1mrsdd9s9edCVb22TKMCrY7bBBKHfTGkuiS+PB++o0oKamiav1ew2+Rfe zNeBX+/1u3RngZdE8S+uUKA4tL5io3hIPEhsAoLvQDar0+Fwy3LRkDeqe8Geke8p fSpzjge831yB4KAuPOU4WMtv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9InUdC EoYdZ5/zB6EWJH4kiRwFMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmglQKk6yxQwzoKVjef96gTl+DwtXS0QOT5q2MzLfdNBI3ZuIV0/AY 4M0U6mhtIk2+o7CXdzx5JmesOOcZl8KY5TtESe4wXMF8iJi5DJH0ULxU/WnJ4Pl3 KojxaYgkDxaadhLkcTL6YCaoahOLEh0TqwaTxocAVi2aIilHCsKniEU/vx82vmWK zLie6+dhLC3CC5Rzvd9ncSIHZeTA0lF9FloCc6QMZJx4tVaLJvXh1a9TPK/61hNu lFydlVg6yFsIyqvXSeXCAW+Ls+1YJ1x1demlXFvAS0IJfG76xKxb6rTJr2kxnNkC FOQsur7Bu2KWQ48TftsvORgrVOp9pTnb -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:39 2025 by rpki-client