$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: KMi/7Sq4SB+lo9Y2KG/sfblhWmkAQOe12bXpX+5HItc= Subject key identifier: 95:36:79:C1:1F:49:D2:1B:BA:A5:69:BA:9B:B4:35:2E:3C:DC:B7:95 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 34BB Signing time: Thu 24 Apr 2025 14:44:54 +0000 Manifest this update: Thu 24 Apr 2025 14:44:54 +0000 Manifest next update: Thu 01 May 2025 14:44:54 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: ngC2tfVZzYvsHfqXjVlobxHGrjGkRJHd6XrpMqgLzKc=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: yiAnHDFzUwZD8NgEs572n3xyr3663E+/9a3ArADXBpc=) 3: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: WlVHKhM+QwijE+SR8uQjozWScXJjKVRCH43Kmj5ogqo=) 4: 9E6876BCE2C911EF9C706014C4F9AE02.roa (hash: HpL5s0fx/k48lcKkhw5hAynAHc+E2GbcH0xb8v2hOgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Apr 24 14:44:54 2025 GMT Not After : May 1 14:44:54 2025 GMT Subject: CN=680a4e66-11ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:fb:06:e7:71:a9:49:e9:76:29:33:f3:1d: b7:67:79:9c:74:2b:cc:1a:48:ba:6f:c1:5f:47:46: 7a:b1:24:cf:e3:a2:3a:df:71:6e:0d:ca:db:12:47: cc:1e:95:84:cf:d2:dd:e7:2e:65:99:3c:cb:9f:12: da:d1:98:05:bb:4f:05:9a:50:bd:6e:0f:ae:9a:28: be:52:2c:eb:83:1c:85:c9:81:2d:97:f6:f7:f8:26: 89:50:e0:e8:f5:a3:f6:ac:5b:a3:46:5c:d3:55:42: 9f:8f:a5:9c:4c:bc:66:a5:ca:f0:3b:91:f4:03:3f: 74:b0:49:d1:28:8c:d5:72:2e:4d:9b:0e:dd:ec:f3: 38:51:17:18:d3:8b:62:6e:77:33:25:53:45:d7:03: 31:96:2e:da:d0:f4:0a:09:fa:11:14:ff:b9:6c:ca: a9:77:4d:04:d7:71:39:99:49:da:18:a1:6e:7e:5d: 7e:6c:20:61:60:67:80:31:cc:bf:dc:4e:ad:a3:5b: 92:ea:3d:b9:62:17:42:3f:63:4d:44:ee:29:78:98: 1e:9f:e7:92:37:f0:49:ec:9a:64:40:72:52:59:62: ad:ad:0f:c6:55:61:0e:d0:0d:c7:87:62:0d:c2:81: 13:1c:42:e0:44:f1:2a:0e:fa:d5:c5:d5:c3:dd:33: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:36:79:C1:1F:49:D2:1B:BA:A5:69:BA:9B:B4:35:2E:3C:DC:B7:95 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:73:a6:9c:93:17:95:a8:6a:a4:82:cc:fd:8a:65:56:3f:fa: 60:bc:b5:91:32:b8:a6:ec:3f:0e:c2:1b:f0:eb:ef:12:70:fd: d2:b4:e9:9b:61:a0:94:70:ef:e4:8c:5d:8a:f2:05:2b:5e:14: cf:75:7e:56:b0:47:9f:f2:25:51:df:b5:5d:ac:84:79:d0:8d: da:24:8d:e1:25:71:5f:da:cb:80:c2:69:1c:10:67:e7:04:e0: 02:79:e2:e0:ce:70:92:c5:cf:3c:70:b5:9c:3e:58:28:f9:13: a4:b4:db:5c:d5:0f:1b:00:e7:9f:3c:60:d0:d6:2d:4d:6c:3f: 85:3f:ce:4f:e0:2f:e8:9f:a2:d0:36:2b:94:ae:78:d7:1b:99: c0:31:8a:0b:f5:29:dd:9c:a7:67:be:17:45:d6:90:a2:0e:44: 22:97:d1:50:f9:a0:38:f6:fe:ae:44:53:ab:70:05:da:55:dc: 24:fb:95:f0:bc:92:1f:3e:b5:68:dd:82:fc:cd:e5:ac:84:29: bd:b4:39:de:27:b3:6d:7b:58:95:5d:d7:c5:40:de:a4:eb:a0: 1a:59:0c:63:f0:eb:2a:7e:d2:b6:b5:83:5d:86:84:ee:42:c2: 50:9e:d5:80:ed:67:cf:3e:c4:f0:91:38:1d:26:d1:0b:d8:12: 7c:31:e0:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUwNDI0MTQ0NDU0WhcNMjUwNTAxMTQ0NDU0WjAYMRYwFAYD VQQDEw02ODBhNGU2Ni0xMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuET7BudxqUnpdikz8x23Z3mcdCvMGki6b8FfR0Z6sSTP46I633FuDcrbEkfM HpWEz9Ld5y5lmTzLnxLa0ZgFu08FmlC9bg+umii+UizrgxyFyYEtl/b3+CaJUODo 9aP2rFujRlzTVUKfj6WcTLxmpcrwO5H0Az90sEnRKIzVci5Nmw7d7PM4URcY04ti bnczJVNF1wMxli7a0PQKCfoRFP+5bMqpd00E13E5mUnaGKFufl1+bCBhYGeAMcy/ 3E6to1uS6j25YhdCP2NNRO4peJgen+eSN/BJ7JpkQHJSWWKtrQ/GVWEO0A3Hh2IN woETHELgRPEqDvrVxdXD3TOdeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU2ecEf SdIbuqVpupu0NS483LeVMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvc6ackxeVqGqkgsz9imVWP/pgvLWRMrim7D8Owhvw6+8ScP3StOmb YaCUcO/kjF2K8gUrXhTPdX5WsEef8iVR37VdrIR50I3aJI3hJXFf2suAwmkcEGfn BOACeeLgznCSxc88cLWcPlgo+ROktNtc1Q8bAOefPGDQ1i1NbD+FP85P4C/on6LQ NiuUrnjXG5nAMYoL9SndnKdnvhdF1pCiDkQil9FQ+aA49v6uRFOrcAXaVdwk+5Xw vJIfPrVo3YL8zeWshCm9tDneJ7Nte1iVXdfFQN6k66AaWQxj8OsqftK2tYNdhoTu QsJQntWA7WfPPsTwkTgdJtEL2BJ8MeDh -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:41 2025 by rpki-client