$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: pOcqzYwxyq16naU8LQ0xJjsmCATaBlTnG+AHkpjLPAg= Subject key identifier: 2A:4A:5E:D5:03:0E:EA:FF:05:21:06:C6:8C:92:18:3F:F8:CD:E7:66 Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 346E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 346D Signing time: Thu 24 Apr 2025 15:13:29 +0000 Manifest this update: Thu 24 Apr 2025 15:13:29 +0000 Manifest next update: Thu 01 May 2025 15:13:29 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: /1JlHktmbFh3ZZY2KRRMLW6OwoxVTc+aANw8wjfDo8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13422 (0x346e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Apr 24 15:13:29 2025 GMT Not After : May 1 15:13:29 2025 GMT Subject: CN=680a5519-8cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:79:14:c5:f1:3d:b0:b8:fe:f3:c7:35:af:70: 34:c9:40:46:1e:3b:02:53:26:f2:cc:20:9d:29:10: 40:43:26:56:05:3f:bb:94:67:ec:c2:ee:88:35:42: 66:9d:c1:d9:df:ba:20:f3:5e:a7:d4:a9:63:ae:d6: ad:f5:d5:1a:7e:b4:09:59:88:73:af:64:aa:86:e0: e6:74:fc:59:3e:37:1d:24:8c:e6:43:03:aa:32:ae: a5:9a:3f:5c:5e:41:21:fa:dd:33:91:ac:2d:ba:ec: d8:6d:3d:f0:c5:21:0d:b1:b6:74:86:a5:9f:a2:ee: 94:61:bc:c1:0a:96:94:62:cf:67:4e:57:44:a5:1e: 99:5b:e8:29:5d:e1:9f:59:24:db:c6:73:ec:40:78: 87:58:6c:29:e7:8a:e6:a5:e4:06:bd:96:5c:49:36: ca:5d:25:c6:b8:d1:ae:93:d5:27:4f:26:2e:6c:20: d4:68:16:08:3f:1a:f0:7a:51:54:5c:c7:5b:47:3e: a5:92:6a:06:cf:66:2e:49:21:fa:fc:9c:f2:61:59: 48:e9:53:22:be:1c:7e:87:6a:f5:61:06:e0:16:91: 46:ba:a1:8d:9d:1c:f0:af:cc:aa:ed:32:aa:42:f8: da:d2:4c:08:4f:6c:c0:46:4a:83:5f:a8:be:0a:60: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:5E:D5:03:0E:EA:FF:05:21:06:C6:8C:92:18:3F:F8:CD:E7:66 X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:62:ee:50:78:36:7c:60:7e:05:f8:a1:f8:f6:41:9e:88:c8: 18:b4:c5:54:d7:16:c7:d6:4d:d5:a6:6e:96:19:f8:82:0e:81: 7d:40:67:5f:31:9c:f2:35:aa:f5:a1:72:a5:23:e3:a6:ef:ee: 15:16:b3:da:b7:26:0b:49:fb:3c:63:b0:32:2f:ba:ef:62:ba: bf:f6:b5:e3:94:c3:08:a1:c7:10:19:e3:8b:84:f0:ef:39:8c: f3:e1:68:65:16:ae:53:b5:7d:df:ef:33:d1:07:fc:19:93:a3: f7:7c:1b:54:c7:c3:89:f5:1e:64:43:38:a6:31:e3:18:20:7e: 28:f6:04:b5:ab:91:f1:67:ef:c8:ce:40:d2:ba:30:80:60:33: bd:a1:c8:b1:91:47:dd:43:ff:ec:48:45:5c:aa:26:33:38:44: 2f:c0:50:f1:90:5a:c4:7b:37:25:a4:89:e5:d7:66:6a:d8:4a: fb:5b:d5:78:c6:84:a7:63:04:90:59:3d:4e:f1:e6:3a:cf:5c: 88:db:95:41:39:86:f9:bd:6f:1c:3b:51:2d:3f:b9:c3:5b:1f: 97:f8:2f:a4:8b:2c:4c:5b:89:1a:7c:a0:58:43:cb:9d:bc:e0: 9b:a0:65:c1:4d:57:a0:85:83:2a:b2:f5:ec:fe:23:4c:9e:91: fe:82:14:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjUwNDI0MTUxMzI5WhcNMjUwNTAxMTUxMzI5WjAYMRYwFAYD VQQDEw02ODBhNTUxOS04Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9XkUxfE9sLj+88c1r3A0yUBGHjsCUybyzCCdKRBAQyZWBT+7lGfswu6INUJm ncHZ37og816n1Kljrtat9dUafrQJWYhzr2SqhuDmdPxZPjcdJIzmQwOqMq6lmj9c XkEh+t0zkawtuuzYbT3wxSENsbZ0hqWfou6UYbzBCpaUYs9nTldEpR6ZW+gpXeGf WSTbxnPsQHiHWGwp54rmpeQGvZZcSTbKXSXGuNGuk9UnTyYubCDUaBYIPxrwelFU XMdbRz6lkmoGz2YuSSH6/JzyYVlI6VMivhx+h2r1YQbgFpFGuqGNnRzwr8yq7TKq Qvja0kwIT2zARkqDX6i+CmD4jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpKXtUD Dur/BSEGxoySGD/4zedmMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkYu5QeDZ8YH4F+KH49kGeiMgYtMVU1xbH1k3Vpm6WGfiCDoF9QGdf MZzyNar1oXKlI+Om7+4VFrPatyYLSfs8Y7AyL7rvYrq/9rXjlMMIoccQGeOLhPDv OYzz4WhlFq5TtX3f7zPRB/wZk6P3fBtUx8OJ9R5kQzimMeMYIH4o9gS1q5HxZ+/I zkDSujCAYDO9ocixkUfdQ//sSEVcqiYzOEQvwFDxkFrEezclpInl12Zq2Er7W9V4 xoSnYwSQWT1O8eY6z1yI25VBOYb5vW8cO1EtP7nDWx+X+C+kiyxMW4kafKBYQ8ud vOCboGXBTVeghYMqsvXs/iNMnpH+ghSz -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:35 2025 by rpki-client