$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft File: HIAVCsljCYTTjMb1nD7MdRsl8-c.mft (raw, json) Hash identifier: j0rbXf/yeMOkHpR9h7i1hw3cj7T0/6aTwH7BMoL845E= Subject key identifier: A2:B6:96:94:10:D7:40:19:71:86:31:47:27:37:72:49:F8:63:55:FF Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7 Certificate issuer: /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft Manifest number: 36 Signing time: Fri 25 Apr 2025 06:35:35 +0000 Manifest this update: Fri 25 Apr 2025 06:35:34 +0000 Manifest next update: Fri 02 May 2025 06:35:34 +0000 Files and hashes: 1: HIAVCsljCYTTjMb1nD7MdRsl8-c.crl (hash: qpF7NOTKs6OWprE2XNn4Jl6FRpUi2eVVNVKnfBiStd8=) 2: E9B51C0AD24411EFBD747915C4F9AE02.roa (hash: +/MtM2hDxMNaMHeSlqVRdtGrwCOT56lMUqqstQGV8bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A549, serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7 Validity Not Before: Apr 25 06:35:34 2025 GMT Not After : May 2 06:35:34 2025 GMT Subject: CN=680b2d36-81fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:4f:49:d6:48:4b:23:d2:ce:92:39:30:74: a9:3e:a3:7c:3f:f2:e9:8b:de:f5:be:8d:a9:d7:e2: 3b:e0:5e:af:c8:d0:58:ab:f0:09:3f:61:38:4c:93: 1b:a6:37:1b:7e:b2:12:ac:86:a0:60:43:68:c3:09: 93:26:8a:39:b7:00:a9:da:f8:b2:f7:73:8a:10:25: 30:33:95:a4:ca:8f:4a:e3:42:43:6d:96:c9:a5:b4: 1e:99:c6:72:68:cd:a6:fc:d0:82:24:3c:5c:dc:7a: 52:b6:b6:c5:dd:94:79:7c:97:f7:3d:e0:fe:64:e1: 46:5f:4a:a9:e9:5b:3a:72:a0:bf:ca:f5:e1:7d:64: e4:c7:f2:11:d5:2f:8f:7a:be:5e:12:b2:20:b0:61: 68:1f:8f:57:d0:ef:87:dc:d0:81:06:76:9d:d0:30: d4:1b:6d:c2:4e:06:69:c5:df:c4:b2:e1:cc:9e:d1: 97:c3:68:5a:7a:09:53:d1:69:c3:31:c4:bc:38:fd: 74:8a:09:3a:04:f2:4b:b3:b4:d9:54:0c:62:27:8f: 42:86:4e:80:c4:46:1e:51:1f:6d:e4:3b:31:0f:0a: a6:ae:ba:15:43:a1:89:49:39:03:b3:30:47:a2:a2: a5:cf:cc:91:57:04:e7:30:b2:27:30:6d:21:66:8e: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:96:94:10:D7:40:19:71:86:31:47:27:37:72:49:F8:63:55:FF X509v3 Authority Key Identifier: keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:01:a8:c3:09:cd:16:fa:18:49:56:86:be:ae:ef:e7:07:ec: a0:ef:47:4c:22:08:3a:77:e8:bd:ac:10:b0:93:e3:18:11:ea: 09:75:dc:9c:b8:95:94:1c:23:70:cd:85:9f:d2:8d:67:9d:49: a1:3c:0b:48:9a:50:73:e9:47:6f:65:80:0d:2e:c0:b1:ca:96: a3:e1:af:ee:47:9b:97:68:91:e9:44:8b:a4:7e:0c:d2:b3:79: 13:a2:0f:f4:2c:c0:96:ac:fe:52:1b:cb:62:91:2c:79:1a:3c: 97:44:3c:7b:c3:54:36:0b:cb:c9:f6:6b:aa:5b:48:1d:f9:8f: d5:96:b0:9b:b3:e1:91:b0:45:47:2a:d3:21:b3:2c:1c:ce:e5: cf:d5:d0:ab:68:21:59:3b:2c:e6:1a:c5:16:0a:92:de:65:6a: a2:9d:81:18:5b:40:c6:c4:21:85:4b:66:4d:ec:fd:36:2e:b0: 6c:52:f7:48:5f:1d:40:32:f6:56:a4:39:b2:39:7e:2e:72:64: a6:70:02:b6:1f:c1:dd:41:b1:32:70:62:8f:45:a5:c0:bc:1b: cf:b6:6e:0a:19:fc:af:c0:2f:2c:8e:60:c9:18:30:b3:08:37: 1a:72:c4:80:73:23:cd:45:f0:08:46:b8:38:d9:23:e9:28:0b: c0:ec:b7:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTU0OTExMC8GA1UEBRMoMUM4MDE1MEFDOTYzMDk4NEQzOENDNkY1OUMzRUNDNzUx QjI1RjNFNzAeFw0yNTA0MjUwNjM1MzRaFw0yNTA1MDIwNjM1MzRaMBgxFjAUBgNV BAMTDTY4MGIyZDM2LTgxZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqLU9J1khLI9LOkjkwdKk+o3w/8umL3vW+janX4jvgXq/I0Fir8Ak/YThMkxum Nxt+shKshqBgQ2jDCZMmijm3AKna+LL3c4oQJTAzlaTKj0rjQkNtlsmltB6ZxnJo zab80IIkPFzcelK2tsXdlHl8l/c94P5k4UZfSqnpWzpyoL/K9eF9ZOTH8hHVL496 vl4SsiCwYWgfj1fQ74fc0IEGdp3QMNQbbcJOBmnF38Sy4cye0ZfDaFp6CVPRacMx xLw4/XSKCToE8kuztNlUDGInj0KGToDERh5RH23kOzEPCqauuhVDoYlJOQOzMEei oqXPzJFXBOcwsicwbSFmjt0/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoraWlBDX QBlxhjFHJzdySfhjVf8wHwYDVR0jBBgwFoAUHIAVCsljCYTTjMb1nD7MdRsl8+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNTQ5LzREMjVCQ0FBRDI0 NDExRUY5RTY1NEIxNEM0RjlBRTAyL0hJQVZDc2xqQ1lUVGpNYjFuRDdNZFJzbDgt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSElBVkNzbGpDWVRUak1iMW5EN01kUnNsOC1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB NTQ5LzREMjVCQ0FBRDI0NDExRUY5RTY1NEIxNEM0RjlBRTAyL0hJQVZDc2xqQ1lU VGpNYjFuRDdNZFJzbDgtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0BqMMJzRb6GElWhr6u7+cH7KDvR0wiCDp36L2sELCT4xgR6gl13Jy4 lZQcI3DNhZ/SjWedSaE8C0iaUHPpR29lgA0uwLHKlqPhr+5Hm5dokelEi6R+DNKz eROiD/QswJas/lIby2KRLHkaPJdEPHvDVDYLy8n2a6pbSB35j9WWsJuz4ZGwRUcq 0yGzLBzO5c/V0KtoIVk7LOYaxRYKkt5laqKdgRhbQMbEIYVLZk3s/TYusGxS90hf HUAy9lakObI5fi5yZKZwArYfwd1BsTJwYo9FpcC8G8+2bgoZ/K/ALyyOYMkYMLMI NxpyxIBzI81F8AhGuDjZI+koC8Dst30= -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:33 2025 by rpki-client