$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json) Hash identifier: 2dqN/G2HTn4PYAsB2PeQVz/cLdRbEkvEBSt6eWIj+k8= Subject key identifier: B8:9C:3B:11:A2:08:A7:DD:A2:25:30:2C:0D:B7:C0:90:56:42:83:C4 Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft Manifest number: 011B Signing time: Fri 25 Apr 2025 04:15:39 +0000 Manifest this update: Fri 25 Apr 2025 04:15:38 +0000 Manifest next update: Fri 02 May 2025 04:15:38 +0000 Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: l8QPPP3UfHnE3rT6qwxaCvU3F0JbC9C/6hTLfAFNXTc=) 2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: YC1hPH8mghnTJjDQYho998bjw91B3zrCEFjA4fVmKFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Validity Not Before: Apr 25 04:15:38 2025 GMT Not After : May 2 04:15:38 2025 GMT Subject: CN=680b0c6a-2ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:eb:f9:73:f6:80:3f:fd:3d:36:c0:b4:c2: 3d:b0:8c:f9:93:cc:dd:f3:81:82:16:89:18:dd:6c: ba:60:7d:4e:d9:fd:93:bd:bc:b0:d1:ea:09:2f:fd: a8:26:17:de:03:c4:16:82:b3:15:6e:ca:4d:fe:27: cb:79:ac:c3:ae:35:36:f7:48:9f:e5:2e:2b:7b:bd: 10:b2:de:62:9d:42:50:e7:7a:7e:a6:a2:7d:3d:51: ea:60:07:26:ba:80:5f:f4:a8:1c:cd:bf:30:91:b7: 1d:b6:bf:7c:58:24:bd:3b:c3:3d:e2:08:58:fc:2e: 8e:20:5b:1b:6e:ce:43:36:a3:9f:ad:ff:26:52:32: c9:28:97:ec:4d:db:ca:d0:ba:77:38:bc:1e:8c:e5: ef:14:10:e1:e1:e6:28:d5:2f:c4:e8:ab:a5:04:4a: 1f:ed:c3:db:f6:11:0a:33:7c:da:c0:40:b9:c6:77: 44:82:08:af:3a:be:7f:34:34:1f:ca:96:ba:58:e4: 70:5a:79:26:c0:44:b8:f9:e0:63:09:a0:33:5d:da: c8:77:1e:71:6c:2f:11:85:c0:81:a2:b7:09:1a:b8: fa:9e:64:2f:8c:8e:b1:05:e0:af:63:36:0f:e8:89: 90:0d:2f:b0:b1:4c:ff:98:33:f6:5f:ca:8c:9f:9a: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9C:3B:11:A2:08:A7:DD:A2:25:30:2C:0D:B7:C0:90:56:42:83:C4 X509v3 Authority Key Identifier: keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7d:a2:52:3f:63:5b:c6:64:5b:28:28:b6:79:25:ae:b1:b6: 65:ed:af:39:9c:50:a2:ce:4e:7c:dc:4d:64:4a:3c:27:1d:98: c3:c2:b6:38:f4:ac:6a:89:c3:ca:4d:22:11:d2:d9:90:bc:5c: 1c:84:88:67:21:0a:c8:9c:be:b4:9e:b9:d6:5c:d9:6e:d4:97: db:62:a4:30:05:e6:12:9d:9a:ad:d3:df:aa:ca:91:3b:2d:24: e4:80:7a:c4:08:d7:03:de:c7:82:35:6e:70:94:01:20:00:c5: f8:20:7d:82:40:e0:cb:f2:7f:2f:33:65:85:01:42:83:13:00: e5:d0:35:d7:01:62:ad:78:ad:5e:a2:eb:2f:ad:a6:e7:2d:cc: d6:56:16:00:5d:53:e6:24:5a:00:7b:da:c9:2a:72:99:65:43: 16:3d:60:1d:0f:72:34:4a:65:33:39:e0:60:93:c2:df:fd:47: 18:2e:28:e7:1d:7c:c4:dd:55:79:ec:bf:9c:f6:d3:fe:bb:2f: a4:33:38:77:f0:53:74:5c:13:77:4c:18:cb:00:8b:c6:3c:a5: 28:51:41:d8:ff:4c:ea:30:1a:14:b8:b5:5b:af:08:b1:67:ed: 2c:55:4b:4f:a8:30:54:c6:b6:bb:14:8b:8d:ce:be:bc:8b:c8: 06:e5:d7:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2 QjdGMThEMTIwHhcNMjUwNDI1MDQxNTM4WhcNMjUwNTAyMDQxNTM4WjAYMRYwFAYD VQQDEw02ODBiMGM2YS0yZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuifr+XP2gD/9PTbAtMI9sIz5k8zd84GCFokY3Wy6YH1O2f2Tvbyw0eoJL/2o JhfeA8QWgrMVbspN/ifLeazDrjU290if5S4re70Qst5inUJQ53p+pqJ9PVHqYAcm uoBf9Kgczb8wkbcdtr98WCS9O8M94ghY/C6OIFsbbs5DNqOfrf8mUjLJKJfsTdvK 0Lp3OLwejOXvFBDh4eYo1S/E6KulBEof7cPb9hEKM3zawEC5xndEggivOr5/NDQf ypa6WORwWnkmwES4+eBjCaAzXdrIdx5xbC8RhcCBorcJGrj6nmQvjI6xBeCvYzYP 6ImQDS+wsUz/mDP2X8qMn5onhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLicOxGi CKfdoiUwLA23wJBWQoPEMB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5 RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC82MTQxNUY1OEE5RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZm cTdzNjJ2RXJBQ1ZyZnhqUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjfaJSP2NbxmRbKCi2eSWusbZl7a85nFCizk583E1kSjwnHZjDwrY4 9KxqicPKTSIR0tmQvFwchIhnIQrInL60nrnWXNlu1JfbYqQwBeYSnZqt09+qypE7 LSTkgHrECNcD3seCNW5wlAEgAMX4IH2CQODL8n8vM2WFAUKDEwDl0DXXAWKteK1e ousvrabnLczWVhYAXVPmJFoAe9rJKnKZZUMWPWAdD3I0SmUzOeBgk8Lf/UcYLijn HXzE3VV57L+c9tP+uy+kMzh38FN0XBN3TBjLAIvGPKUoUUHY/0zqMBoUuLVbrwix Z+0sVUtPqDBUxra7FIuNzr68i8gG5dfW -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:07 2025 by rpki-client