$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: Enc8n0MRQzeMeVcD8wLbI00CJn/5akel7MbDhzTU78w= Subject key identifier: 37:5D:4E:DA:C9:BE:0F:C6:A1:63:52:02:54:2F:96:6F:6D:8A:9A:1F Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 034C Signing time: Fri 25 Apr 2025 00:48:57 +0000 Manifest this update: Fri 25 Apr 2025 00:48:57 +0000 Manifest next update: Fri 02 May 2025 00:48:57 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: eCaeXsOSK37t4HV4dFMNLDM4UGJVJHAyR7ioc76zRR4=) 2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=) 3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=) 4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Apr 25 00:48:57 2025 GMT Not After : May 2 00:48:57 2025 GMT Subject: CN=680adbf9-8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b4:cc:d9:45:79:9d:7c:30:29:42:71:ab:86: ba:c1:43:e1:35:66:02:09:3c:f1:5d:cf:6d:6e:74: 70:10:7c:94:c6:4f:cc:eb:d2:49:73:27:e1:9b:b1: 5f:3a:ba:44:4f:7a:a9:40:4b:31:ae:e7:38:96:a9: 33:2c:53:dd:b8:bc:a0:04:89:f5:72:7b:fe:93:ea: 35:cc:63:48:85:a8:28:ac:25:0e:53:47:68:94:e2: b9:58:64:17:80:2a:17:bc:45:3d:61:51:e3:a8:e1: db:9b:3d:87:b8:8a:3d:65:fe:27:f8:13:40:cf:b4: 90:71:06:ee:a1:ab:81:97:39:91:33:1e:2b:37:07: 2a:e2:bc:6e:80:85:d6:09:66:a0:a2:ea:e1:18:84: 4d:b7:3d:5d:2c:b7:66:e4:cd:a2:18:ce:92:04:8f: b8:e3:9a:c8:41:b1:06:11:a2:c4:47:0f:50:1c:74: cd:68:67:96:62:91:33:e2:11:01:06:aa:b8:24:16: 1f:17:8b:8f:be:a8:10:d0:76:4a:cd:51:f7:70:70: 69:4a:bb:81:15:c7:f0:71:92:55:3b:26:e6:be:33: c1:47:5c:2a:e9:2e:5f:66:35:29:69:d4:4a:25:5d: cd:1a:f5:66:fb:3d:5b:fd:29:93:ae:85:d4:49:3c: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5D:4E:DA:C9:BE:0F:C6:A1:63:52:02:54:2F:96:6F:6D:8A:9A:1F X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:5b:c1:41:35:9a:5e:19:62:a6:9f:3a:47:30:b6:5b:b0: 75:d9:84:e0:00:d4:10:fe:80:49:22:04:e8:06:f7:a4:4d:ef: 99:67:43:7f:19:f3:27:6c:a7:4d:aa:87:68:61:12:c0:27:57: f6:e3:18:70:68:d2:aa:9c:5f:a9:07:cd:6b:73:98:fe:b2:89: 44:4b:06:c2:24:af:14:26:ca:d5:b6:0b:19:0e:29:c1:6b:d4: ec:f6:a8:51:5f:4e:46:46:36:12:d6:0a:ec:86:3b:a3:ef:f6: e1:c7:0c:d9:ab:77:24:7f:cc:0c:0d:4f:14:75:70:95:bf:b4: 9a:9e:87:7e:d4:29:3d:78:79:1f:cc:34:31:f4:6e:c4:e8:60: 8f:62:8a:38:18:af:e5:98:c2:19:0e:03:39:e9:bb:9f:80:39: 7c:4e:fb:36:1e:1d:7e:79:85:ef:57:e8:47:ed:72:01:cd:fb: f6:8e:b5:a1:f1:32:12:c6:1a:62:1c:28:17:74:d8:35:65:88: 68:ab:7c:10:02:99:7e:f8:4b:cf:d7:94:f3:9a:74:6d:d9:5c: b1:30:c6:50:9f:2e:78:e5:cc:14:96:4e:50:8c:35:aa:6a:23: 69:af:07:a3:83:7e:bd:c1:1e:a2:f2:b0:20:65:e6:05:99:cc: b0:91:70:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjUwNDI1MDA0ODU3WhcNMjUwNTAyMDA0ODU3WjAYMRYwFAYD VQQDEw02ODBhZGJmOS04ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LTM2UV5nXwwKUJxq4a6wUPhNWYCCTzxXc9tbnRwEHyUxk/M69JJcyfhm7Ff OrpET3qpQEsxruc4lqkzLFPduLygBIn1cnv+k+o1zGNIhagorCUOU0dolOK5WGQX gCoXvEU9YVHjqOHbmz2HuIo9Zf4n+BNAz7SQcQbuoauBlzmRMx4rNwcq4rxugIXW CWagourhGIRNtz1dLLdm5M2iGM6SBI+445rIQbEGEaLERw9QHHTNaGeWYpEz4hEB Bqq4JBYfF4uPvqgQ0HZKzVH3cHBpSruBFcfwcZJVOybmvjPBR1wq6S5fZjUpadRK JV3NGvVm+z1b/SmTroXUSTzhCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDddTtrJ vg/GoWNSAlQvlm9tipofMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI4VvBQTWaXhlipp86RzC2W7B12YTgANQQ/oBJIgToBvekTe+ZZ0N/ GfMnbKdNqodoYRLAJ1f24xhwaNKqnF+pB81rc5j+solESwbCJK8UJsrVtgsZDinB a9Ts9qhRX05GRjYS1grshjuj7/bhxwzZq3ckf8wMDU8UdXCVv7Sanod+1Ck9eHkf zDQx9G7E6GCPYoo4GK/lmMIZDgM56bufgDl8Tvs2Hh1+eYXvV+hH7XIBzfv2jrWh 8TISxhpiHCgXdNg1ZYhoq3wQApl++EvP15TzmnRt2VyxMMZQny545cwUlk5QjDWq aiNprwejg369wR6i8rAgZeYFmcywkXAY -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:02 2025 by rpki-client