$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json) Hash identifier: suPDLWMSlivtWHa8wKWOz69pF2lZVUxzbahVBVvjPcY= Subject key identifier: F6:3C:1D:C1:19:80:CC:F4:5C:A5:30:C6:A7:2E:63:AA:AE:29:54:C6 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft Manifest number: 04CB Signing time: Thu 24 Apr 2025 23:37:39 +0000 Manifest this update: Thu 24 Apr 2025 23:37:38 +0000 Manifest next update: Thu 01 May 2025 23:37:38 +0000 Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: fzqRE5HL2I007EIOIaW1rS5TTgOw6HKjm+wDKhH3tW4=) 2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: UceF9Jk11/rYCZ/7KBV1vwtKGVF8D/5YWRRFXi2vUh0=) 3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: Z4wJM9m1tPtvkDVz1F/WGCE99pWJyL2jqGPGtjvRAFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: Apr 24 23:37:38 2025 GMT Not After : May 1 23:37:38 2025 GMT Subject: CN=680acb42-2de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:b8:23:5c:7c:c4:12:89:e5:f9:e3:c4:56: b0:66:01:66:60:b7:dd:76:f5:14:85:2a:5a:fe:79: 4f:14:41:3e:01:cf:e6:97:b8:53:01:24:78:08:36: 30:33:58:a6:e9:60:12:2a:40:e4:dd:07:bc:57:84: 5b:30:ea:83:fc:5a:59:cf:ed:c6:da:b5:19:b9:99: 8a:86:9b:5a:69:63:c9:dd:cd:80:08:1b:b6:f1:1d: 9d:5d:d8:a8:bc:26:5b:55:a1:22:ec:a7:18:f5:2d: dc:da:a2:aa:6e:89:62:1c:b1:0f:d1:28:57:d9:f8: 9b:a5:e2:af:b2:d9:41:d0:72:f7:05:87:68:79:77: a1:cc:6b:af:31:9e:f3:58:98:52:5b:31:1e:46:90: 6b:0a:67:06:d6:ab:2c:db:e1:cd:63:68:59:e8:25: eb:57:0d:67:98:82:58:92:4f:20:4e:36:c0:02:d1: 6a:19:53:07:36:5a:d9:fd:1c:68:de:30:53:e4:cf: 03:58:7d:a7:f7:3d:6e:68:3e:af:f1:cb:a5:d3:31: b5:5a:29:d2:63:36:c7:b8:d5:6f:6e:2c:b0:87:57: ad:3a:d9:d3:e3:88:69:51:4d:dd:59:d8:1e:bf:94: c7:fa:f3:71:40:b3:87:40:0d:4d:b3:6c:45:0c:67: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:1D:C1:19:80:CC:F4:5C:A5:30:C6:A7:2E:63:AA:AE:29:54:C6 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c0:0f:85:44:7f:07:9f:25:78:d5:4c:73:17:27:3a:35:ae: bf:3f:b5:01:35:b6:08:15:7a:30:3c:11:6f:7e:4e:bd:77:4f: a7:74:24:4f:8e:aa:4e:85:f1:31:fe:f6:38:97:bd:de:de:af: 9c:70:b6:47:20:99:d9:2d:a2:53:ec:af:54:c6:d0:f6:31:65: be:eb:32:8f:04:54:51:18:3e:c2:ce:eb:05:3d:6a:1b:aa:56: d3:b0:53:89:f2:25:37:87:d6:d9:1a:ea:b7:ff:02:d3:3a:21: d0:e9:12:ed:fc:05:36:b1:ed:83:a3:b4:91:65:69:aa:95:fc: 51:40:36:7a:0d:d5:26:a0:03:93:ca:24:7e:f0:3e:16:dc:4e: 46:a5:5a:b8:a6:d9:0d:2a:92:4d:1c:81:d6:8b:52:dd:d2:83: ed:37:bd:a8:7c:81:11:ac:ba:cd:68:e5:f6:52:a4:85:2d:2b: 45:70:1a:88:1d:76:8c:8a:74:59:ad:f0:07:38:ed:93:5a:d3: bc:45:7f:2a:92:23:04:11:2c:33:32:15:be:7e:1a:a4:f8:f7: 4a:28:46:9f:56:7f:2e:eb:fa:41:1d:ee:b3:3c:63:a2:90:25: ab:d1:df:06:a1:b8:45:25:51:88:c6:49:eb:c6:67:e7:7b:64: 41:0b:0d:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjUwNDI0MjMzNzM4WhcNMjUwNTAxMjMzNzM4WjAYMRYwFAYD VQQDEw02ODBhY2I0Mi0yZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQi4I1x8xBKJ5fnjxFawZgFmYLfddvUUhSpa/nlPFEE+Ac/ml7hTASR4CDYw M1im6WASKkDk3Qe8V4RbMOqD/FpZz+3G2rUZuZmKhptaaWPJ3c2ACBu28R2dXdio vCZbVaEi7KcY9S3c2qKqboliHLEP0ShX2fibpeKvstlB0HL3BYdoeXehzGuvMZ7z WJhSWzEeRpBrCmcG1qss2+HNY2hZ6CXrVw1nmIJYkk8gTjbAAtFqGVMHNlrZ/Rxo 3jBT5M8DWH2n9z1uaD6v8cul0zG1WinSYzbHuNVvbiywh1etOtnT44hpUU3dWdge v5TH+vNxQLOHQA1Ns2xFDGegDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY8HcEZ gMz0XKUwxqcuY6quKVTGMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3 eThoVTRfUU1oOHZQS2hXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfwA+FRH8HnyV41UxzFyc6Na6/P7UBNbYIFXowPBFvfk69d0+ndCRP jqpOhfEx/vY4l73e3q+ccLZHIJnZLaJT7K9UxtD2MWW+6zKPBFRRGD7CzusFPWob qlbTsFOJ8iU3h9bZGuq3/wLTOiHQ6RLt/AU2se2Do7SRZWmqlfxRQDZ6DdUmoAOT yiR+8D4W3E5GpVq4ptkNKpJNHIHWi1Ld0oPtN72ofIERrLrNaOX2UqSFLStFcBqI HXaMinRZrfAHOO2TWtO8RX8qkiMEESwzMhW+fhqk+PdKKEafVn8u6/pBHe6zPGOi kCWr0d8GobhFJVGIxknrxmfne2RBCw0W -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:57 2025 by rpki-client