$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json) Hash identifier: /L505Y+sOB3XAVR0UMiDbWTwktKaqFgljhZHppszsUE= Subject key identifier: EB:C1:9A:CE:43:E5:F4:3F:F4:A9:CD:74:DD:BE:1A:B1:55:F1:02:2C Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft Manifest number: 0A Signing time: Fri 25 Apr 2025 07:07:51 +0000 Manifest this update: Fri 25 Apr 2025 07:07:51 +0000 Manifest next update: Fri 02 May 2025 07:07:51 +0000 Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: /tsuzre9p5PontslflurZ0ZYj8oFZBPgneGEuiIqfVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Validity Not Before: Apr 25 07:07:51 2025 GMT Not After : May 2 07:07:51 2025 GMT Subject: CN=680b34c7-8213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:ce:9f:f9:04:a4:7c:9e:1d:dd:aa:9f:f7: e7:bd:e4:ab:4b:4e:9e:4b:41:6e:36:5d:d8:85:fe: db:eb:f0:4a:71:a2:7e:1f:0b:3c:23:89:a2:13:ca: 9f:42:4e:c4:93:ee:31:b1:ea:db:95:0c:30:eb:98: 25:51:c7:cc:f6:b1:db:c1:2e:dc:4d:96:5f:ff:7c: ba:58:10:0a:41:0e:58:50:75:b8:2d:8b:19:5e:f8: 7e:ba:82:2e:66:46:65:0d:67:27:d4:da:8f:ac:80: 7a:7b:54:c4:55:e7:12:ac:ca:5f:a1:02:50:b5:4e: 02:fb:aa:21:74:80:11:6b:1b:d3:26:13:9e:eb:c5: e7:9c:ca:36:0c:78:0b:96:3d:02:8f:b1:02:8f:9c: a1:46:61:40:fe:be:a5:41:55:5b:7e:97:d1:7a:28: e2:fa:ab:1b:5e:72:07:d1:69:19:21:20:cd:99:81: 68:3d:fc:16:97:1f:97:d1:02:36:60:86:6a:52:05: a3:56:d5:7f:d8:56:14:40:68:3e:03:40:57:70:e6: 79:b0:4d:c1:dd:7a:c1:fe:30:ea:89:64:8e:6f:e5: dd:45:13:36:03:2e:5c:8c:72:2c:64:6f:ae:fb:88: 05:a4:c6:57:b8:c2:7a:74:be:3d:42:f8:ac:7f:c9: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C1:9A:CE:43:E5:F4:3F:F4:A9:CD:74:DD:BE:1A:B1:55:F1:02:2C X509v3 Authority Key Identifier: keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:08:0b:a4:52:70:eb:26:9e:58:97:14:9c:69:81:08:35:9b: 24:85:0a:87:69:c8:12:98:71:b9:82:2e:78:a2:20:ed:5c:d0: 23:9b:7f:2f:15:5c:83:32:cf:42:2a:e4:07:65:2b:d3:4e:1f: 1e:92:7c:2f:be:8e:c6:07:03:16:bb:1b:8a:2d:83:d8:1f:73: 61:72:42:24:ea:28:fc:20:1b:55:75:74:f5:c1:a7:da:1b:7c: 93:bc:31:7d:94:75:29:98:fd:7d:ef:b1:71:5d:aa:2f:5c:0c: 62:92:86:fe:7c:f4:cb:21:a8:7c:97:3f:a5:d5:e2:24:16:ee: 9d:5b:cf:71:a5:9a:37:37:f5:4f:d6:4b:6c:b2:ae:dd:6d:d2: da:48:ab:2e:de:15:40:d0:51:fe:6e:db:0a:5a:46:40:82:93: 56:5a:0f:9f:b5:fb:90:4f:fd:54:16:23:3a:91:f5:46:9c:8d: 03:09:55:d6:4c:43:5f:d9:3b:44:12:a1:2b:f4:3f:73:01:e2: aa:3c:b1:66:3d:33:bb:33:15:90:ce:e5:58:2b:d2:8e:58:3c: 2c:0d:03:4c:74:e4:f8:a4:4f:86:c1:de:43:6e:35:06:62:9a: e5:b0:b0:56:56:c4:a7:78:10:12:cb:0e:95:e4:5e:5b:b2:ca: 0a:00:86:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDA3RTExMC8GA1UEBRMoMUUwNzkxRUJERDBDOTRDMzU2QkEzNzNEN0UwRjAxNjEw M0Q0MEI5MjAeFw0yNTA0MjUwNzA3NTFaFw0yNTA1MDIwNzA3NTFaMBgxFjAUBgNV BAMTDTY4MGIzNGM3LTgyMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKgs6f+QSkfJ4d3aqf9+e95KtLTp5LQW42XdiF/tvr8Epxon4fCzwjiaITyp9C TsST7jGx6tuVDDDrmCVRx8z2sdvBLtxNll//fLpYEApBDlhQdbgtixle+H66gi5m RmUNZyfU2o+sgHp7VMRV5xKsyl+hAlC1TgL7qiF0gBFrG9MmE57rxeecyjYMeAuW PQKPsQKPnKFGYUD+vqVBVVt+l9F6KOL6qxtecgfRaRkhIM2ZgWg9/BaXH5fRAjZg hmpSBaNW1X/YVhRAaD4DQFdw5nmwTcHdesH+MOqJZI5v5d1FEzYDLlyMcixkb677 iAWkxle4wnp0vj1C+Kx/yZ4DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU68GazkPl 9D/0qc103b4asVXxAiwwHwYDVR0jBBgwFoAUHgeR690MlMNWujc9fg8BYQPUC5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMDdFL0UwMjNGMjFFMTUw NzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGdlUjY5ME1sTU5XdWpjOWZnOEJZUVBVQzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE MDdFL0UwMjNGMjFFMTUwNzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1O V3VqYzlmZzhCWVFQVUM1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKsIC6RScOsmnliXFJxpgQg1mySFCodpyBKYcbmCLniiIO1c0CObfy8V XIMyz0Iq5AdlK9NOHx6SfC++jsYHAxa7G4otg9gfc2FyQiTqKPwgG1V1dPXBp9ob fJO8MX2UdSmY/X3vsXFdqi9cDGKShv589MshqHyXP6XV4iQW7p1bz3Glmjc39U/W S2yyrt1t0tpIqy7eFUDQUf5u2wpaRkCCk1ZaD5+1+5BP/VQWIzqR9UacjQMJVdZM Q1/ZO0QSoSv0P3MB4qo8sWY9M7szFZDO5Vgr0o5YPCwNA0x05PikT4bB3kNuNQZi muWwsFZWxKd4EBLLDpXkXluyygoAhjM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:16 2025 by rpki-client