$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json) Hash identifier: STXYENZaAoNzTAQjAnSU1Geo+Pts2vD3eLwpCKCmF/g= Subject key identifier: C2:83:C8:2F:48:0C:72:F8:79:87:A2:D8:FB:9D:FB:5B:1F:A0:E6:63 Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft Manifest number: 0AD6 Signing time: Thu 24 Apr 2025 19:20:01 +0000 Manifest this update: Thu 24 Apr 2025 19:20:01 +0000 Manifest next update: Thu 01 May 2025 19:20:01 +0000 Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: LGYEqMUtOd3iDB3j/YY/du3fLi54KEo3Sy/2XQH8q14=) 2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: r9qAOJLFlfPr/FG83X+BXgaWnTUjc3HThRn1PkvKOaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Validity Not Before: Apr 24 19:20:01 2025 GMT Not After : May 1 19:20:01 2025 GMT Subject: CN=680a8ee1-7e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:1c:85:6f:b2:66:62:97:57:e8:63:dc:de: d2:cd:57:25:29:0e:48:07:8f:1d:84:a1:4a:21:29: ce:22:58:fe:61:ac:ed:19:be:c5:d0:e0:95:4a:91: 45:f8:3a:d5:f0:f7:95:6e:af:f3:3c:8b:79:d3:75: 31:cc:36:b4:4b:aa:43:fe:5f:1f:25:c2:e0:18:47: 47:ef:ea:66:48:1f:1d:ef:f8:34:6d:3c:87:ba:ec: 89:83:d6:c9:8c:75:2a:74:9b:6f:a0:b5:5a:66:2c: e2:19:24:3f:95:12:f2:11:f8:8a:45:bf:a4:3c:9d: 26:4b:11:5b:06:bb:d2:18:4c:cd:d1:59:c0:5b:78: 39:ed:6f:93:24:18:ec:a7:29:c9:53:4e:03:43:25: 54:cc:ad:c6:13:b1:63:5d:4a:89:c2:c0:e2:d4:e0: 49:b6:58:7a:93:d2:a6:30:6c:94:ed:40:09:98:bf: 03:70:31:25:93:c4:0a:d9:7d:bb:76:29:2f:19:8b: 5a:d2:28:77:24:87:0c:ab:54:31:34:5d:2c:8a:5a: 25:96:f9:ec:fa:f4:28:03:ed:0d:45:b9:4c:62:5c: fa:65:1c:6c:47:69:51:b1:d8:b3:2e:2b:d1:64:ce: 86:07:1b:d7:e6:49:98:45:39:08:63:a8:28:a9:d1: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:83:C8:2F:48:0C:72:F8:79:87:A2:D8:FB:9D:FB:5B:1F:A0:E6:63 X509v3 Authority Key Identifier: keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b6:a5:8d:7c:85:71:7d:23:e3:e0:ea:7e:b3:72:f5:c5:8a: 55:ee:f0:5e:6a:01:5e:96:9d:85:71:4d:61:ff:2b:42:b9:22: 30:4a:5b:71:50:5b:f8:fa:9e:8f:b6:7e:22:63:26:12:be:41: 79:f3:e2:32:f9:13:00:82:bd:41:b3:86:b5:cd:fd:19:99:09: 75:3c:00:4f:af:59:07:85:c1:0a:01:ba:ad:2a:bd:36:cc:97: cf:ed:9e:69:6c:96:bb:75:06:97:dc:98:9a:e7:51:93:32:61: 2c:56:16:5d:13:5a:43:6b:b4:3c:8e:f9:35:70:cb:59:26:81: 1e:b3:18:c4:21:bb:8a:1d:45:0c:6c:1f:42:3a:4d:77:43:21: 71:cb:17:8e:45:6f:1a:41:05:59:ba:4d:be:d4:7b:e4:95:44: 23:79:f4:d4:6a:97:d9:c8:0f:87:1b:f0:36:5e:40:4c:c4:4e: b2:78:7f:e0:df:3f:49:e0:7d:fe:b8:ea:c5:a0:6f:27:26:3d: f7:44:56:a3:e1:d7:2a:db:2c:79:2c:31:b4:75:09:dc:c6:95: 1c:12:c2:1a:b6:f1:ff:d4:f5:75:38:aa:61:5f:24:bd:f7:ec: 45:3d:f9:f0:d8:6b:17:bd:a8:d3:35:31:13:4a:1f:67:de:58: 55:01:4f:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC NDA0OUU3ODYwHhcNMjUwNDI0MTkyMDAxWhcNMjUwNTAxMTkyMDAxWjAYMRYwFAYD VQQDEw02ODBhOGVlMS03ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3cchW+yZmKXV+hj3N7SzVclKQ5IB48dhKFKISnOIlj+YaztGb7F0OCVSpFF +DrV8PeVbq/zPIt503UxzDa0S6pD/l8fJcLgGEdH7+pmSB8d7/g0bTyHuuyJg9bJ jHUqdJtvoLVaZiziGSQ/lRLyEfiKRb+kPJ0mSxFbBrvSGEzN0VnAW3g57W+TJBjs pynJU04DQyVUzK3GE7FjXUqJwsDi1OBJtlh6k9KmMGyU7UAJmL8DcDElk8QK2X27 dikvGYta0ih3JIcMq1QxNF0silollvns+vQoA+0NRblMYlz6ZRxsR2lRsdizLivR ZM6GBxvX5kmYRTkIY6goqdGi9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKDyC9I DHL4eYei2Pud+1sfoOZjMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4 RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi cnVMcGxJaEN6ckMwQko1NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAstqWNfIVxfSPj4Op+s3L1xYpV7vBeagFelp2FcU1h/ytCuSIwSltx UFv4+p6Ptn4iYyYSvkF58+Iy+RMAgr1Bs4a1zf0ZmQl1PABPr1kHhcEKAbqtKr02 zJfP7Z5pbJa7dQaX3Jia51GTMmEsVhZdE1pDa7Q8jvk1cMtZJoEesxjEIbuKHUUM bB9COk13QyFxyxeORW8aQQVZuk2+1HvklUQjefTUapfZyA+HG/A2XkBMxE6yeH/g 3z9J4H3+uOrFoG8nJj33RFaj4dcq2yx5LDG0dQncxpUcEsIatvH/1PV1OKphXyS9 9+xFPfnw2GsXvajTNTETSh9n3lhVAU9L -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:48 2025 by rpki-client