$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: mAYSU7O1FkpIzD54B5scnqaik1YBXaAQzBueyELZO4U= Subject key identifier: 79:3A:CD:07:05:AE:97:67:73:4E:D6:D4:4A:76:0C:89:5B:D4:5F:60 Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 1744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 1744 Signing time: Thu 24 Apr 2025 16:37:45 +0000 Manifest this update: Thu 24 Apr 2025 16:37:45 +0000 Manifest next update: Thu 01 May 2025 16:37:45 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: 6K556jY+vejn9Ts7KfX4RwLlLyqqioWjmzvkV8AiVgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5956 (0x1744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: Apr 24 16:37:45 2025 GMT Not After : May 1 16:37:45 2025 GMT Subject: CN=680a68d9-b033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:ab:8c:4a:45:cf:53:a1:f3:c2:2f:47:f4: da:b9:cd:d1:62:d4:65:0b:8e:4d:96:dc:9a:e9:d3: 76:b5:c3:1a:6b:24:f7:22:0f:d3:81:a0:64:87:6b: 26:57:d4:93:5b:2f:ef:6d:9d:d2:c3:a3:d6:71:27: c6:71:ab:0d:27:90:c1:8e:6b:fa:d9:a2:f2:7f:dd: 23:d3:b8:df:f7:bf:ae:e5:42:8e:25:61:2c:4a:7d: 44:0f:ec:85:a7:04:f1:d8:3b:bb:d2:f8:96:03:52: f2:a5:67:eb:94:e0:60:52:fc:78:1d:73:e6:f4:dd: 88:c0:3d:79:70:08:aa:22:4f:18:3c:bb:44:f3:b5: 17:82:b2:06:af:18:94:5b:42:85:60:c8:10:26:1d: 75:cc:87:e7:fc:d2:4f:28:39:a3:50:4e:b5:57:e7: 9f:68:ba:de:23:38:01:28:33:47:50:98:e6:c6:0c: 60:d2:7d:17:89:a1:82:c4:37:32:40:f7:a2:b7:90: d1:73:85:12:0f:c8:3e:bf:c2:32:21:e6:e6:5c:38: e0:2e:b9:ff:ae:1c:6e:2c:ee:66:ce:d4:8f:a3:d3: 37:47:b8:7f:dd:ce:37:8e:39:2b:6a:d2:15:7d:ac: 94:cc:b5:d5:e9:5b:c4:ec:46:65:01:90:55:f4:03: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:CD:07:05:AE:97:67:73:4E:D6:D4:4A:76:0C:89:5B:D4:5F:60 X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:17:0d:86:e9:cd:2a:78:14:9e:18:88:61:ef:26:d8:e9:14: a8:6a:74:dc:ae:b8:35:bd:e7:6c:1e:12:0a:d8:4f:2d:87:f4: 6a:06:08:bd:8a:fe:db:97:49:19:5d:6e:51:7f:c0:34:0f:66: 8c:6e:5b:8e:4e:bf:12:be:eb:e5:93:3f:d6:3d:79:c1:3c:58: aa:51:7d:b9:18:12:e9:93:b8:fe:e8:0d:5e:45:d3:88:5e:8d: 0a:0e:b8:80:bd:d4:04:22:e1:e2:c8:e5:eb:52:f8:25:40:ca: 8c:0c:4e:e8:a2:a3:b3:ff:0a:24:29:4d:3c:d9:f9:ae:ad:7d: 52:9b:4f:6e:3f:34:21:a5:f5:85:46:3e:3b:ce:3b:30:50:b3: 50:01:24:63:70:d8:0a:5f:21:3e:9e:28:db:76:a9:bc:34:54: 44:17:10:9b:90:e5:b0:0f:ec:3c:ff:e4:fe:b6:b5:c2:ea:18: b9:b2:51:0e:16:bc:04:d1:e4:45:48:4e:c3:c0:c3:7c:c5:23: ad:bc:37:46:ab:c4:60:48:01:d6:3c:c4:04:96:9e:7c:12:a2: cc:f4:52:40:e2:43:42:c3:af:88:e5:82:16:fb:86:6e:99:64: 8e:d7:ed:4a:ce:f3:e3:6a:cc:26:24:44:6f:bc:51:a8:0f:14: 3c:02:e3:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjUwNDI0MTYzNzQ1WhcNMjUwNTAxMTYzNzQ1WjAYMRYwFAYD VQQDEw02ODBhNjhkOS1iMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFSrjEpFz1Oh88IvR/Tauc3RYtRlC45Nltya6dN2tcMaayT3Ig/TgaBkh2sm V9STWy/vbZ3Sw6PWcSfGcasNJ5DBjmv62aLyf90j07jf97+u5UKOJWEsSn1ED+yF pwTx2Du70viWA1LypWfrlOBgUvx4HXPm9N2IwD15cAiqIk8YPLtE87UXgrIGrxiU W0KFYMgQJh11zIfn/NJPKDmjUE61V+efaLreIzgBKDNHUJjmxgxg0n0XiaGCxDcy QPeit5DRc4USD8g+v8IyIebmXDjgLrn/rhxuLO5mztSPo9M3R7h/3c43jjkratIV fayUzLXV6VvE7EZlAZBV9AOstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk6zQcF rpdnc07W1Ep2DIlb1F9gMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrFw2G6c0qeBSeGIhh7ybY6RSoanTcrrg1vedsHhIK2E8th/RqBgi9 iv7bl0kZXW5Rf8A0D2aMbluOTr8Svuvlkz/WPXnBPFiqUX25GBLpk7j+6A1eRdOI Xo0KDriAvdQEIuHiyOXrUvglQMqMDE7ooqOz/wokKU082fmurX1Sm09uPzQhpfWF Rj47zjswULNQASRjcNgKXyE+nijbdqm8NFREFxCbkOWwD+w8/+T+trXC6hi5slEO FrwE0eRFSE7DwMN8xSOtvDdGq8RgSAHWPMQElp58EqLM9FJA4kNCw6+I5YIW+4Zu mWSO1+1KzvPjaswmJERvvFGoDxQ8AuPN -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:14 2025 by rpki-client