$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: rTDBs9/J0MfFsIg02kvK7SAvCPDBGPqax34LuxqHbv0= Subject key identifier: 27:D2:24:BF:5C:A0:90:E0:F6:88:86:35:D1:F3:06:42:B4:D5:5B:4D Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 03:01:29 +0000 Manifest this update: Fri 25 Apr 2025 03:01:29 +0000 Manifest next update: Fri 02 May 2025 03:01:29 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: SJnycfF6uK9ZX7i21oWErvUiSjEVPP5jgiSgcKYcAwE=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Apr 25 03:01:29 2025 GMT Not After : May 2 03:01:29 2025 GMT Subject: CN=680afb09-cc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:bf:0b:81:53:fd:e5:f7:5f:df:2c:0a:4e: f3:63:c7:57:99:e0:aa:8b:93:7f:c6:30:1e:0b:94: 14:bb:ae:f4:cc:89:41:28:66:1b:a7:96:ce:91:03: 95:23:b8:e4:40:ca:23:43:ed:55:39:99:8c:e9:c0: 6b:4f:80:b7:ca:70:da:c3:4b:26:9c:78:5f:63:7b: 33:70:17:15:71:b6:15:fe:6b:cf:55:a8:da:1f:90: e8:d6:61:38:ba:d4:c3:c1:5f:28:5f:13:2c:ad:8d: 6e:3b:76:61:35:06:83:4d:81:ee:4d:6f:7c:47:57: 90:cd:b9:21:b2:1b:6f:9d:54:9d:80:ec:1b:7a:f9: c5:e2:be:47:80:9d:f1:e0:15:99:7e:08:8b:2f:f2: 33:b2:bf:1f:d0:8e:bf:fc:61:30:b4:55:35:a7:15: 95:1e:d3:0c:40:11:9a:37:aa:c3:f3:05:f2:b2:fc: b0:c6:57:ab:4a:77:d0:ca:3c:c1:45:56:c7:c4:cc: 69:da:5e:46:a7:cf:f2:9a:03:79:58:1a:79:89:8b: 5f:9d:16:b2:d1:66:7a:97:20:2c:08:03:6e:0a:e5: 0f:c5:5c:48:9f:76:ad:15:f1:c3:80:58:08:69:4e: a9:90:ea:6f:54:54:a4:d0:80:8f:11:59:1f:68:0b: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:24:BF:5C:A0:90:E0:F6:88:86:35:D1:F3:06:42:B4:D5:5B:4D X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:13:43:f0:95:d2:cc:3a:4a:19:5e:d7:51:c6:85:d3:84:33: c2:06:be:6e:1d:83:c6:50:f6:23:65:b1:5d:d2:29:c5:35:fc: 8f:f8:4c:6b:8a:56:b1:06:50:46:aa:e2:71:e5:d8:33:73:9c: fa:c3:ec:57:56:b8:ac:54:6b:be:aa:97:16:8d:8f:2b:42:af: 12:7f:3f:f5:19:1f:22:fd:82:80:9b:41:23:da:ef:56:72:89: 37:2e:ff:2d:99:91:17:69:e4:74:25:70:cb:34:66:cc:b4:5b: f7:38:77:e9:b3:78:9d:b9:da:3e:f0:d8:88:52:ef:93:1a:1c: 22:44:d2:b0:27:00:8f:e1:72:36:7e:40:34:c5:99:87:af:dc: 6a:a0:a0:4c:b8:c6:62:2e:22:6b:82:55:7e:59:95:01:e0:5c: a5:2f:ef:b3:6e:f1:c9:b0:25:9f:3b:02:0f:b2:b4:1b:c1:04: 4a:71:8a:40:c5:54:3a:ca:ac:f9:45:67:25:6b:72:09:3e:b9: 88:91:d9:29:51:a8:96:34:88:ec:b5:c4:25:e4:42:7a:2a:b5: 49:d5:4e:80:a8:9a:4d:a2:ae:d6:cf:82:e4:3b:a9:00:cf:51: 1d:71:20:95:c3:69:91:10:c0:41:e2:68:b0:b2:50:c5:b9:25: 05:cf:43:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUwNDI1MDMwMTI5WhcNMjUwNTAyMDMwMTI5WjAYMRYwFAYD VQQDEw02ODBhZmIwOS1jYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1u/C4FT/eX3X98sCk7zY8dXmeCqi5N/xjAeC5QUu670zIlBKGYbp5bOkQOV I7jkQMojQ+1VOZmM6cBrT4C3ynDaw0smnHhfY3szcBcVcbYV/mvPVajaH5Do1mE4 utTDwV8oXxMsrY1uO3ZhNQaDTYHuTW98R1eQzbkhshtvnVSdgOwbevnF4r5HgJ3x 4BWZfgiLL/Izsr8f0I6//GEwtFU1pxWVHtMMQBGaN6rD8wXysvywxlerSnfQyjzB RVbHxMxp2l5Gp8/ymgN5WBp5iYtfnRay0WZ6lyAsCANuCuUPxVxIn3atFfHDgFgI aU6pkOpvVFSk0ICPEVkfaAsbWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfSJL9c oJDg9oiGNdHzBkK01VtNMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyE0PwldLMOkoZXtdRxoXThDPCBr5uHYPGUPYjZbFd0inFNfyP+Exr ilaxBlBGquJx5dgzc5z6w+xXVrisVGu+qpcWjY8rQq8Sfz/1GR8i/YKAm0Ej2u9W cok3Lv8tmZEXaeR0JXDLNGbMtFv3OHfps3idudo+8NiIUu+TGhwiRNKwJwCP4XI2 fkA0xZmHr9xqoKBMuMZiLiJrglV+WZUB4FylL++zbvHJsCWfOwIPsrQbwQRKcYpA xVQ6yqz5RWcla3IJPrmIkdkpUaiWNIjstcQl5EJ6KrVJ1U6AqJpNoq7Wz4LkO6kA z1EdcSCVw2mREMBB4miwslDFuSUFz0Mv -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:18 2025 by rpki-client