$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json) Hash identifier: E9pJe6kySVaH+mUrWCAkpO81OVdHW0gCrkKPaW98KM0= Subject key identifier: 26:35:07:6A:2B:4E:E6:64:05:B2:6A:60:4B:F9:43:E2:6D:2B:D2:E2 Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft Manifest number: 034E Signing time: Fri 25 Apr 2025 00:47:14 +0000 Manifest this update: Fri 25 Apr 2025 00:47:13 +0000 Manifest next update: Fri 02 May 2025 00:47:13 +0000 Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: DyCisVJVz5GRhcodVqBwXxlbmopa88cKQMDwYRhaOWc=) 2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: YYjlPAti43wnuGn+eT8matxHDnOUwzHN9T3OjstTfu8=) 3: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: EeX8Q5zf2nyJcmEtUQEot71vzZAwJeCr2eUPG92eMrI=) 4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: 7Oc4l/ja0E02zMqJLQgSwY4btjYC0BXYK3WYalX2Llg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Validity Not Before: Apr 25 00:47:13 2025 GMT Not After : May 2 00:47:13 2025 GMT Subject: CN=680adb91-dce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:be:19:8d:63:bb:0d:35:3c:83:fd:5f:68:9d: 47:a0:be:4f:6d:f5:06:19:8d:0e:1e:8a:15:35:79: 1e:8a:b4:4e:2e:0d:e4:9e:38:a3:8f:e2:17:2a:4c: c8:91:75:eb:e0:64:1f:15:f9:4d:13:72:e3:55:9b: df:69:3d:32:9c:9a:59:6f:ae:a1:64:48:17:da:20: bd:f6:57:e2:ac:0c:79:e8:95:1b:da:33:bf:a0:7e: fc:8c:0e:f3:31:31:d4:86:da:3c:d9:ba:db:e4:b0: d7:25:cf:17:44:0a:b7:aa:cd:31:f0:5a:f0:a7:d8: c0:0b:a6:ab:8e:5c:e7:7f:d9:dc:09:3b:25:ad:b2: 85:d5:8e:98:54:a9:a7:23:13:b4:d4:60:cb:b3:6d: 43:84:cf:4e:6c:5a:b6:f5:da:42:2e:05:90:6d:f2: d6:88:9c:36:a8:ec:51:f9:71:8d:dd:51:15:60:0d: df:98:c6:3e:25:53:69:c6:fa:c9:f4:bb:e9:ad:bd: a5:d3:70:85:e5:60:03:92:26:f4:8e:9b:5e:01:fd: 7d:72:07:ef:00:ae:91:85:4a:f1:ff:14:97:63:a8: 9d:26:14:f2:5a:77:8c:26:5d:a6:0a:5d:e4:41:47: 1e:02:51:ff:3f:41:4a:0a:33:ed:34:3f:8d:5b:e4: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:35:07:6A:2B:4E:E6:64:05:B2:6A:60:4B:F9:43:E2:6D:2B:D2:E2 X509v3 Authority Key Identifier: keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e5:dd:61:15:f8:e2:c6:d8:fb:44:21:2c:34:58:1d:9e:e5: f9:12:d6:d2:10:b9:84:cc:70:ce:c2:92:ce:f0:4b:6d:2c:50: f8:3d:7d:01:fc:d4:c8:66:1e:c1:74:9e:f9:ed:99:2e:0c:aa: 59:c6:52:31:8b:95:bc:6b:c3:08:8d:cf:78:d2:01:8d:77:be: 06:5e:77:b4:95:0e:c9:1e:96:6a:4f:3b:90:7e:a7:72:ba:84: b5:6e:bc:70:d8:74:da:bf:5a:d5:10:e1:ea:85:f0:16:ec:43: c8:38:d0:92:b0:8b:cf:19:0a:31:ca:a5:51:07:c0:e0:ad:07: 86:4b:41:f9:d3:58:90:cf:4c:ec:e9:35:a2:91:37:2d:82:79: a2:29:57:da:cb:9d:21:3d:3f:50:4a:0e:75:e2:6f:56:47:ac: dd:ea:92:be:9e:51:67:3b:67:cb:86:1c:07:94:a8:d9:8c:55: e5:8e:26:f4:a0:fc:92:68:df:57:ae:84:94:25:65:4b:47:c4: 63:99:1f:42:ab:77:c6:c0:e2:e7:18:cb:b0:9c:99:03:aa:e0: 2a:49:3f:65:60:e2:d9:eb:28:9f:f9:00:dd:2e:22:6d:fa:e3: d1:66:93:db:f1:73:9a:c9:5e:6f:19:36:a9:5d:6b:a3:69:35: 13:3b:b1:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1 NTIwRUM0OTQwHhcNMjUwNDI1MDA0NzEzWhcNMjUwNTAyMDA0NzEzWjAYMRYwFAYD VQQDEw02ODBhZGI5MS1kY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA774ZjWO7DTU8g/1faJ1HoL5PbfUGGY0OHooVNXkeirROLg3knjijj+IXKkzI kXXr4GQfFflNE3LjVZvfaT0ynJpZb66hZEgX2iC99lfirAx56JUb2jO/oH78jA7z MTHUhto82brb5LDXJc8XRAq3qs0x8Frwp9jAC6arjlznf9ncCTslrbKF1Y6YVKmn IxO01GDLs21DhM9ObFq29dpCLgWQbfLWiJw2qOxR+XGN3VEVYA3fmMY+JVNpxvrJ 9Lvprb2l03CF5WADkib0jpteAf19cgfvAK6RhUrx/xSXY6idJhTyWneMJl2mCl3k QUceAlH/P0FKCjPtND+NW+TzHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY1B2or TuZkBbJqYEv5Q+JtK9LiMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk dGY5cm53Vy1MVlJWSU94SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD5d1hFfjixtj7RCEsNFgdnuX5EtbSELmEzHDOwpLO8EttLFD4PX0B /NTIZh7BdJ757ZkuDKpZxlIxi5W8a8MIjc940gGNd74GXne0lQ7JHpZqTzuQfqdy uoS1brxw2HTav1rVEOHqhfAW7EPIONCSsIvPGQoxyqVRB8DgrQeGS0H501iQz0zs 6TWikTctgnmiKVfay50hPT9QSg514m9WR6zd6pK+nlFnO2fLhhwHlKjZjFXljib0 oPySaN9XroSUJWVLR8RjmR9Cq3fGwOLnGMuwnJkDquAqST9lYOLZ6yif+QDdLiJt +uPRZpPb8XOayV5vGTapXWujaTUTO7FW -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:18 2025 by rpki-client