$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json) Hash identifier: xODoKh97FcplRGXhxP3RH/BXlkG8Y/FBPJKOiU62g9U= Subject key identifier: 22:59:3C:29:48:8A:85:D7:68:BE:79:48:77:C9:93:46:A5:42:85:6E Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft Manifest number: 35 Signing time: Tue 29 Apr 2025 07:34:54 +0000 Manifest this update: Tue 29 Apr 2025 07:34:54 +0000 Manifest next update: Tue 06 May 2025 07:34:54 +0000 Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: 7TUurSsoIE/aFE0QDPMWBhe45eiUPpDYkf9mggIjbiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 07:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Validity Not Before: Apr 29 07:34:54 2025 GMT Not After : May 6 07:34:54 2025 GMT Subject: CN=6810811e-9c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:1b:d9:4e:25:33:c2:83:24:e6:8c:22:f3: 1a:30:c0:51:ec:83:d9:f9:2d:f4:c6:2a:67:ca:ef: 7c:7f:28:62:c7:fe:64:c3:7d:f2:03:29:96:63:4a: bf:72:e8:be:26:4f:03:97:5b:c0:df:e0:34:16:15: 21:b4:15:28:5e:01:8e:03:8c:9b:bb:53:13:2d:ed: a8:ba:ef:22:3c:41:93:4f:28:d8:f3:1e:06:e8:a9: a6:d7:66:af:32:64:77:ae:3b:8c:7b:d4:75:55:8b: f7:3a:2c:37:87:4b:fe:f1:d0:31:39:51:a0:4a:91: 38:44:64:0f:10:1f:d1:20:47:37:c2:c2:60:db:f3: 65:67:ab:11:d3:5c:56:49:94:f2:4c:d3:74:6e:12: ab:fb:e1:8c:f0:f3:f9:9b:b8:05:cd:5e:73:67:9e: d5:e7:61:c6:ac:72:5b:cc:47:60:26:f2:1d:11:86: dc:0d:45:fa:01:9e:b8:92:bb:a5:d7:a7:11:7b:34: df:d9:6c:43:66:33:fe:94:a6:a0:cf:97:e9:cb:39: 70:82:8c:7e:44:71:a1:b7:26:93:a7:c6:59:73:33: 3f:ae:ef:0b:cf:b6:c9:79:b1:0b:cc:14:d8:52:1d: 3b:0a:17:9d:99:40:ec:ff:cc:e7:b9:31:8a:41:d3: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:3C:29:48:8A:85:D7:68:BE:79:48:77:C9:93:46:A5:42:85:6E X509v3 Authority Key Identifier: keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7d:46:ae:48:ce:6a:71:3f:b7:37:c2:bc:12:36:04:ee:68: af:1c:78:00:aa:d5:c4:b7:0a:9d:cc:9b:fe:38:47:2b:74:51: 10:36:38:e2:37:a1:f2:e2:5a:0d:d1:2e:3d:3b:bb:84:58:62: 0b:2b:e5:5c:b3:8b:b3:67:e0:63:54:b9:f8:a6:40:3f:03:d6: e2:08:49:4c:28:b4:eb:7a:c1:88:cb:07:ef:0c:b1:40:87:21: 0d:93:89:a1:48:aa:96:d9:eb:29:55:2e:a8:7c:4e:ba:ec:58: f9:47:ae:26:4f:16:e4:c1:19:c9:d7:b2:d6:3a:dd:3c:91:fc: d1:81:43:20:9d:6c:9e:99:40:66:5d:21:cf:2d:bb:bf:12:d9: 20:37:36:8e:0b:74:86:41:95:af:c9:37:e5:a2:e0:be:4c:eb: e0:f9:d6:32:20:3c:56:6e:9f:a3:56:ec:db:7a:0b:70:d7:d9: 23:73:85:4c:84:ee:ab:15:52:ee:13:f8:93:5e:cf:5f:50:02: 27:a9:df:54:4d:17:66:00:20:19:2f:f1:91:a7:8d:2a:f8:72: 16:d1:37:d3:42:e4:cf:72:1d:67:f2:ba:cd:65:a2:41:d7:aa: d4:23:b7:b5:6e:9d:ae:03:2f:91:88:15:dd:36:88:e8:02:64: 59:ea:b0:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoOTg3QTI0MDM1QzE1MzkxNzAyMEI2NTFEQjk4RjA5MUYw QUFBMzIyNzAeFw0yNTA0MjkwNzM0NTRaFw0yNTA1MDYwNzM0NTRaMBgxFjAUBgNV BAMTDTY4MTA4MTFlLTljNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSCxvZTiUzwoMk5owi8xowwFHsg9n5LfTGKmfK73x/KGLH/mTDffIDKZZjSr9y 6L4mTwOXW8Df4DQWFSG0FSheAY4DjJu7UxMt7ai67yI8QZNPKNjzHgboqabXZq8y ZHeuO4x71HVVi/c6LDeHS/7x0DE5UaBKkThEZA8QH9EgRzfCwmDb82VnqxHTXFZJ lPJM03RuEqv74Yzw8/mbuAXNXnNnntXnYcasclvMR2Am8h0RhtwNRfoBnriSu6XX pxF7NN/ZbENmM/6UpqDPl+nLOXCCjH5EcaG3JpOnxllzMz+u7wvPtsl5sQvMFNhS HTsKF52ZQOz/zOe5MYpB00xFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIlk8KUiK hddovnlId8mTRqVChW4wHwYDVR0jBBgwFoAUmHokA1wVORcCC2UduY8JHwqqMicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0FGREVGRTU0RDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1JjQ0MyVWR1WThKSHdxcU1p Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUhva0Exd1ZPUmNDQzJVZHVZOEpId3FxTWljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0FGREVGRTU0RDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1Jj Q0MyVWR1WThKSHdxcU1pYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGF9Rq5IzmpxP7c3wrwSNgTuaK8ceACq1cS3Cp3Mm/44Ryt0URA2OOI3 ofLiWg3RLj07u4RYYgsr5Vyzi7Nn4GNUufimQD8D1uIISUwotOt6wYjLB+8MsUCH IQ2TiaFIqpbZ6ylVLqh8TrrsWPlHriZPFuTBGcnXstY63TyR/NGBQyCdbJ6ZQGZd Ic8tu78S2SA3No4LdIZBla/JN+Wi4L5M6+D51jIgPFZun6NW7Nt6C3DX2SNzhUyE 7qsVUu4T+JNez19QAiep31RNF2YAIBkv8ZGnjSr4chbRN9NC5M9yHWfyus1lokHX qtQjt7Vuna4DL5GIFd02iOgCZFnqsMY= -----END CERTIFICATE-----Generated at Tue Apr 29 19:22:52 2025 by rpki-client