$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: fWb44NV+ZmkSGCcEz9qyf7fwhzT/3alDobqZk1ekgZ4= Subject key identifier: C5:4A:F5:4B:42:32:40:BA:FB:1F:E9:7E:DE:8F:62:66:58:FC:88:C8 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 3B Signing time: Fri 25 Apr 2025 06:29:38 +0000 Manifest this update: Fri 25 Apr 2025 06:29:37 +0000 Manifest next update: Fri 02 May 2025 06:29:37 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: 15rr1pFeao/rlbjz5xg8U5D+96sGop1qOIQtOAeKr5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Apr 25 06:29:37 2025 GMT Not After : May 2 06:29:37 2025 GMT Subject: CN=680b2bd1-1617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:4d:a6:b0:2b:b0:6f:bc:76:40:e0:75:cb: 87:f0:0a:1e:39:46:ce:4c:07:e8:6c:0b:37:e3:0e: d7:ea:e0:52:2b:63:12:82:83:fe:be:8c:8a:35:42: 1e:49:86:8d:94:cd:04:65:be:f3:f0:df:20:92:ad: 5c:0b:f2:68:5b:ce:3f:d9:fd:b6:90:26:28:21:d1: 14:bf:66:13:10:0c:6c:2a:df:16:e6:80:bb:18:10: bf:46:56:c6:a8:b3:44:70:a9:2b:41:5c:bd:d7:b0: f5:94:d8:b2:73:fd:0e:01:af:e9:82:56:08:1d:15: 62:78:37:c8:12:ae:0c:a8:4e:76:5c:16:e3:5b:90: 7b:05:88:8a:0f:1e:6e:83:e4:84:1d:2c:be:76:89: 32:07:a2:8c:1a:65:ba:46:6d:8b:71:1a:b5:f2:64: 33:40:0c:a7:34:b7:cd:3f:93:8f:c1:1d:b2:64:e0: 08:41:84:f2:0a:53:ff:d8:cb:4f:f2:f2:c5:9a:af: 06:a3:44:12:44:46:67:28:33:5b:d4:d7:1a:d4:93: 91:11:02:0b:85:7d:2c:e0:a2:10:b6:0c:0c:12:30: 72:8b:65:16:73:6d:54:8d:21:9d:0e:52:9e:ff:e9: 92:e9:c9:82:d8:7d:2b:a9:b8:9a:2d:15:1e:9a:f1: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4A:F5:4B:42:32:40:BA:FB:1F:E9:7E:DE:8F:62:66:58:FC:88:C8 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1a:11:a2:ad:d7:e3:2c:4f:a0:95:e2:ee:2c:01:69:98:78: e9:38:b1:b0:32:df:51:c1:85:df:b8:b8:58:e7:9d:2c:7d:73: ae:a1:96:a7:7d:f6:41:04:0e:bf:a9:3d:11:0e:20:66:e5:f1: 85:f3:e7:6a:50:d7:29:e9:4e:fe:f8:51:6e:b5:c7:18:9b:da: 9f:c5:8f:74:e6:fa:a7:0b:b5:d4:42:ec:0e:a4:99:cc:0a:a5: 40:34:f0:e8:05:42:c6:93:30:da:d9:c1:be:ea:e5:74:03:63: 94:c1:0d:32:e0:a6:15:a0:60:a1:63:0f:6b:94:a3:3e:10:33: d6:c5:90:b3:ed:f7:18:a9:c4:63:cc:48:6b:2c:24:fb:26:d6: 79:e2:9e:49:41:93:12:71:47:81:d8:e2:7f:ff:c3:87:d7:27: de:be:15:89:74:d6:01:ec:91:0a:0a:07:ec:8d:f8:24:13:ee: 4e:4c:73:f0:7d:9a:12:30:c8:0e:3a:f2:b4:8a:fd:0b:77:63: d6:ec:36:b7:ba:26:18:5b:39:db:f7:b7:65:d9:7e:c1:02:e9: 21:01:a9:22:2f:c8:3d:15:a1:a2:e7:f5:62:2b:04:67:c4:85: 1a:b6:b2:d5:da:24:3e:17:5a:62:14:ba:15:ff:c1:52:97:5e: a1:7a:ff:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux NUZBN0RDQzAeFw0yNTA0MjUwNjI5MzdaFw0yNTA1MDIwNjI5MzdaMBgxFjAUBgNV BAMTDTY4MGIyYmQxLTE2MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC15E2msCuwb7x2QOB1y4fwCh45Rs5MB+hsCzfjDtfq4FIrYxKCg/6+jIo1Qh5J ho2UzQRlvvPw3yCSrVwL8mhbzj/Z/baQJigh0RS/ZhMQDGwq3xbmgLsYEL9GVsao s0RwqStBXL3XsPWU2LJz/Q4Br+mCVggdFWJ4N8gSrgyoTnZcFuNbkHsFiIoPHm6D 5IQdLL52iTIHoowaZbpGbYtxGrXyZDNADKc0t80/k4/BHbJk4AhBhPIKU//Yy0/y 8sWarwajRBJERmcoM1vU1xrUk5ERAguFfSzgohC2DAwSMHKLZRZzbVSNIZ0OUp7/ 6ZLpyYLYfSupuJotFR6a8ZKrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxUr1S0Iy QLr7H+l+3o9iZlj8iMgwHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJYaEaKt1+MsT6CV4u4sAWmYeOk4sbAy31HBhd+4uFjnnSx9c66hlqd9 9kEEDr+pPREOIGbl8YXz52pQ1ynpTv74UW61xxib2p/Fj3Tm+qcLtdRC7A6kmcwK pUA08OgFQsaTMNrZwb7q5XQDY5TBDTLgphWgYKFjD2uUoz4QM9bFkLPt9xipxGPM SGssJPsm1nninklBkxJxR4HY4n//w4fXJ96+FYl01gHskQoKB+yN+CQT7k5Mc/B9 mhIwyA468rSK/Qt3Y9bsNre6JhhbOdv3t2XZfsEC6SEBqSIvyD0VoaLn9WIrBGfE hRq2stXaJD4XWmIUuhX/wVKXXqF6/2o= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:05 2025 by rpki-client