$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: uGXWEdR6Cb7fBOIEr+WnLuUfb/mb0c0GA4ZUu4eTooQ= Subject key identifier: 65:96:ED:A2:13:D9:9E:8A:59:61:CF:4D:A5:46:24:E3:85:77:D7:C3 Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: 39 Signing time: Fri 25 Apr 2025 06:31:51 +0000 Manifest this update: Fri 25 Apr 2025 06:31:51 +0000 Manifest next update: Fri 02 May 2025 06:31:51 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: tW2gwEAmJjk7M7c1S/wbk67f5ecJk6r2YUDPo1SLKR4=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: JjAbZf5k619HY4BxA5a3XYqwkE4mZ8Dpr0cRyMIFTZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Apr 25 06:31:51 2025 GMT Not After : May 2 06:31:51 2025 GMT Subject: CN=680b2c57-9cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:96:b9:dc:42:73:a7:ba:04:03:68:fc:24: 3b:af:11:f6:3c:f3:99:cb:fd:04:a6:9a:4f:07:6d: 46:17:20:2a:87:40:0b:12:a3:d4:3e:bc:ac:39:ce: 18:54:59:c9:66:d6:c7:b1:f4:d7:ac:77:a6:36:97: 4c:fa:ef:b3:4b:bb:8f:e9:47:13:ed:c3:fc:d6:ca: c7:21:96:2a:ff:75:b1:71:42:91:09:ad:d6:d7:ac: da:17:d9:10:da:b2:c8:27:9f:e8:d8:3b:13:00:a5: 79:87:bd:69:f3:1e:13:d9:23:9d:cf:64:4a:35:db: b7:74:ee:8d:e8:9a:6d:62:40:f6:eb:ba:2f:f0:fd: dd:f7:d7:d0:6a:24:b3:dc:ce:ca:ca:09:19:cc:22: 94:52:b8:b2:c0:e8:59:27:9f:31:42:ee:7d:53:10: d2:25:e7:a5:17:69:a2:ec:97:c7:68:02:2e:a6:91: b2:14:5f:04:ef:ed:d4:af:70:ee:99:ce:93:84:99: 56:08:92:00:be:d6:d3:5d:df:fb:d3:5b:87:57:43: 45:aa:c7:07:6d:fe:24:fd:ba:39:6c:1d:51:85:52: 74:98:d9:ff:81:36:ca:a8:54:54:b0:3d:b8:58:d2: c6:ba:81:b1:72:7f:63:3b:29:d8:c3:62:7f:64:a9: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:96:ED:A2:13:D9:9E:8A:59:61:CF:4D:A5:46:24:E3:85:77:D7:C3 X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c9:b1:73:03:7f:2c:01:8f:c3:a9:9f:f3:e3:94:00:79:13: b2:09:10:46:ce:dd:ee:50:39:23:b9:52:5a:2d:bf:86:1b:46: 14:d6:ee:85:02:6f:dd:77:d3:7e:ad:38:3c:f1:99:70:f2:a4: 51:7d:d6:f7:8d:b7:cb:d0:cf:1c:c3:8d:d7:44:42:a9:61:fb: e1:24:65:df:1d:9c:33:af:f6:e1:76:77:0b:ff:80:d4:39:e5: 7f:d2:92:2d:c7:e1:44:c3:17:eb:ce:ac:c8:52:d3:1a:f9:28: ca:24:66:e5:03:fa:dc:85:b6:0e:f5:ee:b4:ef:85:23:9e:ca: 72:55:50:f6:4f:62:28:e6:17:5a:f1:ce:90:73:9f:d5:43:3e: 60:76:65:23:36:25:c9:97:1a:aa:49:66:68:66:a8:50:b1:9f: 97:5d:dc:07:89:ab:23:0a:63:44:66:53:cc:51:e5:d7:58:33: 97:b4:c1:e8:9b:c5:ff:65:15:34:3e:67:d2:f2:b0:b4:8c:05: 48:32:e1:ae:60:e7:23:8d:2e:f5:47:fa:d4:3a:27:19:c7:64: 78:7a:63:c5:0b:77:21:41:9f:20:4a:87:34:3c:ed:70:34:ca: 18:3b:ba:64:ab:dc:b0:75:42:15:2d:8d:e1:ed:b3:4e:9b:0e: 58:6f:83:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoODUyMDQ2OTE1MTg1Rjg1NUUwOUVCMzQ0Nzg4MTM5NDMw RTc0MEYwNzAeFw0yNTA0MjUwNjMxNTFaFw0yNTA1MDIwNjMxNTFaMBgxFjAUBgNV BAMTDTY4MGIyYzU3LTljZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIxpa53EJzp7oEA2j8JDuvEfY885nL/QSmmk8HbUYXICqHQAsSo9Q+vKw5zhhU Wclm1sex9Nesd6Y2l0z677NLu4/pRxPtw/zWyschlir/dbFxQpEJrdbXrNoX2RDa ssgnn+jYOxMApXmHvWnzHhPZI53PZEo127d07o3omm1iQPbrui/w/d3319BqJLPc zsrKCRnMIpRSuLLA6FknnzFC7n1TENIl56UXaaLsl8doAi6mkbIUXwTv7dSvcO6Z zpOEmVYIkgC+1tNd3/vTW4dXQ0Wqxwdt/iT9ujlsHVGFUnSY2f+BNsqoVFSwPbhY 0sa6gbFyf2M7KdjDYn9kqS+NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZZbtohPZ nopZYc9NpUYk44V318MwHwYDVR0jBBgwFoAUhSBGkVGF+FXgnrNEeIE5Qw50Dwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0U2MzVGNzk2Q0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFNCR2tWR0YtRlhnbnJORWVJRTVRdzUwRHdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB QzRCL0U2MzVGNzk2Q0Q3RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZY Z25yTkVlSUU1UXc1MER3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbJsXMDfywBj8Opn/PjlAB5E7IJEEbO3e5QOSO5Ulotv4YbRhTW7oUC b913036tODzxmXDypFF91veNt8vQzxzDjddEQqlh++EkZd8dnDOv9uF2dwv/gNQ5 5X/Ski3H4UTDF+vOrMhS0xr5KMokZuUD+tyFtg717rTvhSOeynJVUPZPYijmF1rx zpBzn9VDPmB2ZSM2JcmXGqpJZmhmqFCxn5dd3AeJqyMKY0RmU8xR5ddYM5e0weib xf9lFTQ+Z9LysLSMBUgy4a5g5yONLvVH+tQ6JxnHZHh6Y8ULdyFBnyBKhzQ87XA0 yhg7umSr3LB1QhUtjeHts06bDlhvg74= -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:01 2025 by rpki-client