$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json) Hash identifier: sjepC7nV5cuurE6uFLNJIauzlNdODqUQQXTa2IBVjIo= Subject key identifier: 65:9B:64:0E:52:EF:CB:02:65:B4:66:9F:9C:56:94:E8:C3:A1:02:EC Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft Manifest number: 48 Signing time: Fri 25 Apr 2025 06:24:27 +0000 Manifest this update: Fri 25 Apr 2025 06:24:26 +0000 Manifest next update: Fri 02 May 2025 06:24:26 +0000 Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: 16Hc6S/nKuwQbAKp9MMOQFKb6A2uVt2iPbd1spqxtFs=) 2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: nKrpei7NHXS/yvzIer9NaLALl/Q2sUCsHstVjHOpR2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Validity Not Before: Apr 25 06:24:26 2025 GMT Not After : May 2 06:24:26 2025 GMT Subject: CN=680b2a9a-8142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d0:16:71:ab:91:5c:7b:b9:e9:40:14:1b:14: 44:5b:71:ef:af:de:a1:b7:e6:f1:90:41:0d:24:cf: 0d:42:07:6e:54:b8:0c:93:03:d0:78:3f:24:7b:06: fa:77:23:8b:90:50:f3:1e:7b:c0:dc:6a:52:48:08: e0:37:88:02:b5:12:98:dc:ae:b8:ba:9c:71:d8:a5: 7c:22:c5:b4:70:85:30:c2:22:77:2a:fd:56:08:83: 80:f0:f6:86:03:84:87:66:66:ea:e5:12:3c:ff:f4: d5:e8:54:19:e7:ba:54:f4:13:d4:ff:46:01:92:99: 80:02:5c:9d:eb:f0:ac:c9:29:49:b7:d3:aa:de:e7: ed:aa:bb:3e:4d:ab:cc:20:ef:72:25:16:e1:5e:ac: 97:b6:6f:ee:92:cf:48:be:52:5b:86:24:cc:71:c2: 05:d0:47:68:2b:3f:94:16:b1:fc:fa:ba:55:ca:c3: 86:f0:40:49:eb:38:20:3f:61:4c:b1:e5:ef:e5:69: f8:96:2d:9e:1f:cf:ad:ec:04:bf:b5:8c:54:7a:6e: fd:2e:2b:0e:16:72:67:fb:1c:8b:10:90:ec:ea:34: fc:9a:38:00:60:d4:d8:67:da:f6:a9:4c:9c:e4:ba: c8:24:ff:5c:64:f4:f9:87:df:e7:d1:c1:c4:3f:15: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9B:64:0E:52:EF:CB:02:65:B4:66:9F:9C:56:94:E8:C3:A1:02:EC X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:21:30:c0:d8:ce:8b:4a:a6:7f:33:09:a0:bf:94:ec:09:78: 36:5f:f4:cf:33:a2:61:2d:52:ea:52:b3:60:5f:5d:06:57:ce: 24:ab:97:c5:37:b1:59:9b:fa:bf:be:09:b9:91:50:69:17:65: 6c:19:37:63:1c:94:d7:f0:b7:9e:f0:e1:c9:01:aa:81:19:4d: 34:10:6f:85:94:99:0b:56:1e:68:b6:2c:9a:97:64:6b:96:18: 02:c7:ef:1f:b5:f6:00:9a:6c:17:79:96:0e:e4:64:f8:55:fb: ff:94:3c:c9:9c:eb:92:29:2a:b6:63:03:82:ba:60:c7:c4:9a: ee:90:19:1b:f6:97:93:c9:9f:63:44:43:f3:61:c1:7e:ef:53: f1:5a:11:9d:cd:3c:ff:7f:e6:aa:f0:8f:fb:54:1f:ae:ba:5b: a3:d8:5a:2a:0d:fe:2d:c9:fb:3a:e1:66:84:02:fb:95:0d:46: 05:ee:1d:17:6e:75:4b:ef:5c:d8:b5:73:59:7c:93:37:e6:15: 01:5c:45:bb:1b:02:9f:0c:15:4b:26:cd:7a:f1:df:70:6c:20: 68:7e:7c:e8:16:df:e0:44:5f:20:57:16:25:25:a3:87:83:97: 03:fb:51:72:77:6d:f8:59:a3:96:b8:04:d3:17:c8:2d:05:3a: ad:50:8e:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzEzMjExMC8GA1UEBRMoODVFOTk5QzIyQkVFMDFDMzI2NEQzRDIyNjc1ODIxMDky RkZGRDAyQzAeFw0yNTA0MjUwNjI0MjZaFw0yNTA1MDIwNjI0MjZaMBgxFjAUBgNV BAMTDTY4MGIyYTlhLTgxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg0BZxq5Fce7npQBQbFERbce+v3qG35vGQQQ0kzw1CB25UuAyTA9B4PyR7Bvp3 I4uQUPMee8DcalJICOA3iAK1Epjcrri6nHHYpXwixbRwhTDCIncq/VYIg4Dw9oYD hIdmZurlEjz/9NXoVBnnulT0E9T/RgGSmYACXJ3r8KzJKUm306re5+2quz5Nq8wg 73IlFuFerJe2b+6Sz0i+UluGJMxxwgXQR2grP5QWsfz6ulXKw4bwQEnrOCA/YUyx 5e/lafiWLZ4fz63sBL+1jFR6bv0uKw4Wcmf7HIsQkOzqNPyaOABg1Nhn2vapTJzk usgk/1xk9PmH3+fRwcQ/FYXZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZZtkDlLv ywJltGafnFaU6MOhAuwwHwYDVR0jBBgwFoAUhemZwivuAcMmTT0iZ1ghCS//0Cww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMTMyL0M0RkExNEY4Qjgw QzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBD dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVtWndpdnVBY01tVFQwaVoxZ2hDU19fMEN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MTMyL0M0RkExNEY4QjgwQzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNN bVRUMGlaMWdoQ1NfXzBDdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABkhMMDYzotKpn8zCaC/lOwJeDZf9M8zomEtUupSs2BfXQZXziSrl8U3 sVmb+r++CbmRUGkXZWwZN2MclNfwt57w4ckBqoEZTTQQb4WUmQtWHmi2LJqXZGuW GALH7x+19gCabBd5lg7kZPhV+/+UPMmc65IpKrZjA4K6YMfEmu6QGRv2l5PJn2NE Q/NhwX7vU/FaEZ3NPP9/5qrwj/tUH666W6PYWioN/i3J+zrhZoQC+5UNRgXuHRdu dUvvXNi1c1l8kzfmFQFcRbsbAp8MFUsmzXrx33BsIGh+fOgW3+BEXyBXFiUlo4eD lwP7UXJ3bfhZo5a4BNMXyC0FOq1Qjlk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:35 2025 by rpki-client