$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: O5ZMQXKt1ev2k4rwhHCVlBC+Z4+lFxhlDelGi5yuIpY= Subject key identifier: 18:B6:F0:1E:D4:80:AB:85:C1:BA:50:E4:E9:DC:6D:78:DE:A1:0A:C6 Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: C0 Signing time: Fri 25 Apr 2025 00:52:07 +0000 Manifest this update: Fri 25 Apr 2025 00:52:07 +0000 Manifest next update: Fri 02 May 2025 00:52:07 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: Z7qmaywrZ+70gRmsdWp7uQxIj05AQKPga4H2WdFxhhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: Apr 25 00:52:07 2025 GMT Not After : May 2 00:52:07 2025 GMT Subject: CN=680adcb7-3ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:0b:a5:3b:25:a6:52:8e:6d:3e:6e:5f:f6: 51:88:7f:8b:b9:3d:59:93:f6:c6:2c:62:86:6e:74: ab:14:a2:41:1f:ca:99:37:11:0e:0b:12:f7:5e:76: d1:2e:a5:ea:3b:34:66:dc:64:25:e7:99:e2:12:56: c2:22:a8:4c:a0:20:38:52:60:c2:a7:45:db:97:4f: 53:31:c8:59:74:70:af:f6:78:91:7a:df:f0:57:06: 8f:c6:47:f6:e5:b7:c1:c9:ac:ff:78:e4:5e:14:a3: 84:b1:97:30:93:b9:30:f4:6e:22:de:92:54:d7:1c: 33:a1:14:46:fd:20:29:82:17:48:57:6c:b1:83:7a: 48:6b:54:28:18:0a:67:47:a8:51:c6:aa:b4:8f:fc: bc:62:16:b8:76:19:05:c8:36:03:45:5e:62:c3:27: 90:76:78:df:4e:39:9d:70:96:e0:96:2a:a5:30:12: 7a:7e:4a:06:16:c5:42:36:fd:71:c5:b9:0e:97:da: 38:03:6a:17:67:22:8d:00:17:f5:c7:e6:e7:40:08: e7:06:e6:02:0b:21:59:bd:45:85:be:61:be:c2:46: db:99:68:34:27:f2:4c:f5:6b:de:f4:7f:dd:14:2d: a2:51:a7:36:92:9d:5a:d4:ab:58:90:15:8d:f7:a3: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B6:F0:1E:D4:80:AB:85:C1:BA:50:E4:E9:DC:6D:78:DE:A1:0A:C6 X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:48:8d:25:02:cf:e3:07:28:6d:2a:ff:75:3f:b6:9e:c6:5f: 68:9a:2f:af:fa:67:87:3c:bb:51:cf:16:6d:77:d7:61:6a:74: 4b:e0:6b:13:2d:e0:0b:51:98:ec:6e:48:b5:8e:e4:e4:9b:09: 38:ea:c3:e6:cc:fb:bd:7b:61:eb:44:42:18:c4:ca:c9:c6:7b: f2:fd:b5:f3:33:0e:07:d4:d8:c4:9b:f6:53:05:be:5b:47:93: 95:d1:6e:ff:43:b1:f9:5f:68:63:82:4a:a7:15:55:f5:bb:20: bc:a9:5e:93:db:ad:a2:32:c4:81:c6:fd:ae:1e:78:ea:fb:58: 22:d2:a1:2d:01:8a:c6:7d:18:2c:7d:8f:04:8d:c8:75:e8:9d: 67:bd:41:35:8b:a5:b2:08:4b:d3:b6:d3:b5:a6:98:82:b5:14: a0:d8:8a:1a:b4:ee:f4:f1:3b:fa:6a:e5:40:36:3b:03:a0:75: eb:7f:d5:fd:c6:19:5e:3e:a2:64:9f:8d:39:b4:5f:b5:44:65: 39:56:89:14:e3:e3:56:c6:80:bd:36:12:a3:22:45:d9:e7:82: e2:ea:98:c3:ff:ab:d1:30:5d:74:46:01:65:ea:d4:5b:b2:db: 17:a2:ba:c3:ed:c5:bc:dd:45:d4:87:75:8e:53:2a:e5:40:79: 20:a7:3f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUwNDI1MDA1MjA3WhcNMjUwNTAyMDA1MjA3WjAYMRYwFAYD VQQDEw02ODBhZGNiNy0zZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nkLpTslplKObT5uX/ZRiH+LuT1Zk/bGLGKGbnSrFKJBH8qZNxEOCxL3XnbR LqXqOzRm3GQl55niElbCIqhMoCA4UmDCp0Xbl09TMchZdHCv9niRet/wVwaPxkf2 5bfByaz/eOReFKOEsZcwk7kw9G4i3pJU1xwzoRRG/SApghdIV2yxg3pIa1QoGApn R6hRxqq0j/y8Yha4dhkFyDYDRV5iwyeQdnjfTjmdcJbgliqlMBJ6fkoGFsVCNv1x xbkOl9o4A2oXZyKNABf1x+bnQAjnBuYCCyFZvUWFvmG+wkbbmWg0J/JM9Wve9H/d FC2iUac2kp1a1KtYkBWN96OtMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi28B7U gKuFwbpQ5OncbXjeoQrGMB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnSI0lAs/jByhtKv91P7aexl9omi+v+meHPLtRzxZtd9dhanRL4GsT LeALUZjsbki1juTkmwk46sPmzPu9e2HrREIYxMrJxnvy/bXzMw4H1NjEm/ZTBb5b R5OV0W7/Q7H5X2hjgkqnFVX1uyC8qV6T262iMsSBxv2uHnjq+1gi0qEtAYrGfRgs fY8Ejch16J1nvUE1i6WyCEvTttO1ppiCtRSg2IoatO708Tv6auVANjsDoHXrf9X9 xhlePqJkn405tF+1RGU5VokU4+NWxoC9NhKjIkXZ54Li6pjD/6vRMF10RgFl6tRb stsXorrD7cW83UXUh3WOUyrlQHkgpz/p -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:38 2025 by rpki-client