$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: F6i7baBQ5hO+BNFbML1KKcjJiQ7VYegRKRDcTh59TIg= Subject key identifier: 9B:FA:7C:8E:78:BC:37:8D:67:54:76:7E:DD:7E:BD:8C:AF:08:F7:BA Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 3472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 3472 Signing time: Sat 26 Apr 2025 14:55:48 +0000 Manifest this update: Sat 26 Apr 2025 14:55:47 +0000 Manifest next update: Sat 03 May 2025 14:55:47 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: 4nL44phnnFANv7LIYeLYM9PaNW0zt/llqgJxloy3gIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13426 (0x3472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Apr 26 14:55:47 2025 GMT Not After : May 3 14:55:47 2025 GMT Subject: CN=680cf3f3-965c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:80:2d:25:c3:82:fe:f1:5e:7f:63:61:97: 5c:08:29:43:4a:b9:d8:a5:3e:8d:2e:eb:42:d0:45: c0:21:fd:f7:20:8a:5f:d4:cb:be:45:fb:69:b5:db: db:3c:8b:f3:3a:2e:6f:23:3c:de:7a:91:f0:d2:ad: 23:48:ac:84:93:92:49:44:70:54:b2:59:1b:8e:00: 80:62:57:61:65:4e:e3:7a:7b:7b:cc:ee:e0:70:77: 5e:b0:9e:d5:df:43:c8:5b:08:1e:98:46:e5:71:db: 28:e9:57:63:a8:7a:99:ac:a3:23:6b:7e:a7:4a:da: 26:dc:16:82:11:66:d5:8f:da:33:97:5f:7c:93:d7: 77:e9:49:73:56:1a:28:17:67:b9:02:6e:f6:f2:36: 96:b0:76:26:10:e9:c2:41:0f:e0:ff:30:f7:a6:d9: 1d:62:23:43:41:bc:41:e0:a2:36:e8:28:34:dc:80: 35:94:d7:26:75:b8:dd:72:4f:2e:d8:e4:87:85:02: cd:67:40:30:fa:af:89:6d:77:17:89:67:fd:1b:14: 04:93:c0:eb:74:7e:27:84:30:0b:4f:70:25:1e:91: 2c:e2:2d:ea:4a:ed:10:70:c5:c0:d8:31:79:be:00: dc:d3:a7:ee:11:5f:70:38:e1:5e:ef:00:5e:42:eb: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FA:7C:8E:78:BC:37:8D:67:54:76:7E:DD:7E:BD:8C:AF:08:F7:BA X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:11:00:5b:6e:d1:b2:bb:db:d1:79:23:c8:ba:73:da:6e:ba: a7:24:b6:e3:bb:44:8b:13:5b:7c:dc:49:8f:52:c0:03:6e:b2: 9a:58:e4:0b:91:30:ed:09:10:af:3f:32:9a:72:48:4a:e7:05: 99:03:13:2d:1c:b6:42:1d:2e:a4:88:43:f7:ef:34:a5:44:02: 53:07:f9:5f:f3:30:60:6c:12:61:5c:f9:d6:f4:64:6e:55:1e: 72:1e:de:a9:b5:e9:cf:ce:cf:a4:3f:a9:4d:aa:ae:bf:3a:ad: 95:e6:7b:88:60:83:75:b1:b4:a3:ae:2b:2a:0f:a4:6f:02:21: 51:44:6e:c6:8c:93:3a:3f:cb:48:a7:4c:6c:17:a0:5f:6c:5c: 34:a8:ec:d6:57:ab:e4:8e:e4:36:d0:d3:e4:f4:11:64:ee:c7: df:57:d2:81:19:80:2b:f2:67:77:34:9c:9e:67:a0:56:12:13: 6a:49:7d:b5:00:80:03:29:c3:3c:f6:89:b2:10:23:cc:3a:c7: 6a:3d:0d:bc:89:9e:dc:b1:9e:6e:60:70:24:dc:ff:21:3d:bf: 58:3a:94:12:82:70:78:4f:9b:21:30:a3:b5:c9:f2:6b:b0:78: 3d:d1:ec:fe:e5:c2:38:c5:35:98:8e:55:f1:6f:0d:4f:8c:80: 10:ff:8d:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjUwNDI2MTQ1NTQ3WhcNMjUwNTAzMTQ1NTQ3WjAYMRYwFAYD VQQDEw02ODBjZjNmMy05NjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gOALSXDgv7xXn9jYZdcCClDSrnYpT6NLutC0EXAIf33IIpf1Mu+Rftptdvb PIvzOi5vIzzeepHw0q0jSKyEk5JJRHBUslkbjgCAYldhZU7jent7zO7gcHdesJ7V 30PIWwgemEblcdso6VdjqHqZrKMja36nStom3BaCEWbVj9ozl198k9d36UlzVhoo F2e5Am728jaWsHYmEOnCQQ/g/zD3ptkdYiNDQbxB4KI26Cg03IA1lNcmdbjdck8u 2OSHhQLNZ0Aw+q+JbXcXiWf9GxQEk8DrdH4nhDALT3AlHpEs4i3qSu0QcMXA2DF5 vgDc06fuEV9wOOFe7wBeQuuMOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJv6fI54 vDeNZ1R2ft1+vYyvCPe6MB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaEQBbbtGyu9vReSPIunPabrqnJLbju0SLE1t83EmPUsADbrKaWOQL kTDtCRCvPzKackhK5wWZAxMtHLZCHS6kiEP37zSlRAJTB/lf8zBgbBJhXPnW9GRu VR5yHt6ptenPzs+kP6lNqq6/Oq2V5nuIYIN1sbSjrisqD6RvAiFRRG7GjJM6P8tI p0xsF6BfbFw0qOzWV6vkjuQ20NPk9BFk7sffV9KBGYAr8md3NJyeZ6BWEhNqSX21 AIADKcM89omyECPMOsdqPQ28iZ7csZ5uYHAk3P8hPb9YOpQSgnB4T5shMKO1yfJr sHg90ez+5cI4xTWYjlXxbw1PjIAQ/40S -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:12 2025 by rpki-client