$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: ApCDo2YiIKlwJJ9esg4Iu4p+nT1owDaPFVIMNY5zavs= Subject key identifier: BF:B4:00:99:35:2F:88:03:A0:69:BE:43:30:61:B3:B7:61:26:DC:55 Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 01C2 Signing time: Fri 25 Apr 2025 02:12:01 +0000 Manifest this update: Fri 25 Apr 2025 02:12:00 +0000 Manifest next update: Fri 02 May 2025 02:12:00 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: WA3YNJQPWCA7lTPueJ6647kQ/dtt+LForcazqvyqSXs=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Apr 25 02:12:00 2025 GMT Not After : May 2 02:12:00 2025 GMT Subject: CN=680aef71-c477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:d4:bf:a4:d3:24:25:ca:9d:f1:d4:8a:4f: 1e:73:46:d5:14:b2:f0:7c:6c:b7:00:aa:33:b1:26: 7f:bc:8c:e3:61:95:b7:47:f5:0b:26:65:fc:f2:29: fb:59:5a:a8:fe:76:12:54:f5:66:4a:67:8b:4a:34: 25:74:59:90:36:67:47:8b:30:84:03:7f:b0:87:91: 32:27:a3:a0:97:ea:69:69:c6:29:7e:15:15:50:8c: 0c:bf:8c:15:13:53:dc:e6:7f:cd:f4:f1:3f:68:bf: cd:d6:17:d4:9f:8c:0f:fd:48:cb:ed:c5:35:e0:ef: 33:ae:cf:55:4d:b8:a5:1c:89:40:a4:34:cc:f9:d1: 4c:ef:27:80:91:a4:ae:ac:0b:22:6c:43:78:68:79: de:f5:b9:c9:d9:e6:d6:28:45:3f:f6:03:82:46:7b: 37:f2:72:07:6f:a6:a6:12:ce:13:d5:ca:8e:c9:cd: 3f:03:dc:0d:8e:6b:16:58:5f:2e:c1:0d:72:31:85: d3:76:7c:cf:4e:cb:b9:42:ce:bf:c4:88:fb:59:a0: 70:c5:96:73:37:6b:65:54:51:3e:80:29:1b:f7:a9: 90:63:54:0c:9f:78:31:e1:b1:f4:dd:f6:ab:1e:01: aa:57:f4:b9:54:a7:41:06:98:9c:9c:41:47:95:dd: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:00:99:35:2F:88:03:A0:69:BE:43:30:61:B3:B7:61:26:DC:55 X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:51:7b:51:f0:da:2a:f2:ad:48:73:d4:cf:0e:b8:ab:16:1a: 6c:db:5a:4b:d5:8b:ec:86:d2:d5:d1:fd:d0:ae:6e:49:fc:d6: 8d:76:3a:2e:e8:15:9d:31:d7:31:da:7b:ff:11:e3:aa:62:13: 6a:23:2c:87:d5:c3:27:67:f7:94:39:d4:d1:19:8a:9e:a7:0c: 5c:f6:e2:04:79:e9:04:36:93:e4:15:54:c9:1d:47:2e:41:25: 74:51:77:13:0e:e8:fd:37:37:7e:e1:28:b4:0b:48:27:d3:24: d4:e2:60:22:b2:90:b6:23:39:ca:74:d4:92:70:43:39:2a:50: bf:9b:1c:20:92:7c:4c:76:c8:83:25:9c:ca:68:fb:92:2e:97: 44:91:81:da:40:52:0a:b0:6e:05:05:b4:44:b2:9f:1b:97:f6: 12:a5:47:d3:ad:bb:e1:e1:a5:3f:24:56:91:b6:e6:63:f3:83: d1:8c:4b:3f:ed:82:2c:32:a2:5a:d6:59:90:25:6f:d2:10:66: d2:53:eb:1d:53:92:e4:1e:49:4f:1b:95:46:1b:dd:3c:55:a5: d8:1b:e4:fc:1a:57:e0:b0:d9:65:88:ef:3b:f4:be:23:83:a3: 8b:5c:74:3a:22:10:fb:25:94:93:13:cb:9c:7b:79:12:9a:eb: a1:b4:d3:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUwNDI1MDIxMjAwWhcNMjUwNTAyMDIxMjAwWjAYMRYwFAYD VQQDEw02ODBhZWY3MS1jNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQDUv6TTJCXKnfHUik8ec0bVFLLwfGy3AKozsSZ/vIzjYZW3R/ULJmX88in7 WVqo/nYSVPVmSmeLSjQldFmQNmdHizCEA3+wh5EyJ6Ogl+ppacYpfhUVUIwMv4wV E1Pc5n/N9PE/aL/N1hfUn4wP/UjL7cU14O8zrs9VTbilHIlApDTM+dFM7yeAkaSu rAsibEN4aHne9bnJ2ebWKEU/9gOCRns38nIHb6amEs4T1cqOyc0/A9wNjmsWWF8u wQ1yMYXTdnzPTsu5Qs6/xIj7WaBwxZZzN2tlVFE+gCkb96mQY1QMn3gx4bH03far HgGqV/S5VKdBBpicnEFHld2mfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+0AJk1 L4gDoGm+QzBhs7dhJtxVMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAUXtR8Noq8q1Ic9TPDrirFhps21pL1YvshtLV0f3Qrm5J/NaNdjou 6BWdMdcx2nv/EeOqYhNqIyyH1cMnZ/eUOdTRGYqepwxc9uIEeekENpPkFVTJHUcu QSV0UXcTDuj9Nzd+4Si0C0gn0yTU4mAispC2IznKdNSScEM5KlC/mxwgknxMdsiD JZzKaPuSLpdEkYHaQFIKsG4FBbREsp8bl/YSpUfTrbvh4aU/JFaRtuZj84PRjEs/ 7YIsMqJa1lmQJW/SEGbSU+sdU5LkHklPG5VGG908VaXYG+T8GlfgsNlliO879L4j g6OLXHQ6IhD7JZSTE8uce3kSmuuhtNOl -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:00 2025 by rpki-client