$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: HBxo/1AzhBKID2k7yMBZjhqmDft0ZbK/fe2kB89cstE= Subject key identifier: DC:E4:25:12:F3:EE:DB:5E:45:E2:F7:AD:9A:32:9E:17:72:E0:AB:46 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 02C7 Signing time: Fri 25 Apr 2025 01:13:39 +0000 Manifest this update: Fri 25 Apr 2025 01:13:39 +0000 Manifest next update: Fri 02 May 2025 01:13:39 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: DV3VKyRBgURaJ5JqNIP+F3Gtbu1OcBatK0vWyMCi+ZU=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: jre2vqEbptB4xJwOL59Axq+r7br5KETLkmyJEM9TLFk=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: AC9qL1JmCHG5dg0vjJNKY7KJG1pWhEheRkBl8uBeh7M=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945, serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Apr 25 01:13:39 2025 GMT Not After : May 2 01:13:39 2025 GMT Subject: CN=680ae1c3-dd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:ba:a1:a8:f2:c3:5a:2b:28:54:fb:a0:67: 20:fe:ea:f2:db:4c:61:d8:a7:67:f3:58:e8:82:a6: 17:cf:c3:82:9d:a2:ed:b7:5f:c3:ff:07:c3:98:d3: 7a:0b:a8:39:d4:eb:e0:9e:65:23:58:1b:fe:9b:97: 80:a6:81:ea:dd:a1:a4:24:ed:66:5a:ee:83:5d:33: 62:fa:61:7d:6f:d2:85:e5:28:9f:a1:a1:69:b4:9b: b3:f6:9c:62:09:db:fe:0e:90:82:ad:b4:b6:b2:c0: 72:b3:07:c3:4e:41:0d:2b:10:ce:a1:83:04:d0:d0: 67:d1:2a:14:f7:43:f8:c1:a9:71:79:7e:69:4c:82: 21:33:4c:ad:46:f9:cb:4a:a7:0d:14:88:99:69:dd: e2:c9:f8:92:ca:11:e6:ec:df:3c:49:d5:b3:9b:a0: a1:b4:9c:cc:3e:0e:75:e2:73:26:bb:bf:8f:75:ba: 5b:9d:c7:ee:a2:ab:c5:76:e4:21:4d:64:5d:f5:54: 3a:d3:63:33:fb:7f:e8:90:a3:08:6b:a0:28:65:c4: e2:2c:7d:b1:38:a1:0f:80:b4:e1:b9:1a:80:26:00: 17:f8:3f:b4:13:b5:9c:e2:1a:88:c6:98:a1:05:e6: 81:0b:05:8b:67:75:e4:61:14:06:8d:20:33:c2:8b: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:25:12:F3:EE:DB:5E:45:E2:F7:AD:9A:32:9E:17:72:E0:AB:46 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:49:62:a5:34:08:db:33:2b:08:e0:31:95:9a:15:b4:28:4b: fd:57:84:a9:38:60:63:9d:2f:05:e8:b2:3d:c3:7e:b5:71:dc: f0:e2:ad:6c:4b:e6:13:95:f1:5c:eb:84:12:01:6d:5b:ce:1b: 49:67:98:33:75:6f:4d:54:04:93:2c:34:a1:3e:54:6f:06:97: c3:0b:53:25:92:60:67:b1:17:50:9f:36:d9:42:43:61:3c:29: 09:93:ac:86:4b:6a:de:bc:61:15:59:62:d4:95:cc:29:c1:3e: 2d:77:d7:ee:8e:24:28:ec:e3:e5:ad:17:dc:33:c1:2c:39:13: ca:4a:5b:2e:3f:98:1c:7e:ce:c8:7d:13:49:cf:57:e3:16:d3: e9:b6:27:fd:5a:77:54:fa:d7:f2:8f:b5:f5:69:1f:75:80:af: 0c:af:1d:cb:1a:cb:23:02:4f:d0:d0:32:9b:1e:21:d8:f5:46: 6b:f5:9b:e7:7f:8c:89:d3:2e:96:c2:dd:d2:51:ba:aa:d3:93: 68:c7:af:38:ee:12:45:09:9e:5f:98:1d:e5:a8:ec:40:65:0f: a5:bc:93:af:34:77:b0:7f:8a:ba:e4:1e:5a:ac:47:5a:ad:26: 65:4c:23:44:e9:5b:6a:2f:c2:97:37:c2:14:3e:a0:75:ad:08: 8f:88:dc:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNDI1MDExMzM5WhcNMjUwNTAyMDExMzM5WjAYMRYwFAYD VQQDEw02ODBhZTFjMy1kZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P+6oajyw1orKFT7oGcg/ury20xh2Kdn81jogqYXz8OCnaLtt1/D/wfDmNN6 C6g51OvgnmUjWBv+m5eApoHq3aGkJO1mWu6DXTNi+mF9b9KF5SifoaFptJuz9pxi Cdv+DpCCrbS2ssByswfDTkENKxDOoYME0NBn0SoU90P4walxeX5pTIIhM0ytRvnL SqcNFIiZad3iyfiSyhHm7N88SdWzm6ChtJzMPg514nMmu7+PdbpbncfuoqvFduQh TWRd9VQ602Mz+3/okKMIa6AoZcTiLH2xOKEPgLThuRqAJgAX+D+0E7Wc4hqIxpih BeaBCwWLZ3XkYRQGjSAzwouZRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzkJRLz 7tteReL3rZoynhdy4KtGMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSWKlNAjbMysI4DGVmhW0KEv9V4SpOGBjnS8F6LI9w361cdzw4q1s S+YTlfFc64QSAW1bzhtJZ5gzdW9NVASTLDShPlRvBpfDC1MlkmBnsRdQnzbZQkNh PCkJk6yGS2revGEVWWLUlcwpwT4td9fujiQo7OPlrRfcM8EsORPKSlsuP5gcfs7I fRNJz1fjFtPptif9WndU+tfyj7X1aR91gK8Mrx3LGssjAk/Q0DKbHiHY9UZr9Zvn f4yJ0y6Wwt3SUbqq05Nox6847hJFCZ5fmB3lqOxAZQ+lvJOvNHewf4q65B5arEda rSZlTCNE6VtqL8KXN8IUPqB1rQiPiNyt -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:38 2025 by rpki-client