$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json) Hash identifier: Syr1YIgk0tfsNCjWupHMcejII4Ub4/q7p6jhIbwBroI= Subject key identifier: CF:C3:C9:E5:C5:23:53:20:03:BC:7F:94:26:74:09:2F:49:76:A8:25 Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft Manifest number: 06BE Signing time: Thu 24 Apr 2025 21:54:54 +0000 Manifest this update: Thu 24 Apr 2025 21:54:54 +0000 Manifest next update: Thu 01 May 2025 21:54:54 +0000 Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: bXYGZqdWj3SuY8c8J2j/pNeLwHhPlzz1fR/92Tvohlk=) 2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: fGJYrfdMmxnMU9m3ImkorOWGB4M3nyP+3+G+aL2cIE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Validity Not Before: Apr 24 21:54:54 2025 GMT Not After : May 1 21:54:54 2025 GMT Subject: CN=680ab32e-dd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:7f:79:d6:8a:4a:f8:40:86:44:43:d8:af: 3a:92:0c:71:f0:e3:dd:16:a5:b3:3c:66:9e:05:dc: fb:74:dc:00:3b:c8:af:f6:ad:0d:a5:4c:96:58:f9: 8b:01:98:50:06:94:9c:17:b9:72:26:c5:b2:84:ba: b8:15:11:d2:00:9a:30:88:56:60:37:90:f0:37:b1: b0:5f:e9:68:48:1e:02:78:9a:2d:c4:e8:de:e2:20: 9c:e9:ba:b1:c8:58:f7:8a:9f:2b:61:60:65:c3:de: 45:3a:01:6e:45:f9:26:dd:46:64:2e:a9:27:eb:be: 98:5e:ea:d6:f4:e8:1e:0c:35:01:f3:bd:d1:42:eb: c7:b9:58:4a:5e:6f:8a:83:d7:2e:e9:c1:54:5e:6e: b6:37:2a:0c:b7:ad:6f:09:11:fb:ba:7f:77:52:41: 22:3f:11:65:25:c0:7b:13:56:ce:94:18:d9:2a:89: f2:c3:d9:26:b6:2c:db:45:19:a8:ee:bd:23:21:be: d7:29:d1:4a:10:52:e9:c7:c9:e0:ac:52:5d:af:38: 72:d5:e2:49:8b:5f:cd:e9:65:5c:70:09:27:ae:db: 4a:d9:ad:94:75:20:bc:dd:51:5f:ca:04:96:65:86: ac:7a:63:09:8d:c3:ac:37:f4:1d:7c:51:b7:19:c0: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:C9:E5:C5:23:53:20:03:BC:7F:94:26:74:09:2F:49:76:A8:25 X509v3 Authority Key Identifier: keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e2:27:bd:28:f4:79:e0:a7:e5:b6:cc:f6:0c:02:54:61:10: c5:78:6c:34:a1:50:df:13:86:91:7f:7a:a9:a9:e9:8b:fd:28: 5b:97:12:db:0f:7f:35:5d:6d:74:87:82:1f:8f:08:79:00:14: 05:25:1a:4f:4b:bb:c1:11:da:7e:e2:1f:73:c4:89:5f:c6:c7: 1e:8d:c8:7e:1c:fd:95:e8:4a:9a:01:92:ad:41:bf:8e:7c:77: 43:ac:eb:e1:1a:3a:20:da:73:cc:18:70:d3:1d:b1:0a:39:ff: af:6d:1c:58:a1:f8:eb:d2:21:91:28:ca:d2:5d:57:21:52:fb: 2c:f2:f7:ce:d9:83:4b:a2:36:fe:64:01:3d:58:c0:3e:a8:48: cb:23:58:f8:30:12:42:b5:dd:f7:d1:b2:d3:22:4f:a8:7a:e6: 78:e2:0d:fc:8a:86:18:35:ef:26:72:f1:9f:47:cb:af:fc:f0: d2:05:10:7b:a2:ba:7b:1e:b7:f7:e1:2d:71:dc:9e:78:6b:1a: 25:a3:8e:45:99:7e:44:0c:b2:60:b9:ba:4a:d3:6b:d6:57:22: e3:57:04:c1:8e:a1:e6:92:fd:36:06:b3:e2:5a:2b:8c:79:c7: d3:b1:71:3e:3f:20:28:64:64:11:b7:59:5c:39:ee:82:df:c4: 07:7e:b1:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5 Q0YzODhENUQwHhcNMjUwNDI0MjE1NDU0WhcNMjUwNTAxMjE1NDU0WjAYMRYwFAYD VQQDEw02ODBhYjMyZS1kZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJh/edaKSvhAhkRD2K86kgxx8OPdFqWzPGaeBdz7dNwAO8iv9q0NpUyWWPmL AZhQBpScF7lyJsWyhLq4FRHSAJowiFZgN5DwN7GwX+loSB4CeJotxOje4iCc6bqx yFj3ip8rYWBlw95FOgFuRfkm3UZkLqkn676YXurW9OgeDDUB873RQuvHuVhKXm+K g9cu6cFUXm62NyoMt61vCRH7un93UkEiPxFlJcB7E1bOlBjZKonyw9kmtizbRRmo 7r0jIb7XKdFKEFLpx8ngrFJdrzhy1eJJi1/N6WVccAknrttK2a2UdSC83VFfygSW ZYasemMJjcOsN/QdfFG3GcC5CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/DyeXF I1MgA7x/lCZ0CS9JdqglMB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2 NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3 bnpxUWJyQjlXUnljODRqVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc4ie9KPR54Kfltsz2DAJUYRDFeGw0oVDfE4aRf3qpqemL/ShblxLb D381XW10h4Ifjwh5ABQFJRpPS7vBEdp+4h9zxIlfxscejch+HP2V6EqaAZKtQb+O fHdDrOvhGjog2nPMGHDTHbEKOf+vbRxYofjr0iGRKMrSXVchUvss8vfO2YNLojb+ ZAE9WMA+qEjLI1j4MBJCtd330bLTIk+oeuZ44g38ioYYNe8mcvGfR8uv/PDSBRB7 orp7Hrf34S1x3J54axolo45FmX5EDLJgubpK02vWVyLjVwTBjqHmkv02BrPiWiuM ecfTsXE+PyAoZGQRt1lcOe6C38QHfrGK -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:36 2025 by rpki-client