$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft File: HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json) Hash identifier: 53P/ItR3eoC5tbZiEnP3cP2CiLNU8Xh4IPQCTCQnxMY= Subject key identifier: A6:EE:38:7B:08:BE:58:DA:7D:AB:17:A4:FD:AE:22:11:08:CF:0A:43 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft Manifest number: 0A41 Signing time: Thu 24 Apr 2025 19:37:35 +0000 Manifest this update: Thu 24 Apr 2025 19:37:35 +0000 Manifest next update: Thu 01 May 2025 19:37:35 +0000 Files and hashes: 1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: Ra2xSpfysGC7UTKyJou4ThBd431/saE9l7FZIjlN99c=) 2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: zKN4F2avq+xJ9yq6Og5mmKvaFyZB2rEl8x2OZ87RL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Apr 24 19:37:35 2025 GMT Not After : May 1 19:37:35 2025 GMT Subject: CN=680a92ff-70da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:a9:05:1e:9e:3d:c2:61:b3:83:d9:0d:6c: 1e:fd:0b:2c:4c:55:16:0c:77:71:84:33:fc:39:7b: 52:29:6a:5d:7a:b4:01:a5:8b:11:dc:73:b0:e3:1f: c1:97:47:0f:4c:54:7d:20:97:fc:ca:22:4d:84:57: a3:68:7f:8b:4f:6f:06:68:20:5b:72:a3:a8:07:fb: 21:91:82:2b:a0:b8:99:0d:db:cc:23:9f:53:4c:3a: c3:e0:09:f8:89:a3:e4:3f:de:09:83:93:65:be:c1: 7b:61:52:e6:fa:5b:eb:5f:2a:cf:a7:5f:ab:e8:89: aa:a1:56:df:8f:fa:df:b6:7a:3b:60:b2:33:ce:16: 38:bc:9a:0f:03:6f:4d:51:eb:3c:4f:74:58:54:a8: 51:03:af:14:45:73:c3:36:fb:ed:bc:6d:f3:ad:79: c7:ef:85:96:9a:cf:e9:4e:3b:28:8d:0b:a1:a7:ee: 6a:45:7e:58:c3:64:47:29:97:bf:91:82:76:a3:e2: 17:58:21:73:99:cf:95:3d:fd:87:f5:29:09:b6:f9: 04:de:f1:2b:0b:ef:b1:d5:6f:fd:6d:11:c5:ba:a8: 8d:b8:93:46:c4:c6:82:2d:c0:e1:fd:1e:7d:66:77: f1:ce:cb:ce:f7:ad:81:79:83:71:78:6c:5c:95:2d: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EE:38:7B:08:BE:58:DA:7D:AB:17:A4:FD:AE:22:11:08:CF:0A:43 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:7b:26:41:dd:2c:2a:4f:30:3e:e8:35:bc:b6:e9:b0:56: 71:29:3e:36:ed:c2:ae:ac:cc:12:ef:06:be:7c:84:06:45:4a: bf:2e:14:df:39:12:a1:27:38:d7:a5:15:98:39:ba:e6:ca:65: d6:a9:32:01:08:a4:bb:05:0d:05:d1:d9:85:db:e1:3f:bb:6e: a2:23:4f:3d:96:e2:59:e2:ab:e5:09:6c:68:3d:47:ac:32:f2: f7:90:a2:5f:a1:8d:af:29:19:9d:0f:c8:80:90:99:59:b5:20: 94:c4:76:05:d4:9a:a1:d1:7c:f0:59:f1:72:59:5f:0f:44:0f: 02:3c:c0:24:c9:1e:93:5c:b0:0c:8c:2f:33:97:5e:e1:63:34: 4b:26:19:5b:f3:ac:a0:41:e4:06:27:67:6f:e7:1d:12:f7:f3: 3d:5b:e7:88:00:ed:60:16:65:25:53:23:a3:e9:70:81:f3:34: 53:0c:5b:a6:b2:94:d8:cd:ff:64:75:0b:01:26:79:48:fd:e6: c6:fb:ff:89:f7:01:49:e7:e6:06:41:d4:a1:5b:19:7f:17:38: cd:ea:03:b0:58:c2:b2:c1:08:d6:4a:7a:36:b0:b1:ab:4a:9e: a9:36:c7:9a:a8:e2:dc:67:eb:75:67:25:b3:d1:6c:17:80:f1: 2e:b5:7c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjUwNDI0MTkzNzM1WhcNMjUwNTAxMTkzNzM1WjAYMRYwFAYD VQQDEw02ODBhOTJmZi03MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKGpBR6ePcJhs4PZDWwe/QssTFUWDHdxhDP8OXtSKWpderQBpYsR3HOw4x/B l0cPTFR9IJf8yiJNhFejaH+LT28GaCBbcqOoB/shkYIroLiZDdvMI59TTDrD4An4 iaPkP94Jg5NlvsF7YVLm+lvrXyrPp1+r6ImqoVbfj/rftno7YLIzzhY4vJoPA29N Ues8T3RYVKhRA68URXPDNvvtvG3zrXnH74WWms/pTjsojQuhp+5qRX5Yw2RHKZe/ kYJ2o+IXWCFzmc+VPf2H9SkJtvkE3vErC++x1W/9bRHFuqiNuJNGxMaCLcDh/R59 ZnfxzsvO962BeYNxeGxclS0UbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbuOHsI vljafasXpP2uIhEIzwpDMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkU1OC82MDMzQ0Y2QTY2OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmls VjA3LTdLeXZ0MGc4MTJpQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyXsmQd0sKk8wPug1vLbpsFZxKT427cKurMwS7wa+fIQGRUq/LhTf ORKhJzjXpRWYObrmymXWqTIBCKS7BQ0F0dmF2+E/u26iI089luJZ4qvlCWxoPUes MvL3kKJfoY2vKRmdD8iAkJlZtSCUxHYF1Jqh0XzwWfFyWV8PRA8CPMAkyR6TXLAM jC8zl17hYzRLJhlb86ygQeQGJ2dv5x0S9/M9W+eIAO1gFmUlUyOj6XCB8zRTDFum spTYzf9kdQsBJnlI/ebG+/+J9wFJ5+YGQdShWxl/FzjN6gOwWMKywQjWSno2sLGr Sp6pNseaqOLcZ+t1ZyWz0WwXgPEutXxG -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:22 2025 by rpki-client