$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: 7+KjoHO+gBxxq6OohosP+5ZBMSlpEJYYFrQlRHI3WBQ= Subject key identifier: 1B:AE:86:D7:19:76:90:D2:E1:5E:D3:B7:9A:FE:3E:15:DF:3E:F4:35 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 0643 Signing time: Thu 24 Apr 2025 22:23:42 +0000 Manifest this update: Thu 24 Apr 2025 22:23:42 +0000 Manifest next update: Thu 01 May 2025 22:23:42 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: bylYTs+UpYaQRHMmBJfqAKK00DI/XfMRPTOtPC7kg+Q=) 2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Apr 24 22:23:42 2025 GMT Not After : May 1 22:23:42 2025 GMT Subject: CN=680ab9ee-ad31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:93:4c:31:f3:17:8c:c3:37:a1:80:1d:1e: 25:4b:f7:1e:00:20:85:45:71:1b:82:ea:d8:da:a7: 89:42:3e:5a:1a:bf:4c:6e:44:d3:55:34:cb:1e:ef: 44:97:62:ff:ca:45:02:10:2d:a1:08:a4:aa:06:a2: e7:c4:a1:b6:d4:ee:64:85:51:b9:47:b6:60:f2:4a: 1e:26:03:7e:96:99:75:ee:6d:b5:ba:51:fb:6b:3a: c7:5a:92:27:53:44:de:c9:a8:a6:74:91:4e:96:48: 7f:5e:ad:e8:ec:3f:51:3a:0f:76:a9:c0:6b:08:7c: 64:2e:26:b4:f7:65:1b:e9:9c:f1:d8:6a:45:35:b0: ab:0f:5c:fa:21:ba:2f:3f:be:85:06:4d:e1:b0:16: c5:63:0f:75:fd:69:50:4e:86:6e:0b:01:2c:e8:d2: 38:90:77:4c:cc:74:f7:35:e2:48:7d:1d:49:33:76: ea:49:78:c6:d7:de:b4:04:4d:4e:20:75:27:ee:4a: 35:ba:1e:d1:e8:08:94:09:b6:58:03:16:b7:35:e6: 07:b6:94:c7:9a:56:38:2d:67:85:70:09:13:62:5e: 28:60:3d:97:65:6c:a3:c7:92:2d:eb:78:b7:38:d6: 56:d8:71:b1:a8:ea:73:9b:bd:74:1c:eb:ac:af:df: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AE:86:D7:19:76:90:D2:E1:5E:D3:B7:9A:FE:3E:15:DF:3E:F4:35 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:f3:79:25:94:16:36:2e:84:53:86:de:33:23:c0:33:eb: 3a:fe:3b:ab:e2:64:a0:f5:18:a2:9c:e9:ce:89:cd:4e:86:d0: b3:a6:e0:43:66:9b:69:89:6f:f0:49:5a:ff:b3:d4:0d:da:75: f7:79:bb:ce:0a:df:2a:58:0c:af:ad:24:71:0e:c9:ab:10:be: 93:19:4e:4e:93:d3:2b:6f:31:98:79:59:86:e8:99:5c:0f:2a: 7e:a9:43:5d:81:12:ab:3a:de:e8:b0:98:ad:2d:54:30:2a:10: 13:4e:d1:df:9f:c6:11:25:dd:bd:fb:d1:30:6e:53:01:a3:2f: a2:29:af:37:ce:c9:0e:8f:7a:3a:65:50:b3:dc:c6:7a:2e:66: bc:0e:92:61:ef:55:92:13:19:e1:b1:81:15:63:72:e7:46:5d: 32:ba:91:72:1d:dd:48:58:60:fa:49:0a:16:e6:13:48:52:9c: 37:ed:66:50:cc:fb:7e:ef:c4:cd:36:0b:b1:13:a4:8d:ba:e7: 4b:52:2a:ba:27:fb:ff:77:81:73:5c:c2:7e:36:d8:c7:cb:66: 1b:c5:eb:dd:c2:a6:21:77:1c:e1:d6:7c:69:ee:f2:a1:75:eb: fd:4f:c7:e4:92:da:68:fb:5e:6c:f9:0a:4e:cd:7a:1f:ea:2e: 36:d6:63:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNDI0MjIyMzQyWhcNMjUwNTAxMjIyMzQyWjAYMRYwFAYD VQQDEw02ODBhYjllZS1hZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZSTTDHzF4zDN6GAHR4lS/ceACCFRXEbgurY2qeJQj5aGr9MbkTTVTTLHu9E l2L/ykUCEC2hCKSqBqLnxKG21O5khVG5R7Zg8koeJgN+lpl17m21ulH7azrHWpIn U0TeyaimdJFOlkh/Xq3o7D9ROg92qcBrCHxkLia092Ub6Zzx2GpFNbCrD1z6Ibov P76FBk3hsBbFYw91/WlQToZuCwEs6NI4kHdMzHT3NeJIfR1JM3bqSXjG1960BE1O IHUn7ko1uh7R6AiUCbZYAxa3NeYHtpTHmlY4LWeFcAkTYl4oYD2XZWyjx5It63i3 ONZW2HGxqOpzm710HOusr9/NJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuuhtcZ dpDS4V7Tt5r+PhXfPvQ1MB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtD/N5JZQWNi6EU4beMyPAM+s6/jur4mSg9RiinOnOic1OhtCzpuBD ZptpiW/wSVr/s9QN2nX3ebvOCt8qWAyvrSRxDsmrEL6TGU5Ok9MrbzGYeVmG6Jlc Dyp+qUNdgRKrOt7osJitLVQwKhATTtHfn8YRJd29+9EwblMBoy+iKa83zskOj3o6 ZVCz3MZ6Lma8DpJh71WSExnhsYEVY3LnRl0yupFyHd1IWGD6SQoW5hNIUpw37WZQ zPt+78TNNguxE6SNuudLUiq6J/v/d4FzXMJ+NtjHy2YbxevdwqYhdxzh1nxp7vKh dev9T8fkktpo+15s+QpOzXof6i421mNt -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:20 2025 by rpki-client