$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json) Hash identifier: O4v7lh2rxR0kIQ3ydNCt6oHA9cGpADLZWltBdGQ/6dA= Subject key identifier: 61:FD:01:74:F0:1F:69:AD:CF:0B:DC:9C:F3:88:96:45:AF:BC:63:DC Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE Certificate issuer: /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft Manifest number: 34 Signing time: Fri 25 Apr 2025 06:36:51 +0000 Manifest this update: Fri 25 Apr 2025 06:36:50 +0000 Manifest next update: Fri 02 May 2025 06:36:50 +0000 Files and hashes: 1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: 69puhdTaWiCXdqZv8/5UXw6OQPpHqtUAugZl67hHZIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE Validity Not Before: Apr 25 06:36:50 2025 GMT Not After : May 2 06:36:50 2025 GMT Subject: CN=680b2d83-5ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:e1:cd:f3:34:a4:86:18:93:4e:87:65:5b: a1:07:1b:88:7c:24:a4:f2:19:84:db:6f:b9:dc:87: 9a:93:e4:8e:ed:1c:b3:71:e7:0b:e9:06:ae:ce:a7: 63:0e:ce:45:62:28:e7:a4:8a:ee:ed:dc:53:bf:56: f4:86:71:34:2b:30:d5:6d:37:b5:7e:49:2c:fb:43: 2c:18:d5:1c:c8:b3:bf:48:83:d7:93:be:1f:f5:d0: 7d:64:e3:22:d4:82:56:a8:66:31:b6:e1:e9:91:b0: 05:c9:ae:2f:cd:a0:a4:33:4a:23:44:66:1a:a9:45: 61:f0:31:60:13:b0:61:58:77:2d:51:e9:bb:d1:39: 12:7a:82:33:c0:75:fa:ca:b2:8c:66:2f:3a:f6:70: d3:0b:de:1a:1b:45:3b:e2:0c:c5:38:47:7c:0c:55: 7b:15:af:2b:57:ca:52:2c:8f:ef:16:12:88:e4:84: b4:df:da:fb:0b:0d:2f:22:c7:cb:91:fc:05:92:19: 66:70:52:c4:fc:38:3a:91:aa:b8:66:9f:90:ef:53: f6:91:8b:a3:b5:72:7d:ec:f3:12:21:ea:16:29:c0: ce:ca:d5:0a:f0:d1:49:3e:96:8f:f0:b9:01:66:04: d3:6f:9a:39:f3:4f:8b:3b:83:26:54:3e:34:02:b1: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FD:01:74:F0:1F:69:AD:CF:0B:DC:9C:F3:88:96:45:AF:BC:63:DC X509v3 Authority Key Identifier: keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:25:a3:14:b0:97:bc:f1:02:0d:a2:c6:ea:35:5c:17:40:ef: 74:77:d9:34:43:5d:63:05:96:cc:b5:4a:aa:69:46:ba:5b:54: 13:69:42:48:88:cf:eb:b2:5d:59:88:81:eb:81:58:a5:7c:77: 3e:af:fb:81:d8:43:4a:9e:7e:6e:91:64:59:90:6d:14:f9:57: c0:8d:c7:4e:95:43:dc:08:73:62:c5:a8:d6:ad:54:d3:74:76: dc:e5:29:65:4f:7e:fe:f7:56:2b:b6:62:33:73:82:2a:6a:01: 6a:5f:dd:48:8a:88:9c:1f:2a:7b:aa:31:ab:c9:d0:dc:70:d3: 26:09:ab:8a:ea:94:e3:c3:bc:f3:99:a9:f9:35:c2:55:16:17: 96:cc:00:f8:cc:93:77:97:cc:a5:31:fb:97:85:34:7b:a8:2d: 77:0f:4b:e0:f9:88:79:49:6f:86:64:46:30:e7:f2:53:ea:49: 1e:b8:a1:22:ea:9e:bb:c1:9d:c5:e3:79:13:18:25:12:a8:e4: 12:ea:47:09:ff:38:41:ba:62:0d:d5:87:dc:0c:09:d1:26:15: 3f:58:64:40:e6:7b:d8:6f:e1:77:0a:84:c1:93:4d:73:fe:29: c2:42:55:72:06:8b:ed:94:29:b6:d4:ba:fe:e2:b1:d4:7e:bf: 04:62:2e:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoODU3NzkwNEM0M0MyQTlCRTExOEZEREQ1QkE3QkI4QjYw NDQzODBGRTAeFw0yNTA0MjUwNjM2NTBaFw0yNTA1MDIwNjM2NTBaMBgxFjAUBgNV BAMTDTY4MGIyZDgzLTVhYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7PeHN8zSkhhiTTodlW6EHG4h8JKTyGYTbb7nch5qT5I7tHLNx5wvpBq7Op2MO zkViKOekiu7t3FO/VvSGcTQrMNVtN7V+SSz7QywY1RzIs79Ig9eTvh/10H1k4yLU glaoZjG24emRsAXJri/NoKQzSiNEZhqpRWHwMWATsGFYdy1R6bvRORJ6gjPAdfrK soxmLzr2cNML3hobRTviDMU4R3wMVXsVrytXylIsj+8WEojkhLTf2vsLDS8ix8uR /AWSGWZwUsT8ODqRqrhmn5DvU/aRi6O1cn3s8xIh6hYpwM7K1Qrw0Uk+lo/wuQFm BNNvmjnzT4s7gyZUPjQCsXTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYf0BdPAf aa3PC9yc84iWRa+8Y9wwHwYDVR0jBBgwFoAUhXeQTEPCqb4Rj93Vunu4tgRDgP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0VDQTJDN0Q2RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyL2hYZVFURVBDcWI0Umo5M1Z1bnU0dGdSRGdQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFhlUVRFUENxYjRSajkzVnVudTR0Z1JEZ1A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0VDQTJDN0Q2RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyL2hYZVFURVBDcWI0 Umo5M1Z1bnU0dGdSRGdQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgloxSwl7zxAg2ixuo1XBdA73R32TRDXWMFlsy1SqppRrpbVBNpQkiI z+uyXVmIgeuBWKV8dz6v+4HYQ0qefm6RZFmQbRT5V8CNx06VQ9wIc2LFqNatVNN0 dtzlKWVPfv73Viu2YjNzgipqAWpf3UiKiJwfKnuqMavJ0Nxw0yYJq4rqlOPDvPOZ qfk1wlUWF5bMAPjMk3eXzKUx+5eFNHuoLXcPS+D5iHlJb4ZkRjDn8lPqSR64oSLq nrvBncXjeRMYJRKo5BLqRwn/OEG6Yg3Vh9wMCdEmFT9YZEDme9hv4XcKhMGTTXP+ KcJCVXIGi+2UKbbUuv7isdR+vwRiLlA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:35 2025 by rpki-client