$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: b6r3tYKb9UTO+T7RNMu5WXH79iWueSpWTkk4HyUR3lw= Subject key identifier: F9:19:47:4D:BB:27:94:83:9A:F9:AC:28:F4:C5:F6:AA:B6:D7:C3:8C Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 5E Signing time: Fri 25 Apr 2025 06:05:59 +0000 Manifest this update: Fri 25 Apr 2025 06:05:59 +0000 Manifest next update: Fri 02 May 2025 06:05:59 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: /Ei4ktYgRFfzK3r1Z8mU6qGTuu7RKlSkM+nMhrtWvAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Apr 25 06:05:59 2025 GMT Not After : May 2 06:05:59 2025 GMT Subject: CN=680b2647-1019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:60:b3:18:e0:84:e1:6c:44:e5:fe:55:39: c7:87:1b:af:40:5f:1e:4e:59:f0:78:13:c1:1b:72: 29:48:13:1e:ea:d2:bc:c5:77:98:9d:af:30:ff:c4: 42:7a:e3:a1:5e:38:9a:ee:6e:0d:97:ca:5f:18:a8: 21:f3:4c:78:fe:59:fd:d7:e2:e4:56:7a:7c:83:75: 88:7a:40:6c:29:46:0c:17:ca:db:66:cf:5b:fe:fe: 56:da:82:fb:80:57:ff:c8:64:36:0f:5e:e8:dc:0c: 70:ee:18:4c:e8:f9:8e:97:c1:0c:80:4d:05:6f:38: 04:86:df:8f:37:7c:69:ca:61:69:e6:e1:fd:88:0d: 42:34:9d:c8:c6:25:29:cd:12:57:66:1e:12:a6:a2: 24:11:57:32:52:a0:db:f3:c1:8b:02:2b:aa:75:21: fd:3f:d2:a3:17:ae:d4:c2:23:72:38:89:3c:15:b3: ce:34:c0:83:49:00:83:ac:c8:a6:10:e4:2b:15:91: 02:d1:aa:af:2b:5a:b8:c0:89:bb:4a:64:4d:12:18: 97:26:6f:3a:d8:d0:42:90:a2:d2:23:c0:06:d0:4a: e1:13:de:bb:ff:9c:50:65:7a:24:99:58:65:11:bf: 24:2f:dc:5b:22:0f:9c:78:8e:f6:d5:94:0e:b0:86: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:19:47:4D:BB:27:94:83:9A:F9:AC:28:F4:C5:F6:AA:B6:D7:C3:8C X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:31:06:8c:d5:c7:5f:ef:94:c7:06:19:d9:6a:97:dd:d8:c7: 19:c2:4f:6e:91:ef:e0:6f:5c:c2:e2:7d:09:4e:23:bf:af:02: 5d:25:af:6d:d7:86:76:1a:81:c1:8c:50:ff:91:72:59:0c:15: c5:a9:3e:7c:9f:4e:7a:d6:77:16:5b:4b:85:d5:fb:51:d8:b3: fc:3d:1e:14:7b:c1:9a:58:97:7c:ce:aa:13:29:4a:c3:9b:45: 05:8f:5e:5a:a8:00:6c:3f:e6:e6:17:20:b1:d1:86:52:0d:9d: d5:46:ad:44:85:e6:4a:a9:82:86:7a:b5:91:d6:09:b9:bd:e5: 0e:2a:f6:f7:2f:67:3a:4f:dc:c7:a3:b2:2b:53:3d:e8:78:83: 09:e3:d3:6e:db:33:b7:de:80:8c:7c:94:e6:84:d5:14:79:c1: b6:2a:ce:89:65:82:a7:5f:c1:3e:c0:f0:55:b1:05:23:12:a2: 7e:cb:7e:1e:53:bf:8d:90:8f:6e:fe:24:7c:6d:82:93:f2:42: 96:85:c0:d2:7a:44:f7:a6:66:ee:8b:c6:38:5c:74:5e:da:35: 4b:21:d7:28:a2:13:ea:1f:a9:52:43:3e:45:d4:29:ec:45:74: 90:8e:4e:a3:2e:55:20:d9:d3:4e:45:e4:3a:12:f7:00:26:a2: 72:3c:c9:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzIwQTExMC8GA1UEBRMoODYzMkNEMjU2NjlERDg3MjIwMjA0NTE3NDA2RTNGNkIy RjEyOTI1MTAeFw0yNTA0MjUwNjA1NTlaFw0yNTA1MDIwNjA1NTlaMBgxFjAUBgNV BAMTDTY4MGIyNjQ3LTEwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHUGCzGOCE4WxE5f5VOceHG69AXx5OWfB4E8EbcilIEx7q0rzFd5idrzD/xEJ6 46FeOJrubg2Xyl8YqCHzTHj+Wf3X4uRWenyDdYh6QGwpRgwXyttmz1v+/lbagvuA V//IZDYPXujcDHDuGEzo+Y6XwQyATQVvOASG3483fGnKYWnm4f2IDUI0ncjGJSnN EldmHhKmoiQRVzJSoNvzwYsCK6p1If0/0qMXrtTCI3I4iTwVs840wINJAIOsyKYQ 5CsVkQLRqq8rWrjAibtKZE0SGJcmbzrY0EKQotIjwAbQSuET3rv/nFBleiSZWGUR vyQv3FsiD5x4jvbVlA6whg+fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+RlHTbsn lIOa+awo9MX2qrbXw4wwHwYDVR0jBBgwFoAUhjLNJWad2HIgIEUXQG4/ay8SklEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjBBLzgwQUFFRDgyOTU3 NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2ts RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGpMTkpXYWQySElnSUVVWFFHNF9heThTa2xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjBBLzgwQUFFRDgyOTU3NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJ Z0lFVVhRRzRfYXk4U2tsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQxBozVx1/vlMcGGdlql93YxxnCT26R7+BvXMLifQlOI7+vAl0lr23X hnYagcGMUP+RclkMFcWpPnyfTnrWdxZbS4XV+1HYs/w9HhR7wZpYl3zOqhMpSsOb RQWPXlqoAGw/5uYXILHRhlINndVGrUSF5kqpgoZ6tZHWCbm95Q4q9vcvZzpP3Mej sitTPeh4gwnj027bM7fegIx8lOaE1RR5wbYqzollgqdfwT7A8FWxBSMSon7Lfh5T v42Qj27+JHxtgpPyQpaFwNJ6RPemZu6LxjhcdF7aNUsh1yiiE+ofqVJDPkXUKexF dJCOTqMuVSDZ005F5DoS9wAmonI8yds= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:41 2025 by rpki-client