$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: +akfOKcBDBMSH6wxgRGlgA54WVRizSTUzkzQT9Sh7GU= Subject key identifier: A8:7A:6E:E4:26:EB:C3:A9:E0:0C:17:0A:BB:F0:A8:3B:18:A9:EF:52 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: AA Signing time: Fri 25 Apr 2025 05:06:09 +0000 Manifest this update: Fri 25 Apr 2025 05:06:08 +0000 Manifest next update: Fri 02 May 2025 05:06:08 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: XrAbN51GTQTwDZcCTv1pZaPl80l5xM3rfpqTb9E+y1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Apr 25 05:06:08 2025 GMT Not After : May 2 05:06:08 2025 GMT Subject: CN=680b1841-6d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:bb:79:84:dd:91:79:d8:99:da:ee:ac:4b: 6a:3b:9e:0f:f3:4c:ff:29:ff:ef:20:89:44:f5:94: 5d:cb:53:a6:7f:3d:53:99:8a:b3:79:fd:dc:77:68: a8:5c:16:28:7b:5e:9e:4d:e7:69:a5:9a:f0:0d:99: 7b:d9:b8:98:ce:14:ba:09:4a:ed:df:3b:23:75:d4: c1:65:71:43:4b:fb:fb:f1:3b:94:90:06:2b:a7:5a: 42:a7:a7:d9:d5:c7:b4:23:09:15:fa:42:00:1c:47: ce:f1:ff:81:4b:51:99:ab:5a:89:3e:f2:5c:4c:fb: 58:5b:1e:51:a3:e1:ea:c7:64:c5:d6:60:c7:5f:95: 4b:48:d6:31:f1:9a:45:3c:fd:06:e3:76:35:c0:29: 5f:91:00:46:cb:0d:2a:16:b4:d3:90:14:37:48:87: 54:96:c0:0c:d0:dd:e1:34:f6:31:20:75:8f:19:39: b8:1d:2e:e5:77:d1:63:ee:80:b2:cc:6c:a9:58:22: f9:95:f9:db:87:45:fd:8e:e0:67:f2:c2:41:25:42: 7e:ed:51:0e:e1:af:2f:fe:91:29:0b:c9:fe:e5:e9: 62:60:31:fc:7f:c4:f1:29:32:94:e0:ea:bb:f5:e1: bb:92:6e:e3:8a:8e:5b:77:fc:c6:3c:65:62:9e:50: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:6E:E4:26:EB:C3:A9:E0:0C:17:0A:BB:F0:A8:3B:18:A9:EF:52 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fc:48:24:e5:cf:78:19:78:29:16:4d:d8:fc:c1:b9:b5:d0: 87:29:17:f2:f2:11:3e:e2:19:15:56:c1:96:e9:dd:9d:0e:7c: dc:a3:35:ae:86:dd:f5:9f:58:07:4a:51:12:90:b7:a4:98:b4: cf:02:ff:b7:15:bc:c6:6f:c0:6f:79:55:2a:54:86:d5:fa:06: 10:76:01:87:c9:f8:95:bd:b8:00:ce:a8:0e:87:a3:15:c2:ab: 20:59:0b:cc:57:9e:95:96:9c:4a:41:c1:55:58:b5:e7:47:fe: 59:43:6c:6a:f7:45:fd:f0:bc:df:eb:b6:3c:48:92:2c:77:0c: ab:ed:ec:35:d4:aa:b1:2e:a4:20:5c:90:d6:c6:e5:80:39:9e: 5e:30:5a:0d:50:ad:a7:b1:03:67:87:c4:94:47:7d:99:66:e8: 0f:e8:6b:d9:db:ea:44:fc:60:94:cc:c4:6b:ac:c0:a8:4e:71: 3f:39:cd:9e:4a:41:bd:4c:fb:90:b2:b7:38:1a:2e:77:ad:e3: 77:30:6b:ee:76:71:bf:f1:0c:10:62:af:9b:62:91:32:94:72: bb:72:a6:31:b6:aa:6b:2c:86:6a:ce:34:87:11:a9:77:46:9e: 0e:3e:35:ca:ba:10:b7:e1:4e:23:2a:94:7a:cf:9f:00:5a:59: 5c:4e:d4:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUwNDI1MDUwNjA4WhcNMjUwNTAyMDUwNjA4WjAYMRYwFAYD VQQDEw02ODBiMTg0MS02ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dy7eYTdkXnYmdrurEtqO54P80z/Kf/vIIlE9ZRdy1Omfz1TmYqzef3cd2io XBYoe16eTedppZrwDZl72biYzhS6CUrt3zsjddTBZXFDS/v78TuUkAYrp1pCp6fZ 1ce0IwkV+kIAHEfO8f+BS1GZq1qJPvJcTPtYWx5Ro+Hqx2TF1mDHX5VLSNYx8ZpF PP0G43Y1wClfkQBGyw0qFrTTkBQ3SIdUlsAM0N3hNPYxIHWPGTm4HS7ld9Fj7oCy zGypWCL5lfnbh0X9juBn8sJBJUJ+7VEO4a8v/pEpC8n+5eliYDH8f8TxKTKU4Oq7 9eG7km7jio5bd/zGPGVinlDqHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh6buQm 68Op4AwXCrvwqDsYqe9SMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE/Egk5c94GXgpFk3Y/MG5tdCHKRfy8hE+4hkVVsGW6d2dDnzcozWu ht31n1gHSlESkLekmLTPAv+3FbzGb8BveVUqVIbV+gYQdgGHyfiVvbgAzqgOh6MV wqsgWQvMV56VlpxKQcFVWLXnR/5ZQ2xq90X98Lzf67Y8SJIsdwyr7ew11KqxLqQg XJDWxuWAOZ5eMFoNUK2nsQNnh8SUR32ZZugP6GvZ2+pE/GCUzMRrrMCoTnE/Oc2e SkG9TPuQsrc4Gi53reN3MGvudnG/8QwQYq+bYpEylHK7cqYxtqprLIZqzjSHEal3 Rp4OPjXKuhC34U4jKpR6z58AWllcTtTT -----END CERTIFICATE-----Generated at Sat Apr 26 05:11:34 2025 by rpki-client