$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: AxVnnfup8NpjPNr19Z7Um8pqE+yoip1IKzRi6F745C0= Subject key identifier: 88:FF:BD:70:99:F5:00:CE:EB:B9:64:EE:94:48:DB:24:8D:10:D7:16 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 0746 Signing time: Thu 24 Apr 2025 21:30:18 +0000 Manifest this update: Thu 24 Apr 2025 21:30:17 +0000 Manifest next update: Thu 01 May 2025 21:30:17 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: xM5l9et5okEZdqp7JS/ZGmP8sXPy1CtWlX2hUqdqUpY=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Apr 24 21:30:17 2025 GMT Not After : May 1 21:30:17 2025 GMT Subject: CN=680aad6a-c04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:27:26:02:34:96:f6:cb:cd:bc:34:47:4e:2c: fe:e8:dd:9d:04:1c:dc:86:8a:74:e7:7a:63:ac:21: 72:d0:25:22:c9:3d:6a:c5:23:ad:aa:52:0c:27:1d: 41:31:4f:a8:b8:10:42:9d:61:0a:3a:3b:0b:4a:dd: 0a:e9:7a:1b:1c:5a:66:74:8b:ea:08:3d:c5:b1:8c: 1d:2d:df:9b:31:1e:1c:9e:87:1f:79:27:44:93:e5: 8f:c2:75:e9:72:73:ed:34:c3:68:4a:9e:c9:f1:a0: c0:e4:f9:bd:c3:e7:e8:75:5c:b5:81:b2:20:a1:09: 1f:95:65:f9:fb:63:88:aa:c6:73:e0:e5:e9:f6:a7: 40:22:15:b7:22:42:a2:dc:7f:2f:6d:87:6c:eb:af: c7:20:96:a3:6e:1f:44:20:c2:a6:8c:d4:d1:f4:e2: c3:5a:7b:f1:16:93:79:ac:af:e5:13:3a:12:42:44: 14:11:35:4d:fe:4c:29:df:57:ca:88:27:c6:d0:f4: 78:0d:15:3b:fd:03:20:d1:18:6d:65:c0:58:fc:fb: cf:08:1d:28:47:ac:52:a8:a2:44:3d:14:54:44:5c: 47:29:fd:5a:16:69:c5:ea:83:bf:ac:18:8e:f1:91: 79:a3:3d:e0:47:14:51:73:e9:b4:ac:57:8f:57:2b: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:BD:70:99:F5:00:CE:EB:B9:64:EE:94:48:DB:24:8D:10:D7:16 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d1:24:0c:3f:7b:b5:f5:05:ef:a8:db:d1:52:4d:75:69:1c: 23:af:9f:d6:f3:c2:8c:c8:0e:40:26:60:66:14:2d:87:40:06: 97:1d:1e:de:86:2b:01:d6:36:47:93:15:4f:9e:c1:7a:9c:2e: ed:cf:b5:40:68:47:ad:98:2e:6c:63:51:9f:f9:01:2c:dc:40: 01:19:1d:4e:51:f0:a9:cc:a3:62:e8:35:6c:08:ed:b0:90:ce: ca:e9:fb:72:da:06:3c:98:98:1d:e5:0d:09:ac:8c:93:10:a0: b2:3d:37:c0:5d:d8:ae:db:3b:4a:c5:ec:3c:ef:b6:2d:de:4f: d6:43:80:69:fe:d8:ff:5c:ec:6f:fb:f7:8f:51:94:1a:47:bf: 29:a6:80:5e:7f:81:9e:e8:24:38:a5:a2:8e:3c:ba:95:0d:28: 30:34:98:1c:1d:c4:05:fd:a8:65:22:bb:41:22:1f:47:26:db: 83:13:b8:15:d7:84:43:6e:6b:fc:cb:aa:40:61:42:b2:dd:83: 9e:4d:b1:7f:cd:45:ef:f0:44:a3:88:11:0d:81:78:23:06:0b: b5:64:a2:d2:a3:f5:44:25:74:c8:18:6d:c9:17:fb:71:74:d7: 2d:8e:61:32:23:4e:9a:c4:c1:45:d7:bb:30:2b:88:bc:99:c9: 33:e8:75:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUwNDI0MjEzMDE3WhcNMjUwNTAxMjEzMDE3WjAYMRYwFAYD VQQDEw02ODBhYWQ2YS1jMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CcmAjSW9svNvDRHTiz+6N2dBBzchop053pjrCFy0CUiyT1qxSOtqlIMJx1B MU+ouBBCnWEKOjsLSt0K6XobHFpmdIvqCD3FsYwdLd+bMR4cnocfeSdEk+WPwnXp cnPtNMNoSp7J8aDA5Pm9w+fodVy1gbIgoQkflWX5+2OIqsZz4OXp9qdAIhW3IkKi 3H8vbYds66/HIJajbh9EIMKmjNTR9OLDWnvxFpN5rK/lEzoSQkQUETVN/kwp31fK iCfG0PR4DRU7/QMg0RhtZcBY/PvPCB0oR6xSqKJEPRRURFxHKf1aFmnF6oO/rBiO 8ZF5oz3gRxRRc+m0rFePVytNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj/vXCZ 9QDO67lk7pRI2ySNENcWMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo0SQMP3u19QXvqNvRUk11aRwjr5/W88KMyA5AJmBmFC2HQAaXHR7e hisB1jZHkxVPnsF6nC7tz7VAaEetmC5sY1Gf+QEs3EABGR1OUfCpzKNi6DVsCO2w kM7K6fty2gY8mJgd5Q0JrIyTEKCyPTfAXdiu2ztKxew877Yt3k/WQ4Bp/tj/XOxv +/ePUZQaR78ppoBef4Ge6CQ4paKOPLqVDSgwNJgcHcQF/ahlIrtBIh9HJtuDE7gV 14RDbmv8y6pAYUKy3YOeTbF/zUXv8ESjiBENgXgjBgu1ZKLSo/VEJXTIGG3JF/tx dNctjmEyI06axMFF17swK4i8mckz6HW6 -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:41 2025 by rpki-client