$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: FgZ0Xcb3hn9wd//Ridvy6YWRujXGjyZlXJta8G12OZ4= Subject key identifier: 19:51:0D:85:85:7B:8C:2B:D4:27:2C:28:E1:9B:25:1C:C3:C7:DB:BB Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 018B Signing time: Sun 11 May 2025 02:29:51 +0000 Manifest this update: Sun 11 May 2025 02:29:50 +0000 Manifest next update: Sun 18 May 2025 02:29:50 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: Hl+aJsAVUulyIAF7zU+SZzLay0hSMsaI9CJpbuvIES8=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: May 11 02:29:50 2025 GMT Not After : May 18 02:29:50 2025 GMT Subject: CN=68200b9f-b72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:a2:11:01:b5:a5:75:ac:43:ae:56:0d:16: f8:71:bb:f6:62:6e:09:48:18:09:f3:74:24:20:a3: a4:fe:1a:dd:09:4d:45:29:91:f6:01:ff:92:aa:5d: af:9a:b4:43:f8:e1:dd:7d:7a:b4:16:f1:fe:3b:cd: 82:58:ef:5a:d8:f6:7b:2e:f3:cc:ab:af:75:45:94: e7:b3:74:59:4c:fc:9b:6d:aa:b9:51:3c:45:25:ca: 82:aa:02:98:97:2d:d2:74:ec:24:96:80:e6:47:f6: 8a:4f:a1:47:76:5c:04:34:a2:d6:98:81:bf:c6:d6: ac:b2:d6:c8:0e:f5:be:72:a6:0d:f1:2c:cb:82:1c: 49:8e:29:de:4d:df:16:1c:4c:3f:45:78:f4:30:a1: 51:6c:e5:5e:1c:68:fa:7e:c0:9d:14:a1:e8:bf:06: 6a:67:b8:7a:ae:44:d8:5a:1f:cf:f4:d9:13:58:5d: 02:a4:7c:38:56:18:05:d7:4a:9e:72:74:e8:aa:fd: a9:b4:48:7c:20:7e:75:30:5b:76:9b:15:ed:0a:1b: 62:23:a0:99:b0:4b:38:74:a9:f6:23:5e:79:85:32: 22:c1:a6:66:df:c4:f1:ec:a4:d6:ba:a4:85:af:c6: 4c:8d:b5:21:23:73:b8:f4:f5:a2:fd:54:e3:04:ee: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:51:0D:85:85:7B:8C:2B:D4:27:2C:28:E1:9B:25:1C:C3:C7:DB:BB X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d9:31:73:a4:85:ec:05:ed:8d:39:17:d5:45:18:0b:dd:8e: 6d:4f:34:bd:1d:8d:0e:35:a5:fe:5d:f6:b8:8d:94:f5:56:35: 7d:d4:2d:e5:b4:05:d4:11:d7:5b:ad:06:37:a5:79:ff:c2:e7: 9c:6c:8e:1a:7e:40:7a:1e:3e:bf:8b:bc:1f:ed:89:02:3c:01: 04:9f:8e:9a:b6:21:2f:70:20:36:ea:d6:f6:27:61:27:bf:6c: 90:fe:8d:bc:d0:c6:e2:7a:fe:9d:89:2a:46:38:18:e0:ce:f2: cb:af:2f:44:d7:64:ed:1c:b7:a1:d6:60:da:be:84:25:8e:c7: 5c:7d:3d:70:fb:58:ea:ff:0c:22:16:f0:99:12:ff:a6:2c:5c: 3f:5e:3e:3b:13:23:66:ac:7b:0b:d6:15:f6:8c:f3:b3:ff:4f: 11:9c:89:18:30:61:de:bd:bb:5d:a5:7f:a8:5b:fb:c6:d5:61: 60:42:63:ee:8c:dd:0d:bb:51:d1:d5:c0:f6:f8:e9:b8:c9:46: 38:c5:63:b3:9c:c4:ba:b7:24:b2:86:e0:f2:eb:77:23:47:0d: a0:36:d4:5b:89:52:a8:0d:42:e7:12:6e:8d:75:18:9d:ba:3b: cd:99:2f:49:92:2b:60:00:c9:de:5d:7d:9c:e1:f5:71:35:c7: 9b:81:6c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUwNTExMDIyOTUwWhcNMjUwNTE4MDIyOTUwWjAYMRYwFAYD VQQDEw02ODIwMGI5Zi1iNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun2iEQG1pXWsQ65WDRb4cbv2Ym4JSBgJ83QkIKOk/hrdCU1FKZH2Af+Sql2v mrRD+OHdfXq0FvH+O82CWO9a2PZ7LvPMq691RZTns3RZTPybbaq5UTxFJcqCqgKY ly3SdOwkloDmR/aKT6FHdlwENKLWmIG/xtasstbIDvW+cqYN8SzLghxJjineTd8W HEw/RXj0MKFRbOVeHGj6fsCdFKHovwZqZ7h6rkTYWh/P9NkTWF0CpHw4VhgF10qe cnToqv2ptEh8IH51MFt2mxXtChtiI6CZsEs4dKn2I155hTIiwaZm38Tx7KTWuqSF r8ZMjbUhI3O49PWi/VTjBO6GvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlRDYWF e4wr1CcsKOGbJRzDx9u7MB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO2TFzpIXsBe2NORfVRRgL3Y5tTzS9HY0ONaX+Xfa4jZT1VjV91C3l tAXUEddbrQY3pXn/wuecbI4afkB6Hj6/i7wf7YkCPAEEn46atiEvcCA26tb2J2En v2yQ/o280Mbiev6diSpGOBjgzvLLry9E12TtHLeh1mDavoQljsdcfT1w+1jq/wwi FvCZEv+mLFw/Xj47EyNmrHsL1hX2jPOz/08RnIkYMGHevbtdpX+oW/vG1WFgQmPu jN0Nu1HR1cD2+Om4yUY4xWOznMS6tySyhuDy63cjRw2gNtRbiVKoDULnEm6NdRid ujvNmS9JkitgAMneXX2c4fVxNcebgWyQ -----END CERTIFICATE-----Generated at Mon May 12 15:00:01 2025 by rpki-client