$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: 2eisAAV5eGjiTy3so+1QkBiT88MgK6W8kQRjuSZWw0g= Subject key identifier: 05:A7:A2:C9:08:E6:44:F1:ED:AC:19:F7:06:68:C1:CF:1C:33:0D:75 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 3493 Signing time: Tue 13 May 2025 08:30:31 +0000 Manifest this update: Tue 13 May 2025 08:30:30 +0000 Manifest next update: Tue 20 May 2025 08:30:30 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: TuI6IzXmtmdNfp3W3bqtqbJvVD7lORpxaGFCpDJhd2M=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: lxqMNiae0D1WCp5yu5bfMqSlo/P+rEmoNXBcqzUVjb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: May 13 08:30:30 2025 GMT Not After : May 20 08:30:30 2025 GMT Subject: CN=68230326-9376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:ca:9c:8b:39:ad:72:58:1f:5b:73:f3:dc: 53:ce:a5:44:3a:e7:11:e8:0c:0c:53:35:04:69:ee: 64:02:5a:11:0b:0e:49:dd:40:e7:0c:d5:4c:52:ba: a6:c1:0b:1a:50:21:ed:1d:b9:e6:4a:5e:08:9f:d6: 02:4f:3b:09:4f:cc:09:ec:d6:e8:12:c8:28:09:ae: 1c:fb:64:33:1e:4f:d5:55:cc:4f:04:db:cc:e9:23: 28:34:70:2d:e6:b7:3f:8d:7c:e1:e3:71:c1:ea:05: ee:59:fa:67:71:11:b0:a4:0a:9c:16:3b:2f:a4:e1: 41:2b:01:5e:21:ea:29:73:66:84:ce:d9:04:54:ab: da:ad:06:84:9d:f4:42:9c:83:f7:dd:14:e3:89:7d: b8:6c:b4:5e:bc:bf:c5:d7:31:0a:45:ff:53:d2:87: f8:3c:0b:fa:4f:04:89:11:69:6d:46:72:c8:5f:fe: 42:df:98:fd:6f:c3:25:e3:6a:4d:f1:68:2d:ac:6f: 89:97:20:12:0f:5a:bc:b6:7c:ee:e7:58:b9:26:6c: 01:0b:f3:db:3f:bc:67:50:f3:00:5d:fc:de:db:9a: 5e:25:55:94:07:5b:dd:b7:1d:06:c4:c6:bd:5a:60: 34:54:22:5b:bd:fe:b1:15:1e:95:e4:21:2e:4f:72: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:A2:C9:08:E6:44:F1:ED:AC:19:F7:06:68:C1:CF:1C:33:0D:75 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a6:c5:30:04:91:03:53:57:7f:71:a0:99:83:df:9f:2c:b7: f4:74:ff:44:31:63:27:d8:89:d0:d3:59:bc:e6:f8:9e:f8:27: e7:86:c9:73:41:d9:dd:92:cc:58:f3:ae:02:83:9f:99:2d:57: fe:f4:17:12:bb:90:d3:aa:c5:b0:53:e8:fd:92:f5:c0:bd:9e: 11:7f:03:e2:1f:9d:29:8a:c2:32:84:dd:8b:fa:5b:5e:66:22: 96:27:23:19:54:c2:dc:13:92:2b:33:b4:16:5e:58:cc:e0:f4: a4:35:63:3a:74:aa:c2:48:7c:61:98:c1:48:8d:e4:03:34:40: 9e:ea:f4:ca:58:af:3a:13:af:16:d3:85:3b:2d:94:b3:fe:8c: c0:69:58:6d:47:32:be:b9:68:68:96:d9:86:e2:3b:c9:9b:54: 3f:78:78:9f:be:e3:23:14:1b:06:ad:3b:1b:eb:20:2c:73:09: dc:91:80:e1:0c:57:7b:a8:6a:bb:3f:b4:39:15:30:af:18:c8: 87:47:ca:9e:fc:83:56:47:c9:e3:3f:d5:03:1b:fd:4f:6a:ad: 13:a4:40:8f:75:8e:a7:7f:cc:87:6f:86:dc:37:52:16:0d:21: f0:16:de:9b:0e:00:23:56:d9:98:a0:2c:aa:f1:3e:0f:6f:b8: 19:48:4a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUwNTEzMDgzMDMwWhcNMjUwNTIwMDgzMDMwWjAYMRYwFAYD VQQDEw02ODIzMDMyNi05Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJzKnIs5rXJYH1tz89xTzqVEOucR6AwMUzUEae5kAloRCw5J3UDnDNVMUrqm wQsaUCHtHbnmSl4In9YCTzsJT8wJ7NboEsgoCa4c+2QzHk/VVcxPBNvM6SMoNHAt 5rc/jXzh43HB6gXuWfpncRGwpAqcFjsvpOFBKwFeIeopc2aEztkEVKvarQaEnfRC nIP33RTjiX24bLRevL/F1zEKRf9T0of4PAv6TwSJEWltRnLIX/5C35j9b8Ml42pN 8WgtrG+JlyASD1q8tnzu51i5JmwBC/PbP7xnUPMAXfze25peJVWUB1vdtx0GxMa9 WmA0VCJbvf6xFR6V5CEuT3LptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWnoskI 5kTx7awZ9wZowc8cMw11MB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEpsUwBJEDU1d/caCZg9+fLLf0dP9EMWMn2InQ01m85vie+Cfnhslz QdndksxY864Cg5+ZLVf+9BcSu5DTqsWwU+j9kvXAvZ4RfwPiH50pisIyhN2L+lte ZiKWJyMZVMLcE5IrM7QWXljM4PSkNWM6dKrCSHxhmMFIjeQDNECe6vTKWK86E68W 04U7LZSz/ozAaVhtRzK+uWholtmG4jvJm1Q/eHifvuMjFBsGrTsb6yAscwnckYDh DFd7qGq7P7Q5FTCvGMiHR8qe/INWR8njP9UDG/1Paq0TpECPdY6nf8yHb4bcN1IW DSHwFt6bDgAjVtmYoCyq8T4Pb7gZSEog -----END CERTIFICATE-----Generated at Tue May 13 23:07:52 2025 by rpki-client