$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: 2jkIU1qEQ12KyzL7lrxy5to0WkQsRY7FyA+CADiFXHo= Subject key identifier: 33:CF:58:C8:29:48:85:58:0B:0D:E5:2B:9A:DF:DA:B6:2C:3E:E0:1E Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 03F2 Signing time: Thu 15 May 2025 00:31:26 +0000 Manifest this update: Thu 15 May 2025 00:31:26 +0000 Manifest next update: Thu 22 May 2025 00:31:26 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: BbMJfRpxGBL2YpapLoifZ3M+8VvpGN1qiybaWGp0E7s=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: May 15 00:31:26 2025 GMT Not After : May 22 00:31:26 2025 GMT Subject: CN=682535de-92fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:f1:4b:1e:06:f6:5e:45:2d:ba:fb:6d:39: e7:a6:09:1a:be:d2:d0:01:53:da:7e:16:9e:0b:e1: 2e:1c:3c:ed:6d:eb:7b:bd:d7:47:6b:98:c4:d2:0b: ba:18:c0:2d:54:74:b3:9f:9d:95:0e:5b:f9:0e:42: 01:2f:cf:82:18:ca:5d:4e:07:8d:29:f9:10:1b:7e: c1:c9:d7:24:12:3a:24:d5:98:01:8e:22:54:78:e9: e6:a9:07:0f:80:44:ef:d7:ae:61:42:4a:47:41:a0: 6a:ee:85:1e:1b:47:bc:0e:14:a2:2d:0c:ef:23:46: b5:1a:34:be:55:a2:cb:06:64:7d:1e:61:4c:1a:80: 26:d0:ad:21:6b:80:b2:3a:6e:4f:9d:ae:94:dd:ec: e1:8f:02:46:f1:75:e4:e1:77:77:7a:21:e7:0a:b8: 4d:16:05:ba:36:05:5e:f1:38:12:0e:36:93:31:f9: ee:01:a6:c7:ac:01:60:8e:71:db:7c:37:4b:b4:61: 01:4f:02:46:cd:15:01:f3:3a:d8:5e:66:b0:5a:70: 4b:1f:ea:a1:ed:f0:3d:97:83:94:23:e4:d9:45:eb: 17:5b:80:2e:48:82:79:b2:bb:20:69:b4:d8:0b:7d: 0e:cf:c7:2c:c3:8a:05:ed:19:2d:23:45:07:a2:4e: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:58:C8:29:48:85:58:0B:0D:E5:2B:9A:DF:DA:B6:2C:3E:E0:1E X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d7:e7:68:59:2f:b4:37:83:1a:5a:9e:26:f5:3b:56:eb:11: 43:cd:05:6f:85:6e:20:12:1b:ee:a5:93:e9:ac:e8:28:a0:65: 4a:3a:76:aa:ff:0a:69:fe:f6:cb:8d:47:68:2b:4d:1b:de:6b: fa:d3:f1:13:9c:0e:d1:ce:78:d5:90:a1:98:28:0f:85:fe:81: fd:23:cc:51:66:2f:12:c7:6b:55:dc:5c:e4:7e:84:48:f5:ea: b2:20:ef:83:db:8c:75:f5:df:9d:e9:7a:53:a9:70:3f:f8:2b: bf:20:29:9b:a8:9c:58:73:9d:50:73:50:a6:6b:a7:52:ec:2e: 0c:8f:39:87:89:5a:64:03:29:93:c6:9e:cf:7d:a8:35:86:ce: af:53:25:73:39:73:f7:da:0d:0a:39:5e:b6:60:82:12:7c:b0: fb:e0:df:d5:fa:e3:ac:24:48:ff:12:ae:0a:ac:b4:31:d4:d2: 2f:f9:9c:05:30:82:6a:e9:7b:60:40:a1:51:33:d1:1e:19:53: 04:7b:a1:03:02:d5:63:93:d3:4f:5b:1f:a4:06:e5:77:92:52: 28:43:03:ea:89:29:16:b3:4f:8a:1e:e6:22:4d:71:76:b5:06: 07:b3:68:0e:8c:51:d5:b3:b2:68:af:7f:a5:a4:54:22:b8:38: 51:61:1e:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUwNTE1MDAzMTI2WhcNMjUwNTIyMDAzMTI2WjAYMRYwFAYD VQQDEw02ODI1MzVkZS05MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5zxSx4G9l5FLbr7bTnnpgkavtLQAVPafhaeC+EuHDztbet7vddHa5jE0gu6 GMAtVHSzn52VDlv5DkIBL8+CGMpdTgeNKfkQG37BydckEjok1ZgBjiJUeOnmqQcP gETv165hQkpHQaBq7oUeG0e8DhSiLQzvI0a1GjS+VaLLBmR9HmFMGoAm0K0ha4Cy Om5Pna6U3ezhjwJG8XXk4Xd3eiHnCrhNFgW6NgVe8TgSDjaTMfnuAabHrAFgjnHb fDdLtGEBTwJGzRUB8zrYXmawWnBLH+qh7fA9l4OUI+TZResXW4AuSIJ5srsgabTY C30Oz8csw4oF7RktI0UHok7gDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPPWMgp SIVYCw3lK5rf2rYsPuAeMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs1+doWS+0N4MaWp4m9TtW6xFDzQVvhW4gEhvupZPprOgooGVKOnaq /wpp/vbLjUdoK00b3mv60/ETnA7RznjVkKGYKA+F/oH9I8xRZi8Sx2tV3FzkfoRI 9eqyIO+D24x19d+d6XpTqXA/+Cu/ICmbqJxYc51Qc1Cma6dS7C4MjzmHiVpkAymT xp7Pfag1hs6vUyVzOXP32g0KOV62YIISfLD74N/V+uOsJEj/Eq4KrLQx1NIv+ZwF MIJq6XtgQKFRM9EeGVMEe6EDAtVjk9NPWx+kBuV3klIoQwPqiSkWs0+KHuYiTXF2 tQYHs2gOjFHVs7Jor3+lpFQiuDhRYR57 -----END CERTIFICATE-----Generated at Sat May 17 01:48:07 2025 by rpki-client