$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: LtA4SfLl/RpPSH0AokXF2Y/GEYlUBhlmrJ+eJP7Oa+I= Subject key identifier: AA:D8:81:4B:36:4C:E6:62:8C:86:28:CD:B0:AD:40:6D:EF:AA:68:71 Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 347D Signing time: Mon 12 May 2025 15:07:08 +0000 Manifest this update: Mon 12 May 2025 15:07:07 +0000 Manifest next update: Mon 19 May 2025 15:07:07 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: FcyXv25SU7e8Ux3UpV9sG8U/kucmxz8S5E/SvKZZRWg=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: May 12 15:07:07 2025 GMT Not After : May 19 15:07:07 2025 GMT Subject: CN=68220e9b-1902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:49:57:32:d5:8b:cb:cc:ab:05:81:bf:2a: 4a:ab:76:49:c3:70:8e:c3:03:56:a6:c7:70:91:d1: 9d:03:81:a7:a3:c1:95:8f:6a:d0:0d:15:5b:36:6b: 8f:3c:97:2a:da:f6:eb:8e:14:d9:7b:97:d5:4c:b0: 0d:f3:16:24:2b:7a:dc:e3:92:d0:e9:0f:03:20:1d: e1:e4:2a:f8:ac:2d:b8:c9:a4:3d:f0:c8:e8:5e:e9: ad:02:65:e9:cd:5a:df:04:eb:47:22:71:d2:da:89: fb:ab:26:a2:d6:9f:e5:7d:f3:02:36:82:2a:ac:d7: fd:fa:c6:68:c1:09:df:20:b9:4a:cf:0b:12:eb:48: 1a:cc:4b:d0:0a:df:93:57:70:ad:b7:c6:70:65:fc: 77:7c:a3:6d:dc:b1:f2:cc:92:66:a6:51:97:e8:08: 0a:f6:2d:40:8e:f0:0e:a8:0e:c7:c3:36:75:14:47: 59:c0:ca:c8:04:7f:23:33:27:1c:36:3b:87:9a:e0: 8f:5d:31:bd:9f:a0:37:f0:cd:53:55:87:ce:17:c5: 9d:0c:90:de:ce:12:af:72:66:a1:f5:de:4c:30:da: bd:75:75:f2:61:de:4a:b4:43:29:96:73:96:4f:c8: 49:3b:b8:da:95:b5:b7:16:b0:19:52:b0:4f:b9:89: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:81:4B:36:4C:E6:62:8C:86:28:CD:B0:AD:40:6D:EF:AA:68:71 X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:35:ce:65:03:de:0b:89:63:dc:99:23:36:c5:4b:03:92:38: fe:a4:20:70:6a:ac:c4:1d:f4:0f:a1:e1:2e:df:ec:82:83:90: 24:73:19:5e:65:df:d3:c9:a5:44:c7:74:10:bb:89:65:99:9d: 3a:47:7e:c6:ef:b2:27:34:29:7d:43:e3:3a:33:73:75:fd:21: 7c:b3:c1:bb:ae:32:45:75:10:c9:e4:a4:9b:ff:be:ff:02:22: 54:50:0f:59:b5:c4:8a:07:4c:79:98:2c:38:13:e1:ce:ea:7b: 9e:dc:d3:a7:90:5f:4f:e1:98:61:d3:d5:71:0f:91:09:17:86: ae:41:82:3a:4f:43:c5:e7:c2:83:25:02:84:9f:36:45:e6:3f: e7:29:bf:85:8e:76:ff:9a:5c:56:85:65:df:5b:bb:b3:a3:c9: 9f:fc:5e:89:b7:35:68:af:2c:90:54:91:26:8a:bb:cd:75:d4: de:bc:f5:7e:19:92:57:85:7c:1e:87:65:3c:0c:ae:c9:c4:4f: 1a:17:6b:06:12:10:54:e9:50:fd:8d:9c:72:fb:50:2f:68:4a: 11:d0:b2:d9:b8:9e:10:ff:c7:c6:e4:ed:cc:8b:1f:ee:b0:5b: 20:52:17:bb:28:30:ed:06:da:f0:8a:f4:53:63:c9:3e:54:ee: 4e:2d:a5:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUwNTEyMTUwNzA3WhcNMjUwNTE5MTUwNzA3WjAYMRYwFAYD VQQDEw02ODIyMGU5Yi0xOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqslJVzLVi8vMqwWBvypKq3ZJw3COwwNWpsdwkdGdA4Gno8GVj2rQDRVbNmuP PJcq2vbrjhTZe5fVTLAN8xYkK3rc45LQ6Q8DIB3h5Cr4rC24yaQ98MjoXumtAmXp zVrfBOtHInHS2on7qyai1p/lffMCNoIqrNf9+sZowQnfILlKzwsS60gazEvQCt+T V3Ctt8ZwZfx3fKNt3LHyzJJmplGX6AgK9i1AjvAOqA7HwzZ1FEdZwMrIBH8jMycc NjuHmuCPXTG9n6A38M1TVYfOF8WdDJDezhKvcmah9d5MMNq9dXXyYd5KtEMplnOW T8hJO7jalbW3FrAZUrBPuYnhaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrYgUs2 TOZijIYozbCtQG3vqmhxMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADNc5lA94LiWPcmSM2xUsDkjj+pCBwaqzEHfQPoeEu3+yCg5Akcxle Zd/TyaVEx3QQu4llmZ06R37G77InNCl9Q+M6M3N1/SF8s8G7rjJFdRDJ5KSb/77/ AiJUUA9ZtcSKB0x5mCw4E+HO6nue3NOnkF9P4Zhh09VxD5EJF4auQYI6T0PF58KD JQKEnzZF5j/nKb+Fjnb/mlxWhWXfW7uzo8mf/F6JtzVoryyQVJEmirvNddTevPV+ GZJXhXweh2U8DK7JxE8aF2sGEhBU6VD9jZxy+1AvaEoR0LLZuJ4Q/8fG5O3Mix/u sFsgUhe7KDDtBtrwivRTY8k+VO5OLaV7 -----END CERTIFICATE-----Generated at Tue May 13 22:02:42 2025 by rpki-client