$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: RYhEUrOhKGV9oCJKSpY6FwO0rJbtBbdA6k8Z0rSoL3Q= Subject key identifier: 82:D2:2C:94:E0:06:8C:0D:38:95:59:32:5B:E7:AC:EE:AE:36:29:D2 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0AF9 Signing time: Sat 10 May 2025 19:06:20 +0000 Manifest this update: Sat 10 May 2025 19:06:19 +0000 Manifest next update: Sat 17 May 2025 19:06:19 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: O153u8plH2Vztp2Jo3T6DPoN9hgmbZ/VsHLSUpWPQE8=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: May 10 19:06:19 2025 GMT Not After : May 17 19:06:19 2025 GMT Subject: CN=681fa3ac-375d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:47:1c:ba:fc:42:25:4c:77:b0:60:ec:34: 09:1c:a9:02:7f:bf:c8:2d:10:30:98:b1:7b:79:0e: 58:80:8f:b6:11:4b:cb:13:57:7d:5e:48:ae:b3:c8: d3:9b:dc:2b:d1:42:0f:e4:1f:9d:3f:38:2e:8b:9f: c9:65:b7:d1:25:3e:0d:e1:43:b9:1b:eb:1d:e0:91: b6:91:99:37:a0:1a:6b:a1:70:b0:4f:0e:93:72:ac: f4:71:b1:f2:9f:72:63:eb:46:22:27:74:86:63:b5: 9e:47:50:ae:7a:e7:ba:23:b4:66:0d:c9:4b:05:f5: a8:ac:7c:84:f7:21:97:48:a7:53:47:e3:72:3f:d0: fe:9f:67:02:ce:67:cf:94:5e:f5:32:32:9e:7e:19: 4e:e7:10:99:43:37:fc:9d:2a:e1:da:cb:45:09:d4: b2:58:9c:8c:57:72:e0:f9:22:89:b8:0a:da:ad:a6: a5:a3:db:28:b1:fa:12:ab:0c:fe:dd:0d:f1:42:78: a2:d5:68:a2:fd:7e:0e:a2:0e:f1:8d:56:11:96:50: d2:1b:c1:5f:00:c5:f3:ef:7d:ef:19:4f:0b:47:8f: a9:03:8e:88:c9:5c:2d:31:4e:70:55:d0:6a:bf:e8: e9:44:fb:be:82:7c:2f:7d:07:c4:3d:28:63:41:f0: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:2C:94:E0:06:8C:0D:38:95:59:32:5B:E7:AC:EE:AE:36:29:D2 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2c:79:d7:71:1e:eb:d9:38:d6:e9:41:76:ea:d8:51:9d:09: b9:3a:2b:e3:87:59:cd:ed:51:39:d8:48:b1:a7:9e:88:c3:20: 09:48:9c:a2:06:b9:b7:44:c2:2e:8d:de:bc:65:c2:76:8e:46: ff:ff:f6:b2:c5:ef:97:61:9a:e9:91:7b:9e:4f:f1:23:85:90: 00:da:5c:ff:1e:a4:16:2c:6f:25:da:e0:f2:8c:8e:d0:f1:bf: 73:65:d2:ea:50:2e:8f:1b:0f:9f:0d:1e:68:dc:26:a0:7b:8e: 2a:a3:1c:7f:db:0d:1e:d0:5d:83:60:63:34:b0:28:7c:ea:47: 09:07:35:0a:28:f4:6c:a4:20:1c:ba:03:0f:dc:48:c8:4c:d8: ff:d4:a6:c3:30:fc:26:3b:2d:62:7a:f4:91:7c:bd:c4:b8:8f: 36:e4:56:b1:16:5b:a1:57:64:67:17:b9:b0:07:e8:f9:79:16: 7d:c8:e8:2d:c3:df:82:ac:86:f7:a9:09:6a:a2:9d:e8:e0:11: 6a:ee:3c:8c:7d:38:2d:5d:00:57:2f:1e:a0:6e:38:f4:e6:a2: 86:26:f8:dd:4d:43:2b:c6:30:8b:8f:46:a5:9f:24:36:95:5d: b3:0b:43:cb:13:e4:08:d5:53:d3:f9:60:61:c1:e7:21:06:78: 39:af:29:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUwNTEwMTkwNjE5WhcNMjUwNTE3MTkwNjE5WjAYMRYwFAYD VQQDEw02ODFmYTNhYy0zNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBJHHLr8QiVMd7Bg7DQJHKkCf7/ILRAwmLF7eQ5YgI+2EUvLE1d9Xkius8jT m9wr0UIP5B+dPzgui5/JZbfRJT4N4UO5G+sd4JG2kZk3oBproXCwTw6Tcqz0cbHy n3Jj60YiJ3SGY7WeR1Cueue6I7RmDclLBfWorHyE9yGXSKdTR+NyP9D+n2cCzmfP lF71MjKefhlO5xCZQzf8nSrh2stFCdSyWJyMV3Lg+SKJuAraraalo9sosfoSqwz+ 3Q3xQnii1Wii/X4Oog7xjVYRllDSG8FfAMXz733vGU8LR4+pA46IyVwtMU5wVdBq v+jpRPu+gnwvfQfEPShjQfCBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILSLJTg BowNOJVZMlvnrO6uNinSMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAILHnXcR7r2TjW6UF26thRnQm5Oivjh1nN7VE52Eixp56IwyAJSJyi Brm3RMIujd68ZcJ2jkb///ayxe+XYZrpkXueT/EjhZAA2lz/HqQWLG8l2uDyjI7Q 8b9zZdLqUC6PGw+fDR5o3Cage44qoxx/2w0e0F2DYGM0sCh86kcJBzUKKPRspCAc ugMP3EjITNj/1KbDMPwmOy1ievSRfL3EuI825FaxFluhV2RnF7mwB+j5eRZ9yOgt w9+CrIb3qQlqop3o4BFq7jyMfTgtXQBXLx6gbjj05qKGJvjdTUMrxjCLj0alnyQ2 lV2zC0PLE+QI1VPT+WBhwechBng5rynI -----END CERTIFICATE-----Generated at Mon May 12 18:56:27 2025 by rpki-client