$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json) Hash identifier: zYbjAJ5c4Xm1jCvcYyVaHFD0o61PCahZS83hWE7uWgg= Subject key identifier: 3B:5F:F2:82:71:81:1E:08:61:68:73:FF:D4:32:1D:3F:55:A2:31:08 Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Certificate serial: 10BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft Manifest number: 10B4 Signing time: Sat 10 May 2025 17:12:54 +0000 Manifest this update: Sat 10 May 2025 17:12:54 +0000 Manifest next update: Sat 17 May 2025 17:12:54 +0000 Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: PwrBDusQ+T10md2wW8xrRuOTra0BpPThUsRp0EvsHqQ=) 2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: +KeTCKuOfeRgu5RimCaRxKh/0Sa4v6tZDxtG+Krp5ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4282 (0x10ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Validity Not Before: May 10 17:12:54 2025 GMT Not After : May 17 17:12:54 2025 GMT Subject: CN=681f8916-0691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:f9:84:f6:f3:46:ba:e8:5b:7c:86:57:31: 25:3b:c9:b7:77:07:12:7b:97:7e:82:d0:b0:9d:1e: 92:2c:fe:c5:7a:2f:a1:5a:40:39:2f:ca:b3:fd:1e: 1c:83:86:c7:3a:ee:62:34:24:87:d3:b5:6c:0e:49: e7:0d:8e:5e:89:05:05:3e:c8:c9:49:6b:89:e7:74: 31:b7:2d:48:ea:7d:3a:5d:c6:c9:1e:9a:26:7d:91: 59:b5:66:d8:c5:f4:1b:2e:bf:91:2d:44:b2:38:60: 56:d8:78:ee:d9:97:20:8f:26:84:7c:b6:3d:f9:84: b6:e0:59:cb:0f:87:eb:c5:9b:38:a1:f1:ac:2c:44: e7:80:be:25:db:4a:69:d1:c4:e6:1e:62:b5:27:b2: f3:02:d8:ff:05:aa:b0:f9:37:83:38:17:0a:1b:18: ad:86:10:05:37:f8:e2:ca:07:e4:48:13:ae:c8:12: 0d:21:b5:42:7d:20:c6:f3:cb:4f:7d:18:0d:3c:bc: e8:a3:22:00:5f:88:ca:db:a0:84:85:f8:92:05:ba: 11:3a:99:c5:09:00:e5:38:0f:af:6a:a3:cc:cc:a7: 8f:5f:3c:9b:6f:84:81:b1:da:62:49:8b:9e:b5:89: 8a:59:b2:de:bf:dc:5c:d8:c7:32:bc:85:11:0c:ac: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5F:F2:82:71:81:1E:08:61:68:73:FF:D4:32:1D:3F:55:A2:31:08 X509v3 Authority Key Identifier: keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e7:9c:40:27:9b:44:57:6f:65:89:5a:01:5d:2c:14:a9:3a: 2a:45:a5:61:b0:d8:cc:13:65:9d:a1:91:f4:4c:54:58:de:ca: 72:05:6e:af:5f:eb:7b:fd:f9:da:bc:98:5b:bc:02:c9:17:ec: 92:32:20:1a:76:85:73:02:8a:43:0e:86:a1:a1:c9:f6:9f:c5: ff:c4:bd:dc:f1:29:47:6b:9c:9d:44:be:63:55:79:06:73:1d: b0:dd:8a:5e:f1:f0:9b:15:12:ef:2f:09:d9:bf:fe:a3:56:07: 51:d7:2f:00:0b:a2:b0:e0:d3:7a:f6:0d:26:8b:85:b7:eb:8f: ef:05:22:ab:e8:02:4a:c3:dc:5d:47:b1:8c:37:ed:e2:cd:9b: 42:80:37:ea:84:16:96:c5:e7:05:b9:ce:09:3a:bf:24:fb:42: 8d:e5:34:f6:ac:1c:15:a6:07:e9:5a:e2:66:67:37:68:40:c9: c6:fd:fc:1b:1e:d0:a3:08:53:e3:95:83:a3:f4:74:fb:e4:bb: 68:39:62:22:7c:8f:19:c8:b5:cf:5c:21:74:8f:31:9f:41:90: 8f:e1:d4:28:ad:19:c8:af:15:78:77:5d:3f:d9:cc:e5:2f:01: c9:15:18:3b:c0:25:a2:97:d8:bb:38:a4:85:46:c3:3e:0a:01: 65:d2:3b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzMDQxMTAvBgNVBAUTKDQ2MTQyNTk0Mjc0NjQ4NzRCRTdERUI3QkY0MjEyNzJD QjIzREExODgwHhcNMjUwNTEwMTcxMjU0WhcNMjUwNTE3MTcxMjU0WjAYMRYwFAYD VQQDEw02ODFmODkxNi0wNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX/5hPbzRrroW3yGVzElO8m3dwcSe5d+gtCwnR6SLP7Fei+hWkA5L8qz/R4c g4bHOu5iNCSH07VsDknnDY5eiQUFPsjJSWuJ53Qxty1I6n06XcbJHpomfZFZtWbY xfQbLr+RLUSyOGBW2Hju2ZcgjyaEfLY9+YS24FnLD4frxZs4ofGsLETngL4l20pp 0cTmHmK1J7LzAtj/Baqw+TeDOBcKGxithhAFN/jiygfkSBOuyBINIbVCfSDG88tP fRgNPLzooyIAX4jK26CEhfiSBboROpnFCQDlOA+vaqPMzKePXzybb4SBsdpiSYue tYmKWbLev9xc2McyvIURDKxC1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtf8oJx gR4IYWhz/9QyHT9VojEIMB8GA1UdIwQYMBaAFEYUJZQnRkh0vn3re/QhJyyyPaGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjMwNC9FNzg4QzhBMjI1 ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NIUy1mZXQ3OUNFbkxMSTlv WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoUWxsQ2RHU0hTLWZldDc5Q0VuTExJOW9ZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjMwNC9FNzg4QzhBMjI1ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NI Uy1mZXQ3OUNFbkxMSTlvWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi55xAJ5tEV29liVoBXSwUqToqRaVhsNjME2WdoZH0TFRY3spyBW6v X+t7/fnavJhbvALJF+ySMiAadoVzAopDDoahocn2n8X/xL3c8SlHa5ydRL5jVXkG cx2w3Ype8fCbFRLvLwnZv/6jVgdR1y8AC6Kw4NN69g0mi4W364/vBSKr6AJKw9xd R7GMN+3izZtCgDfqhBaWxecFuc4JOr8k+0KN5TT2rBwVpgfpWuJmZzdoQMnG/fwb HtCjCFPjlYOj9HT75LtoOWIifI8ZyLXPXCF0jzGfQZCP4dQorRnIrxV4d10/2czl LwHJFRg7wCWil9i7OKSFRsM+CgFl0jsS -----END CERTIFICATE-----Generated at Mon May 12 07:10:00 2025 by rpki-client