$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: 4boOg3Grtj+udGZZeZqDlxJlvd10qzgbQvApclVf1Z8= Subject key identifier: A2:5B:FD:40:08:9E:9F:3E:39:EB:75:A9:57:64:FE:FA:E3:DF:2C:7A Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 01B7 Signing time: Tue 13 May 2025 02:23:15 +0000 Manifest this update: Tue 13 May 2025 02:23:15 +0000 Manifest next update: Tue 20 May 2025 02:23:15 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: MPTWBpSEWMFIu498JFiXU7Ht/bnclbIQ+hpDTQTdNf0=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: May 13 02:23:15 2025 GMT Not After : May 20 02:23:15 2025 GMT Subject: CN=6822ad13-86b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:cc:6f:17:7d:5a:a5:81:bd:66:18:18:54: 02:e6:a0:93:67:26:74:84:e7:6e:79:33:e8:d6:6c: 69:ae:44:35:3e:46:f8:07:04:76:74:37:08:ce:f4: 2d:d0:fe:6f:99:05:8c:49:08:e3:d2:8f:70:12:24: 7c:bf:c5:3a:fe:35:68:26:ad:fd:df:58:98:04:de: 8e:b0:e0:19:73:52:33:63:d1:fa:d0:7a:ca:51:38: e2:6e:ac:c7:6a:84:65:06:e5:75:48:57:87:a7:9f: 54:ad:67:78:4f:1a:bb:fa:95:89:5d:1c:91:0c:fb: ee:71:96:a7:2f:5d:cc:e4:00:12:e1:07:16:ab:26: 7c:78:70:11:a3:4e:42:52:38:c6:fa:11:2b:53:5f: 94:1f:ea:39:ac:78:b9:21:bd:e4:6c:51:63:d9:1e: 3d:62:aa:ae:fa:90:e1:c0:b3:0a:a9:99:e2:d9:57: 6e:85:bb:e9:5b:47:25:35:de:b8:9d:52:e6:95:81: d6:ec:30:96:54:e7:a2:78:f1:e0:06:98:5b:b1:fa: 53:85:9c:02:d1:77:f4:fb:f2:90:13:8a:a9:92:83: 6e:19:29:5f:aa:a7:d8:c7:a2:2f:5e:e0:58:68:de: f1:c8:64:5d:d5:2f:37:93:77:40:8a:6e:e2:1c:08: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:FD:40:08:9E:9F:3E:39:EB:75:A9:57:64:FE:FA:E3:DF:2C:7A X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:78:d7:c4:e3:6b:fc:79:68:a8:3a:c6:62:01:09:c8:10:df: 3a:ac:a6:29:34:62:5b:64:2f:00:fc:ae:3e:3a:91:24:df:cb: 10:17:ce:6d:44:2e:7e:cf:6f:c7:2d:db:d6:b0:a4:02:9c:10: 94:e1:df:38:3a:dc:9c:94:f5:ea:5c:57:59:ac:8e:da:03:90: 31:15:b0:c4:52:8a:78:3b:44:7a:1e:4d:f4:71:94:17:d2:07: 9d:b8:bc:37:6a:22:75:61:37:71:60:e1:c8:07:de:0a:b7:81: c0:4c:f1:ec:4f:40:a8:ef:77:a9:73:3d:6c:bf:bf:51:46:93: 84:bc:0f:7a:a8:b4:d4:6e:53:69:16:21:d4:76:bf:8e:02:63: 42:d8:ce:70:31:1c:e0:3f:7a:cf:85:fe:b2:37:a7:b2:1b:a4: 95:9d:74:10:5d:df:ef:a8:39:3a:e8:8d:3a:7b:eb:45:d2:13: b4:8a:cb:26:27:c7:5f:0f:7a:5e:ea:1b:8f:f2:08:59:ac:a1: 50:e4:c7:61:72:de:2a:fb:4c:ef:1f:eb:35:31:9b:1e:e1:25: 4c:7c:25:c6:a8:89:84:bd:79:42:f5:42:92:e8:71:eb:1f:88: ba:3e:7e:42:b5:27:23:f8:7c:ce:5d:1b:c1:9e:31:37:65:64: bb:75:42:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjUwNTEzMDIyMzE1WhcNMjUwNTIwMDIyMzE1WjAYMRYwFAYD VQQDEw02ODIyYWQxMy04NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9TMbxd9WqWBvWYYGFQC5qCTZyZ0hOdueTPo1mxprkQ1Pkb4BwR2dDcIzvQt 0P5vmQWMSQjj0o9wEiR8v8U6/jVoJq3931iYBN6OsOAZc1IzY9H60HrKUTjibqzH aoRlBuV1SFeHp59UrWd4Txq7+pWJXRyRDPvucZanL13M5AAS4QcWqyZ8eHARo05C UjjG+hErU1+UH+o5rHi5Ib3kbFFj2R49Yqqu+pDhwLMKqZni2VduhbvpW0clNd64 nVLmlYHW7DCWVOeiePHgBphbsfpThZwC0Xf0+/KQE4qpkoNuGSlfqqfYx6IvXuBY aN7xyGRd1S83k3dAim7iHAiBzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJb/UAI np8+Oet1qVdk/vrj3yx6MB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxeNfE42v8eWioOsZiAQnIEN86rKYpNGJbZC8A/K4+OpEk38sQF85t RC5+z2/HLdvWsKQCnBCU4d84OtyclPXqXFdZrI7aA5AxFbDEUop4O0R6Hk30cZQX 0geduLw3aiJ1YTdxYOHIB94Kt4HATPHsT0Co73epcz1sv79RRpOEvA96qLTUblNp FiHUdr+OAmNC2M5wMRzgP3rPhf6yN6eyG6SVnXQQXd/vqDk66I06e+tF0hO0issm J8dfD3pe6huP8ghZrKFQ5Mdhct4q+0zvH+s1MZse4SVMfCXGqImEvXlC9UKS6HHr H4i6Pn5CtScj+HzOXRvBnjE3ZWS7dUKm -----END CERTIFICATE-----Generated at Tue May 13 19:00:00 2025 by rpki-client