$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: Rp+6+tMYqVVQv5GxVlZ3iSqy/0Y3m/e3L0L1QBWQrYA= Subject key identifier: F8:65:36:CB:9E:78:86:E4:FD:50:BE:D2:FF:1A:82:F2:4B:CB:4B:E4 Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 174C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 174C Signing time: Sat 10 May 2025 16:30:57 +0000 Manifest this update: Sat 10 May 2025 16:30:57 +0000 Manifest next update: Sat 17 May 2025 16:30:57 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: DfgGoYZF6D6fDB1ABcZdtB/+uilUHHcTwrU1/ni+lJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5964 (0x174c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: May 10 16:30:57 2025 GMT Not After : May 17 16:30:57 2025 GMT Subject: CN=681f7f41-ff33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:3d:52:da:bb:1c:be:97:53:a1:18:2a:75: 67:e1:dc:cc:08:b3:af:f0:27:c0:82:8f:b2:28:6a: 76:9b:0c:f4:7e:5f:3e:0f:16:42:f2:fa:f3:18:6a: d2:c6:b3:23:c9:e5:34:42:f8:da:a0:2b:92:af:8a: c9:69:29:fa:83:f4:a8:b0:f6:a8:a6:13:4c:c0:a3: 9c:82:14:bb:df:26:58:bb:05:63:68:e2:8a:c4:27: 18:82:00:dc:7d:e8:e4:0d:89:1e:aa:45:83:cf:f8: a0:77:a8:cc:15:b8:39:35:dc:67:3b:ec:b9:6b:e2: 55:47:98:bb:5f:22:71:67:95:62:57:39:de:cc:89: e9:43:eb:2c:c4:95:5e:7d:0a:45:d5:b2:80:69:c2: 74:e7:49:11:dc:d7:6b:68:f6:b2:04:72:be:02:7f: a4:5a:e2:96:ea:10:c1:61:08:83:26:73:f0:db:69: 6b:8e:53:f1:7e:97:c3:81:56:0e:ea:67:c7:11:62: 04:57:67:f9:2c:8d:b3:fc:72:0a:b7:9a:19:e1:f5: 67:b9:2c:91:84:a0:14:11:bb:35:79:0d:de:75:fc: c0:69:70:b5:99:09:f2:00:fa:b6:5c:e7:94:43:e9: 1e:a3:dd:81:98:03:3c:3a:a6:39:7d:3d:ea:44:d0: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:36:CB:9E:78:86:E4:FD:50:BE:D2:FF:1A:82:F2:4B:CB:4B:E4 X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:6a:a0:f8:ca:11:3c:d6:06:8a:62:27:d4:62:5b:d6:cc:0e: f7:0d:a1:3f:42:cb:da:90:e3:58:96:25:b4:50:72:4e:d1:1a: 95:ee:26:ab:88:c3:a6:c5:b4:4b:3c:99:80:bf:a2:82:a9:d0: 77:bf:59:cd:9d:d5:f7:7c:70:31:1e:fd:60:0e:5b:61:5c:b7: 97:a4:a1:65:9b:d8:c2:7a:07:ae:22:dc:7c:57:b7:64:ce:d9: 62:cb:79:5c:37:7f:1d:ee:52:f2:32:0f:3c:98:ff:15:9a:00: ae:10:4e:49:1f:e9:e2:0d:72:e4:1e:d7:2a:13:c9:fe:30:e8: e6:98:af:f8:d9:af:97:1a:9a:dd:ba:25:40:3b:95:43:a5:1e: fb:f2:fc:ff:34:56:e1:5e:69:ae:73:8e:f0:97:78:69:44:79: b4:6e:5d:61:75:38:a3:50:65:0e:fd:9b:52:47:3f:06:13:a1: 16:95:94:d7:3a:62:c8:a4:54:f1:3b:87:39:d0:46:f5:e7:49: 5a:dc:aa:bb:86:0e:c4:bd:52:14:c7:84:5a:2c:7e:03:e2:02: 2d:93:d0:2e:c8:c8:3c:24:c2:83:75:04:84:e6:d4:08:80:d6: c9:08:bc:fd:c2:7a:94:ec:39:14:20:ad:96:c0:30:c5:90:90: 14:f1:66:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjUwNTEwMTYzMDU3WhcNMjUwNTE3MTYzMDU3WjAYMRYwFAYD VQQDEw02ODFmN2Y0MS1mZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAI9Utq7HL6XU6EYKnVn4dzMCLOv8CfAgo+yKGp2mwz0fl8+DxZC8vrzGGrS xrMjyeU0QvjaoCuSr4rJaSn6g/SosPaophNMwKOcghS73yZYuwVjaOKKxCcYggDc fejkDYkeqkWDz/igd6jMFbg5NdxnO+y5a+JVR5i7XyJxZ5ViVznezInpQ+ssxJVe fQpF1bKAacJ050kR3NdraPayBHK+An+kWuKW6hDBYQiDJnPw22lrjlPxfpfDgVYO 6mfHEWIEV2f5LI2z/HIKt5oZ4fVnuSyRhKAUEbs1eQ3edfzAaXC1mQnyAPq2XOeU Q+keo92BmAM8OqY5fT3qRNABlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhlNsue eIbk/VC+0v8agvJLy0vkMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmaqD4yhE81gaKYifUYlvWzA73DaE/QsvakONYliW0UHJO0RqV7iar iMOmxbRLPJmAv6KCqdB3v1nNndX3fHAxHv1gDlthXLeXpKFlm9jCegeuItx8V7dk ztliy3lcN38d7lLyMg88mP8VmgCuEE5JH+niDXLkHtcqE8n+MOjmmK/42a+XGprd uiVAO5VDpR778vz/NFbhXmmuc47wl3hpRHm0bl1hdTijUGUO/ZtSRz8GE6EWlZTX OmLIpFTxO4c50Eb150la3Kq7hg7EvVIUx4RaLH4D4gItk9AuyMg8JMKDdQSE5tQI gNbJCLz9wnqU7DkUIK2WwDDFkJAU8Waj -----END CERTIFICATE-----Generated at Mon May 12 04:22:30 2025 by rpki-client