$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json) Hash identifier: yvowL/m0tTHQOMLxtDLBpcKWJwKLxL+ffSGI3JFe8FI= Subject key identifier: 65:BB:13:01:59:59:D4:42:75:8A:DE:7E:4A:42:70:BC:2B:34:12:02 Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Certificate serial: 17CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft Manifest number: 17CE Signing time: Mon 12 May 2025 16:29:39 +0000 Manifest this update: Mon 12 May 2025 16:29:38 +0000 Manifest next update: Mon 19 May 2025 16:29:38 +0000 Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: Q2opmlCqVCrihSxzDrjLBOaI4XFl1K73ehjQ0tAv1q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6094 (0x17ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364 Validity Not Before: May 12 16:29:38 2025 GMT Not After : May 19 16:29:38 2025 GMT Subject: CN=682221f3-696a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:f9:ee:4b:07:46:6e:0d:f2:e0:38:a6:5a: 42:de:dc:0a:f1:2d:65:81:21:8b:9e:da:25:a7:ca: 54:b7:2a:97:1a:e2:69:70:8a:ba:d0:48:3c:c4:fc: e2:62:25:3e:cb:5a:17:b2:65:8d:d8:65:e5:aa:30: 95:df:38:10:6d:bf:fa:97:04:28:93:37:3d:61:0c: 9c:59:8b:d4:51:d7:24:24:2d:e8:41:8e:bf:78:b4: 38:0d:c3:3f:fe:18:58:b9:7a:3f:69:31:1a:bf:c0: 95:e7:ab:9a:73:62:d0:3a:6b:cd:76:b4:2f:e1:1c: d0:18:61:07:93:00:41:a8:07:19:19:b3:65:32:55: 24:2e:3c:57:0e:ef:f8:9c:e9:83:6a:c8:16:53:bd: c1:bd:52:f8:be:b2:4b:03:bf:ac:14:ca:56:c0:12: 50:dc:5f:7f:d5:81:63:d0:a6:e3:f7:f8:21:6d:d3: a9:da:d8:9b:47:b2:f5:1e:3c:d2:69:ca:92:0d:83: 83:b9:14:af:8b:d8:63:6b:63:e4:96:b9:1b:84:f0: 48:c2:0e:b8:d1:61:07:fe:c9:fe:a2:7b:03:01:ee: ec:6a:2c:db:5b:27:d5:d7:5e:5c:0f:6c:b6:55:02: 93:cc:51:c2:09:15:6d:18:3b:38:c0:54:a4:06:5a: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BB:13:01:59:59:D4:42:75:8A:DE:7E:4A:42:70:BC:2B:34:12:02 X509v3 Authority Key Identifier: keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b6:9a:01:83:8e:49:84:7b:32:d2:ca:03:96:dd:2c:eb:4c: 3a:76:ae:4f:85:5d:ff:30:94:7f:01:4e:89:ab:7e:4f:6b:c4: 60:ce:9f:34:0b:01:cb:4e:f7:b7:c1:44:e6:4b:f9:1e:58:07: 0c:80:8a:5b:28:a2:ae:e9:c1:bb:19:ea:1a:3f:5c:17:86:ad: e1:66:bd:8a:a0:56:fa:5c:e5:a5:10:d8:26:03:ef:08:07:c2: c9:e8:85:c3:ac:78:c3:45:a1:35:f6:9b:40:b2:6a:d1:e3:b8: 57:8f:dd:af:8e:e5:19:61:c5:fa:64:f5:8e:a2:e9:3d:e5:cc: 9b:b7:4c:4a:84:99:b1:5c:a4:76:ce:1f:9a:df:5d:69:86:94: 4d:79:c1:d5:c0:86:e0:dc:56:9b:94:ef:fe:79:05:1c:6c:69: e4:61:70:c3:c9:95:14:0e:27:b3:43:f8:a0:a0:00:b3:aa:b1: f1:ab:60:6c:bf:f2:ff:f5:68:90:e8:ba:5d:33:fa:65:90:6f: ba:01:5e:a0:74:89:68:34:09:2a:28:f2:a3:42:5a:b5:36:46: 14:e2:55:65:90:78:db:ef:7d:dc:54:b1:a0:ff:69:33:04:9a: 75:17:16:fa:7f:d8:8b:65:89:fa:08:2c:79:e0:09:1c:20:2a: 1c:1d:9e:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0MTUyOTkyNTM1 MzFFMDYzNjQwHhcNMjUwNTEyMTYyOTM4WhcNMjUwNTE5MTYyOTM4WjAYMRYwFAYD VQQDEw02ODIyMjFmMy02OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g/57ksHRm4N8uA4plpC3twK8S1lgSGLntolp8pUtyqXGuJpcIq60Eg8xPzi YiU+y1oXsmWN2GXlqjCV3zgQbb/6lwQokzc9YQycWYvUUdckJC3oQY6/eLQ4DcM/ /hhYuXo/aTEav8CV56uac2LQOmvNdrQv4RzQGGEHkwBBqAcZGbNlMlUkLjxXDu/4 nOmDasgWU73BvVL4vrJLA7+sFMpWwBJQ3F9/1YFj0Kbj9/ghbdOp2tibR7L1HjzS acqSDYODuRSvi9hja2PklrkbhPBIwg640WEH/sn+onsDAe7saizbWyfV115cD2y2 VQKTzFHCCRVtGDs4wFSkBlq6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW7EwFZ WdRCdYrefkpCcLwrNBICMB8GA1UdIwQYMBaAFIRyLb1CJnvd1ZuIQVKZJTUx4GNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGMy9FNjMzN0QzMEJE MzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5M1ZtNGhCVXBrbE5USGdZ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hISXR2VUltZTkzVm00aEJVcGtsTlRIZ1kyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5 M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABtpoBg45JhHsy0soDlt0s60w6dq5PhV3/MJR/AU6Jq35Pa8Rgzp80 CwHLTve3wUTmS/keWAcMgIpbKKKu6cG7GeoaP1wXhq3hZr2KoFb6XOWlENgmA+8I B8LJ6IXDrHjDRaE19ptAsmrR47hXj92vjuUZYcX6ZPWOouk95cybt0xKhJmxXKR2 zh+a311phpRNecHVwIbg3FablO/+eQUcbGnkYXDDyZUUDiezQ/igoACzqrHxq2Bs v/L/9WiQ6LpdM/plkG+6AV6gdIloNAkqKPKjQlq1NkYU4lVlkHjb733cVLGg/2kz BJp1Fxb6f9iLZYn6CCx54AkcICocHZ5C -----END CERTIFICATE-----Generated at Tue May 13 08:50:55 2025 by rpki-client