$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: +ubZuqxlSHvLbcVdaMaKeooJG079KujFNuCnWYxWrJ8= Subject key identifier: EC:94:55:03:51:B9:53:6E:68:1C:24:EB:63:B1:4D:2D:67:8D:F7:7F Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 0745 Signing time: Sat 10 May 2025 21:20:15 +0000 Manifest this update: Sat 10 May 2025 21:20:15 +0000 Manifest next update: Sat 17 May 2025 21:20:15 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: GRybZ6cECuIuG+b/wWkt1rvSZpEKQMmHIdcRxyqgR34=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 1GNNxU4cZHFHnGQGEpAVPZfliXXhk8CqSgKLDVtEJBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: May 10 21:20:15 2025 GMT Not After : May 17 21:20:15 2025 GMT Subject: CN=681fc30f-a44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:8f:79:44:6e:a4:cf:8a:9e:9d:2a:40:21: 84:0d:be:6b:bc:56:c9:62:87:77:3d:d0:74:02:aa: 26:78:f3:e4:ea:e3:b0:f0:38:de:6b:3c:2c:21:1c: 63:af:c9:95:78:ff:85:5a:27:4f:2b:ea:30:73:7c: 71:2f:b7:69:b8:08:62:eb:00:73:da:f0:9a:8d:a5: 06:ce:d6:81:64:23:73:99:99:42:cc:5e:cd:8d:5e: 47:4b:ad:f9:1a:68:23:fb:e7:6d:30:b8:f8:7c:c6: 5c:87:d1:a6:b6:53:ad:fd:3d:6e:96:01:aa:54:73: eb:0d:d8:33:41:fd:0b:e8:b6:4d:cc:27:a2:cf:2c: a7:f7:27:db:76:1a:fa:03:83:7a:bb:09:a0:df:2d: 7d:42:73:15:61:31:2c:be:fb:99:33:7e:3b:c5:95: 6e:fe:36:7a:50:06:59:4f:5d:ac:53:70:ca:67:fe: 6c:a4:71:6b:d7:47:d3:d0:12:4b:bd:7f:47:2b:ba: ef:f6:80:29:3a:f1:ad:ed:19:82:6e:bd:3e:c1:80: 64:1f:38:98:cc:10:a3:f6:0d:58:a7:f8:fd:c8:47: 43:3b:98:f6:fc:ec:6b:83:c7:57:b7:e9:58:af:d8: 6b:63:49:75:3d:c0:70:d4:f6:49:db:73:42:34:a1: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:55:03:51:B9:53:6E:68:1C:24:EB:63:B1:4D:2D:67:8D:F7:7F X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:4a:8c:31:1d:53:96:bd:93:0f:28:a1:f7:79:f7:9d:91: 55:fb:a8:2b:4a:2c:40:a2:43:6d:8a:e2:cd:84:bd:76:d3:2b: eb:29:88:55:4a:6f:b9:83:46:0d:3d:f6:75:a2:07:aa:57:31: 8a:16:e8:62:2a:96:a8:8c:83:7c:fa:ad:9b:48:b1:27:16:30: ce:08:be:82:d8:9e:fd:50:c5:75:51:b8:4f:84:83:33:6a:74: 30:c8:11:cd:18:32:23:3a:de:0d:31:28:ec:f4:39:71:dc:21: a0:a6:32:21:e4:4a:9b:55:4a:b2:06:7b:02:5f:46:21:a4:72: 25:d9:68:f5:f7:27:82:23:0a:b7:2d:23:51:ca:03:52:b1:13: df:ed:bc:2f:e9:23:18:9e:a5:4f:53:b2:63:05:8c:b8:ea:e9: 46:70:28:da:0c:58:6b:83:dc:33:ec:1b:86:56:28:c5:89:19: 19:95:9b:e0:a8:86:6b:91:f4:b7:ea:d5:ac:ba:f5:eb:b8:8f: 7b:34:09:09:d0:5c:59:83:ed:74:0f:54:3e:39:f7:5d:a3:dc: 17:c7:5a:75:29:f0:be:82:af:b5:12:cd:1f:42:f3:01:59:38: 80:be:4e:47:23:ec:0a:6f:62:c8:94:16:de:39:27:2c:6b:ef: 80:bd:2e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjUwNTEwMjEyMDE1WhcNMjUwNTE3MjEyMDE1WjAYMRYwFAYD VQQDEw02ODFmYzMwZi1hNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXGPeURupM+Knp0qQCGEDb5rvFbJYod3PdB0AqomePPk6uOw8DjeazwsIRxj r8mVeP+FWidPK+owc3xxL7dpuAhi6wBz2vCajaUGztaBZCNzmZlCzF7NjV5HS635 Gmgj++dtMLj4fMZch9GmtlOt/T1ulgGqVHPrDdgzQf0L6LZNzCeizyyn9yfbdhr6 A4N6uwmg3y19QnMVYTEsvvuZM347xZVu/jZ6UAZZT12sU3DKZ/5spHFr10fT0BJL vX9HK7rv9oApOvGt7RmCbr0+wYBkHziYzBCj9g1Yp/j9yEdDO5j2/Oxrg8dXt+lY r9hrY0l1PcBw1PZJ23NCNKHHYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyUVQNR uVNuaBwk62OxTS1njfd/MB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMlEqMMR1Tlr2TDyih93n3nZFV+6grSixAokNtiuLNhL120yvrKYhV Sm+5g0YNPfZ1ogeqVzGKFuhiKpaojIN8+q2bSLEnFjDOCL6C2J79UMV1UbhPhIMz anQwyBHNGDIjOt4NMSjs9Dlx3CGgpjIh5EqbVUqyBnsCX0YhpHIl2Wj19yeCIwq3 LSNRygNSsRPf7bwv6SMYnqVPU7JjBYy46ulGcCjaDFhrg9wz7BuGVijFiRkZlZvg qIZrkfS36tWsuvXruI97NAkJ0FxZg+10D1Q+Ofddo9wXx1p1KfC+gq+1Es0fQvMB WTiAvk5HI+wKb2LIlBbeOScsa++AvS4d -----END CERTIFICATE-----Generated at Sun May 11 22:40:35 2025 by rpki-client