$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: BNd9H/BNlmPgd3TtUvlnD+1Lqkut1s8yi1ucp5h6wcA= Subject key identifier: 87:6E:82:14:88:51:33:18:36:4B:44:37:15:31:A4:1B:F0:E9:28:1E Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 02F8 Signing time: Tue 13 May 2025 01:04:28 +0000 Manifest this update: Tue 13 May 2025 01:04:28 +0000 Manifest next update: Tue 20 May 2025 01:04:28 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: Cwso/9LKN0p8lx8fGd0FsjmHwPQWQMNN6fAo/AjOEwc=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: May 13 01:04:28 2025 GMT Not After : May 20 01:04:28 2025 GMT Subject: CN=68229a9c-f662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:c8:6e:5f:c7:6f:d7:52:8b:95:20:6c:63: 80:ae:3f:00:35:4c:e6:8c:c7:14:0f:78:22:30:44: eb:d2:fa:e7:1c:ac:38:bb:b7:84:24:5e:a7:39:d5: 38:a2:0b:f7:73:ff:f5:c7:a8:f0:42:fe:c4:0e:4b: be:18:87:7a:13:5f:60:26:1b:93:9a:6d:36:63:f6: cc:c8:48:26:4a:52:03:f4:be:0e:6b:ed:f0:61:79: 10:28:eb:da:f8:63:6a:95:53:3d:1f:02:af:72:64: 3e:fb:e0:5e:c7:20:04:3f:50:ac:10:bf:97:5c:d8: d8:4f:12:96:eb:54:d5:b8:ec:a2:07:bb:a8:a8:e9: 5c:3f:6d:57:bf:b6:3e:0c:91:25:e0:5e:11:7a:fb: 22:34:65:44:e5:ec:26:05:24:71:a0:89:46:3b:32: 17:e5:77:6d:4e:18:4c:c3:06:f1:e9:f4:92:89:bd: 99:ec:7d:31:d6:16:e5:fc:b4:31:ea:3e:8a:56:f3: 6f:4f:bc:d2:12:67:68:5a:59:58:27:b0:7b:cd:8e: 3b:c6:00:74:86:52:91:20:cc:63:7e:04:55:41:b0: 23:8c:8c:75:08:37:2a:49:73:d4:27:4d:1c:ac:49: ec:85:65:2f:9e:a1:f5:ad:83:4d:c0:93:4b:ee:92: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6E:82:14:88:51:33:18:36:4B:44:37:15:31:A4:1B:F0:E9:28:1E X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f5:25:b8:6f:38:f4:ac:a1:b9:5e:7c:9f:7d:9e:f6:d2:5c: e7:4b:e9:43:02:22:29:5e:16:38:5e:d6:d0:4d:1b:eb:ad:67: 87:46:55:87:c6:51:39:5a:8c:e9:c6:fd:2a:fc:60:b7:94:94: 08:4f:a7:cb:47:f7:38:24:c3:68:de:ca:9a:df:6e:35:db:90: 65:3b:0f:8e:3b:66:39:11:43:7d:df:e9:89:d0:81:6a:3b:3c: a0:90:45:b9:d4:bc:62:17:a2:52:a6:80:18:a9:fb:9d:7b:cc: 99:b8:f4:20:75:42:08:a5:aa:2d:c4:38:e5:a8:c0:c0:87:6e: a9:81:09:4f:bc:24:b4:67:8d:69:f5:38:5e:2c:cf:14:fb:ef: 67:a5:74:58:19:5d:ed:83:dc:16:80:a8:e4:d4:a5:ca:9d:44: 26:25:79:ab:ca:15:8c:a4:6c:03:c1:a1:92:19:f7:de:68:94: 27:c4:e1:89:e0:f3:82:64:80:ac:14:fd:a9:34:88:cd:17:52: 23:2c:4e:09:58:82:d3:75:cb:6a:af:a0:02:24:fc:a2:8b:21: c8:3b:2e:34:69:86:f3:8b:c7:56:2a:7a:87:69:b3:fa:75:61: 47:3a:a7:cf:10:0f:37:92:4d:1e:be:45:0c:01:35:82:df:36: c1:08:05:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUwNTEzMDEwNDI4WhcNMjUwNTIwMDEwNDI4WjAYMRYwFAYD VQQDEw02ODIyOWE5Yy1mNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9C/Ibl/Hb9dSi5UgbGOArj8ANUzmjMcUD3giMETr0vrnHKw4u7eEJF6nOdU4 ogv3c//1x6jwQv7EDku+GId6E19gJhuTmm02Y/bMyEgmSlID9L4Oa+3wYXkQKOva +GNqlVM9HwKvcmQ+++BexyAEP1CsEL+XXNjYTxKW61TVuOyiB7uoqOlcP21Xv7Y+ DJEl4F4RevsiNGVE5ewmBSRxoIlGOzIX5XdtThhMwwbx6fSSib2Z7H0x1hbl/LQx 6j6KVvNvT7zSEmdoWllYJ7B7zY47xgB0hlKRIMxjfgRVQbAjjIx1CDcqSXPUJ00c rEnshWUvnqH1rYNNwJNL7pJD3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdughSI UTMYNktENxUxpBvw6SgeMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg9SW4bzj0rKG5XnyffZ720lznS+lDAiIpXhY4XtbQTRvrrWeHRlWH xlE5Wozpxv0q/GC3lJQIT6fLR/c4JMNo3sqa324125BlOw+OO2Y5EUN93+mJ0IFq OzygkEW51LxiF6JSpoAYqfude8yZuPQgdUIIpaotxDjlqMDAh26pgQlPvCS0Z41p 9TheLM8U++9npXRYGV3tg9wWgKjk1KXKnUQmJXmryhWMpGwDwaGSGffeaJQnxOGJ 4POCZICsFP2pNIjNF1IjLE4JWILTdctqr6ACJPyiiyHIOy40aYbzi8dWKnqHabP6 dWFHOqfPEA83kk0evkUMATWC3zbBCAUe -----END CERTIFICATE-----Generated at Tue May 13 09:15:26 2025 by rpki-client