$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: rEpDFjKfhl4SVHgs5sRTbEJyLbV98YbYVD2fsFaTFzY= Subject key identifier: 7C:B3:58:20:53:14:BF:63:00:8C:6B:7A:D2:4A:A7:4A:A5:49:D7:71 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 45 Signing time: Thu 15 May 2025 06:40:43 +0000 Manifest this update: Thu 15 May 2025 06:40:42 +0000 Manifest next update: Thu 22 May 2025 06:40:42 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: lZBq7jOm+6/taKUzalGNA390ndPVhSquVzrsoZmLEck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: May 15 06:40:42 2025 GMT Not After : May 22 06:40:42 2025 GMT Subject: CN=68258c6b-319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:76:24:dc:80:c6:da:a1:35:4b:ac:8a:37: 73:7c:61:ed:51:91:26:2f:d0:5a:53:74:ca:ea:82: 3d:55:3d:8a:52:f3:1b:3e:7b:1c:18:ad:d7:61:bf: 84:c0:e9:89:f2:1d:32:15:79:ae:6b:5b:81:c4:13: 32:e9:d8:98:c1:ac:c6:ca:ad:1f:85:52:68:ff:22: 7b:59:4a:8b:c5:d7:3f:4f:d5:ce:f1:8a:3d:ea:a3: f2:08:30:4d:88:8c:c6:e8:fc:de:41:0d:5c:bd:b8: cb:62:02:a0:36:05:12:0d:3b:13:90:1d:61:94:fd: 2e:27:fe:16:8e:8f:89:7f:4a:58:39:29:cd:40:de: f9:a1:26:4c:dd:53:5b:cf:6b:ef:90:cb:b2:bf:b1: 32:99:a4:d8:0f:61:5d:89:cb:27:03:17:e8:8f:e6: 5c:cd:50:2d:73:0c:37:9b:f3:b5:98:0e:b1:bc:8b: 19:de:fb:f7:f3:72:ec:dc:7f:b7:1d:69:b4:16:e4: 51:69:11:aa:d0:62:50:88:62:bd:bd:da:2a:01:67: 1d:2b:2c:10:45:e2:0c:6d:65:45:a7:5a:24:3f:d6: 16:1c:c2:c5:a4:17:58:f4:d3:56:ba:af:69:b8:05: b5:1d:05:3d:50:e2:7e:29:79:b1:34:00:59:51:a4: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B3:58:20:53:14:BF:63:00:8C:6B:7A:D2:4A:A7:4A:A5:49:D7:71 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e4:7f:d4:20:d8:55:3a:07:ed:bd:00:f1:71:ab:57:7d:8d: 4c:18:2f:98:93:bc:38:0a:82:b7:0f:fa:7b:11:c5:1f:ee:8b: 08:9c:e9:4e:e7:59:e7:8e:a9:29:9a:2b:84:ca:e6:03:b9:54: 22:c8:c7:8e:1a:f0:ea:91:6d:59:17:1e:b7:ca:45:c1:23:3a: 6b:0d:f9:74:e9:13:2b:b5:10:4e:75:6f:b7:d7:63:a8:e5:5e: 08:e8:29:44:54:87:7f:88:2d:ea:b1:90:a3:f7:3b:6a:cc:be: a8:ad:da:92:93:43:57:b9:de:ac:03:62:c2:9c:3d:05:85:88: fb:f2:0e:34:02:32:86:cf:4b:a4:7b:f8:05:12:5a:23:5f:8a: 0b:a7:0a:59:4e:31:9f:36:bf:10:89:e5:54:6c:a1:ae:42:a6: d5:06:40:c0:83:55:58:f6:e6:6d:16:db:3a:88:c0:3f:bf:b3: 64:89:d8:1b:b3:27:b5:a5:32:04:9d:84:bf:b7:0a:73:bb:86: e8:83:90:c7:e4:26:ae:ed:d4:0b:70:e4:fa:ea:ef:95:65:be: 33:80:5a:72:fe:66:6b:e1:5d:f7:a8:6e:a0:81:88:96:4d:98: 3d:58:be:e8:64:40:e2:45:6d:5e:54:61:39:ed:b6:2b:e5:41: b4:27:4b:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux NUZBN0RDQzAeFw0yNTA1MTUwNjQwNDJaFw0yNTA1MjIwNjQwNDJaMBgxFjAUBgNV BAMTDTY4MjU4YzZiLTMxOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV2HYk3IDG2qE1S6yKN3N8Ye1RkSYv0FpTdMrqgj1VPYpS8xs+exwYrddhv4TA 6YnyHTIVea5rW4HEEzLp2JjBrMbKrR+FUmj/IntZSovF1z9P1c7xij3qo/IIME2I jMbo/N5BDVy9uMtiAqA2BRINOxOQHWGU/S4n/haOj4l/Slg5Kc1A3vmhJkzdU1vP a++Qy7K/sTKZpNgPYV2JyycDF+iP5lzNUC1zDDeb87WYDrG8ixne+/fzcuzcf7cd abQW5FFpEarQYlCIYr292ioBZx0rLBBF4gxtZUWnWiQ/1hYcwsWkF1j001a6r2m4 BbUdBT1Q4n4pebE0AFlRpDl7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfLNYIFMU v2MAjGt60kqnSqVJ13EwHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAETkf9Qg2FU6B+29APFxq1d9jUwYL5iTvDgKgrcP+nsRxR/uiwic6U7n WeeOqSmaK4TK5gO5VCLIx44a8OqRbVkXHrfKRcEjOmsN+XTpEyu1EE51b7fXY6jl XgjoKURUh3+ILeqxkKP3O2rMvqit2pKTQ1e53qwDYsKcPQWFiPvyDjQCMobPS6R7 +AUSWiNfigunCllOMZ82vxCJ5VRsoa5CptUGQMCDVVj25m0W2zqIwD+/s2SJ2Buz J7WlMgSdhL+3CnO7huiDkMfkJq7t1Atw5Prq75VlvjOAWnL+ZmvhXfeobqCBiJZN mD1YvuhkQOJFbV5UYTnttivlQbQnSyE= -----END CERTIFICATE-----Generated at Fri May 16 08:50:37 2025 by rpki-client