$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: FPd3HJ+WJxothiSs4ymbYRL6dkRKSzux7oHC4fiy16k= Subject key identifier: 68:F2:C3:57:05:19:0C:5D:9F:F8:CA:59:0D:1A:EF:32:25:AD:2E:DD Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0E98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 0FB6 Signing time: Mon 12 May 2025 17:36:57 +0000 Manifest this update: Mon 12 May 2025 17:36:57 +0000 Manifest next update: Mon 19 May 2025 17:36:57 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: +Un+lr4Zt7wY5coEGkXfGrg3AAO0JKPlY9Bv8JO80s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: May 12 17:36:57 2025 GMT Not After : May 19 17:36:57 2025 GMT Subject: CN=682231b9-5c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:d0:40:79:b4:b2:9b:6f:1a:49:5e:ba:20: 17:98:29:f3:e1:88:03:01:6b:1e:0e:cc:03:10:97: b0:51:b3:54:be:b3:51:a2:00:d9:42:b7:75:e3:11: 7b:20:46:cd:7c:f2:76:ef:38:0b:14:de:79:59:39: 1d:ad:f7:84:ff:c1:54:80:30:f8:77:54:ec:56:44: 25:ef:cf:7f:c3:fa:8e:02:c4:d7:eb:b5:f5:f9:f2: 82:e4:bf:4b:a2:75:21:56:07:29:50:fa:b7:33:55: 66:05:cf:e0:75:e6:4a:ef:fc:e6:5c:b7:ca:56:60: 7c:7a:6d:8e:7e:01:59:fc:e7:69:f7:54:c3:13:3b: 0a:5e:05:87:90:ab:a6:8d:17:d5:7c:37:fa:16:33: 02:74:e7:e9:de:58:04:ef:04:08:b4:66:7b:eb:bf: be:cb:09:2f:93:0c:e0:83:3a:82:0d:6f:71:b1:56: 7e:26:ea:ad:f6:8c:f6:88:f6:e5:1a:0a:a4:f2:1d: 9f:9b:6f:98:42:1b:85:8a:97:eb:81:60:84:d5:2e: b2:70:92:3e:35:66:a0:f0:b0:ef:9e:3a:8b:14:ac: ac:50:ce:d1:73:b9:22:91:ff:51:09:21:4b:1f:31: 4c:3d:b2:d2:b2:0c:3f:5b:51:29:75:cc:63:29:be: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:C3:57:05:19:0C:5D:9F:F8:CA:59:0D:1A:EF:32:25:AD:2E:DD X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:24:d1:83:b6:74:89:4b:a4:3a:c6:56:6e:50:24:76:8e:cc: 2c:f4:45:77:43:d7:1b:fc:47:9a:b4:15:09:46:22:f3:bf:ea: d4:6f:ce:3b:3c:b5:1e:0b:47:ef:b0:32:be:8d:a9:b7:c0:c4: 68:e5:8c:b4:b8:83:04:ff:e0:01:c6:00:c7:b4:e1:85:8f:77: 9a:a0:e6:a0:4f:f9:8e:08:f4:5a:a3:17:7b:79:4a:26:fe:ff: f4:47:a4:57:b7:41:15:ac:e9:ff:96:9d:93:6e:3c:44:78:f4: 87:7d:d7:31:69:70:56:46:cd:ab:c0:e4:f2:4c:c7:34:2d:91: 2c:01:88:16:8e:e4:d7:ea:17:24:06:6f:12:d7:38:3d:dc:45: 9d:54:54:07:74:61:4b:d3:8a:dc:57:92:49:6e:14:75:ec:6a: 46:a3:70:fa:fc:cd:2c:59:01:ec:b0:1f:ee:b5:3d:51:46:97: af:9b:a4:00:ea:6f:12:9e:39:c3:34:bd:78:42:4e:5d:bc:a2: d5:98:44:cb:7b:ee:da:63:60:5a:8a:a9:f8:29:7f:13:29:53: bd:fa:ae:b6:db:45:ec:45:53:73:5b:12:f4:54:74:fc:ae:70: 25:1f:bd:a9:17:26:5f:f2:8b:19:61:70:e6:86:65:ed:2d:bf: ee:e9:09:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwNTEyMTczNjU3WhcNMjUwNTE5MTczNjU3WjAYMRYwFAYD VQQDEw02ODIyMzFiOS01YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUTQQHm0sptvGkleuiAXmCnz4YgDAWseDswDEJewUbNUvrNRogDZQrd14xF7 IEbNfPJ27zgLFN55WTkdrfeE/8FUgDD4d1TsVkQl789/w/qOAsTX67X1+fKC5L9L onUhVgcpUPq3M1VmBc/gdeZK7/zmXLfKVmB8em2OfgFZ/Odp91TDEzsKXgWHkKum jRfVfDf6FjMCdOfp3lgE7wQItGZ767++ywkvkwzggzqCDW9xsVZ+Juqt9oz2iPbl Ggqk8h2fm2+YQhuFipfrgWCE1S6ycJI+NWag8LDvnjqLFKysUM7Rc7kikf9RCSFL HzFMPbLSsgw/W1EpdcxjKb56KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjyw1cF GQxdn/jKWQ0a7zIlrS7dMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOJNGDtnSJS6Q6xlZuUCR2jsws9EV3Q9cb/EeatBUJRiLzv+rUb847 PLUeC0fvsDK+jam3wMRo5Yy0uIME/+ABxgDHtOGFj3eaoOagT/mOCPRaoxd7eUom /v/0R6RXt0EVrOn/lp2TbjxEePSHfdcxaXBWRs2rwOTyTMc0LZEsAYgWjuTX6hck Bm8S1zg93EWdVFQHdGFL04rcV5JJbhR17GpGo3D6/M0sWQHssB/utT1RRpevm6QA 6m8SnjnDNL14Qk5dvKLVmETLe+7aY2Baiqn4KX8TKVO9+q6220XsRVNzWxL0VHT8 rnAlH72pFyZf8osZYXDmhmXtLb/u6Qmi -----END CERTIFICATE-----Generated at Tue May 13 02:31:33 2025 by rpki-client