$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: 79ETZ3TebWAi9IH/B+nQcI+K0VBxfs+uypEUyxsnrTs= Subject key identifier: B3:88:F7:1F:C3:8D:F4:C7:24:75:B3:85:5F:4F:0E:C6:6A:81:64:E8 Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 68 Signing time: Thu 15 May 2025 06:15:52 +0000 Manifest this update: Thu 15 May 2025 06:15:52 +0000 Manifest next update: Thu 22 May 2025 06:15:52 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: 8arkUCJWlC4s8c3rjcpBUFgkXxtRLg3p16DdX1Z6xtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: May 15 06:15:52 2025 GMT Not After : May 22 06:15:52 2025 GMT Subject: CN=68258698-e93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:c5:52:32:10:ed:96:94:1b:a1:58:e6:05: 19:0c:a3:f7:a5:8b:c3:39:6d:1b:fe:ab:ff:da:1f: ee:3f:34:89:63:cf:54:9a:c5:c0:98:ff:06:9c:db: a6:94:b9:f8:98:37:0e:9e:d0:eb:40:8b:b7:c2:17: 6f:18:3b:d0:a5:c7:54:0a:6b:76:a3:44:bf:c4:35: 01:f2:43:ad:62:dc:2a:d7:14:c3:b8:39:a3:7a:c7: 14:64:62:e2:23:bf:0d:4b:bb:92:48:d3:33:f6:7b: 58:df:49:9d:ae:35:e3:19:2a:82:a4:e8:c2:17:c7: eb:9b:e9:66:e2:47:1a:2c:0c:5b:be:cf:d9:46:4e: 18:81:27:42:ec:9d:5b:95:47:f7:4b:e0:fc:c7:a2: 9c:bf:39:dc:07:02:c1:5b:4f:9b:e6:ed:d1:c8:1f: 19:74:14:a6:09:42:f2:3f:75:64:0a:7d:63:22:dd: 3a:6d:0c:1a:6c:58:bd:14:ad:fb:e3:06:b2:ba:29: 6b:8a:94:81:d5:8b:2b:ad:d3:4f:7d:6d:27:e9:5c: f1:66:68:98:e2:c2:dc:90:10:22:1b:67:3e:55:3d: b8:40:4f:9c:ab:08:27:f3:7a:8d:c5:1d:50:15:fa: d5:7e:2b:62:b6:9e:98:d3:2d:54:e2:db:9e:56:12: 30:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:F7:1F:C3:8D:F4:C7:24:75:B3:85:5F:4F:0E:C6:6A:81:64:E8 X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b7:af:41:29:2c:a4:88:4d:44:07:5f:64:91:88:0d:41:55: db:46:5e:bc:23:08:98:7c:a6:8c:91:67:1e:25:ff:cc:69:05: 15:55:fa:f2:77:f3:a5:51:d1:84:00:8f:6d:a6:61:c0:ac:38: bd:19:87:e3:f0:89:a9:33:ad:92:9a:d5:dc:6f:49:96:2b:ff: 78:4d:f3:8e:af:dc:08:a2:f0:22:a3:c4:47:a3:7d:b6:7e:8a: c9:19:c7:bc:f4:b9:b4:b3:94:4a:b8:36:42:8b:d7:26:d6:a7: 9b:ae:cd:b2:19:85:25:8e:4a:c9:e6:0c:1f:1d:31:00:63:d6: 1e:9c:8c:82:34:7f:53:dd:c0:f8:6f:45:07:d5:a8:98:75:31: ed:3a:b3:b6:5f:52:6a:3a:7c:a0:77:d0:24:1b:cb:80:4f:9f: 74:cb:e9:ac:0d:23:db:ce:a1:58:2d:aa:13:d7:c0:67:25:c7: a2:d4:57:77:e2:67:23:d3:20:e5:87:9a:5a:37:3d:df:b1:d4: d9:c4:66:5c:53:82:ef:58:f4:17:4d:11:81:e0:29:b2:67:33: 11:bd:b1:d2:3c:3d:46:11:c7:0c:36:40:6e:4a:4d:0b:b1:f0: fe:8b:39:43:5a:70:c2:22:6e:ef:e4:13:8d:18:90:b8:a3:ac: 47:d0:68:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzIwQTExMC8GA1UEBRMoODYzMkNEMjU2NjlERDg3MjIwMjA0NTE3NDA2RTNGNkIy RjEyOTI1MTAeFw0yNTA1MTUwNjE1NTJaFw0yNTA1MjIwNjE1NTJaMBgxFjAUBgNV BAMTDTY4MjU4Njk4LWU5M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjRsVSMhDtlpQboVjmBRkMo/eli8M5bRv+q//aH+4/NIljz1SaxcCY/wac26aU ufiYNw6e0OtAi7fCF28YO9Clx1QKa3ajRL/ENQHyQ61i3CrXFMO4OaN6xxRkYuIj vw1Lu5JI0zP2e1jfSZ2uNeMZKoKk6MIXx+ub6WbiRxosDFu+z9lGThiBJ0LsnVuV R/dL4PzHopy/OdwHAsFbT5vm7dHIHxl0FKYJQvI/dWQKfWMi3TptDBpsWL0Urfvj BrK6KWuKlIHViyut0099bSfpXPFmaJjiwtyQECIbZz5VPbhAT5yrCCfzeo3FHVAV +tV+K2K2npjTLVTi255WEjABAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs4j3H8ON 9MckdbOFX08OxmqBZOgwHwYDVR0jBBgwFoAUhjLNJWad2HIgIEUXQG4/ay8SklEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjBBLzgwQUFFRDgyOTU3 NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2ts RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGpMTkpXYWQySElnSUVVWFFHNF9heThTa2xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjBBLzgwQUFFRDgyOTU3NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJ Z0lFVVhRRzRfYXk4U2tsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIy3r0EpLKSITUQHX2SRiA1BVdtGXrwjCJh8poyRZx4l/8xpBRVV+vJ3 86VR0YQAj22mYcCsOL0Zh+PwiakzrZKa1dxvSZYr/3hN846v3Aii8CKjxEejfbZ+ iskZx7z0ubSzlEq4NkKL1ybWp5uuzbIZhSWOSsnmDB8dMQBj1h6cjII0f1PdwPhv RQfVqJh1Me06s7ZfUmo6fKB30CQby4BPn3TL6awNI9vOoVgtqhPXwGclx6LUV3fi ZyPTIOWHmlo3Pd+x1NnEZlxTgu9Y9BdNEYHgKbJnMxG9sdI8PUYRxww2QG5KTQux 8P6LOUNacMIibu/kE40YkLijrEfQaJA= -----END CERTIFICATE-----Generated at Fri May 16 18:59:03 2025 by rpki-client