$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: gg2F2DHxmyiVumkbF6Nfd38f3qHG6SKp43O9ye+fR44= Subject key identifier: 62:D5:9E:2E:1E:57:77:56:CD:1A:0A:C2:EE:9D:01:F4:15:63:F5:A8 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: B0 Signing time: Wed 07 May 2025 05:08:16 +0000 Manifest this update: Wed 07 May 2025 05:08:16 +0000 Manifest next update: Wed 14 May 2025 05:08:15 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: d27e1iF9AB3byK41eTqzM0ojgOFExYhAtCHFwIILnkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: May 7 05:08:16 2025 GMT Not After : May 14 05:08:15 2025 GMT Subject: CN=681aeac0-5bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:00:b9:55:07:b7:13:d9:47:73:45:59:b3: 58:03:62:28:55:1b:19:cc:0a:fe:56:b2:55:f2:60: bd:ba:56:de:ad:35:b6:40:ec:b0:67:41:bd:b7:1a: 39:e4:04:e5:32:fa:1d:27:96:e1:06:d0:d3:8e:87: 56:f1:b5:cc:c8:78:4c:d9:fb:b9:b3:b3:f0:e3:55: 41:f1:df:d6:e9:cd:33:e2:b5:ea:bb:ee:d1:82:bb: 36:c6:4f:f7:44:03:92:41:a7:5d:92:10:7b:46:6f: c4:9d:29:61:0d:a1:56:86:b0:87:7f:aa:a7:65:f4: ca:ef:46:b9:99:8d:ae:6f:02:24:26:32:d2:cc:3c: 28:39:57:2c:18:a8:a2:74:4c:93:71:29:42:a8:bf: ec:a5:34:04:6e:68:8a:36:dd:cf:58:18:9a:bd:a5: 46:fa:50:ef:9c:f5:8c:46:b3:b8:7f:3a:11:e4:a7: 78:50:89:3d:7c:18:77:be:79:23:e9:63:75:63:eb: d4:53:07:e1:b6:59:b0:94:95:ba:2f:b3:dc:f5:26: f4:ae:ee:9b:c4:19:b6:f8:e5:81:1e:22:9c:b0:4f: 5f:0e:67:5b:28:34:fa:44:39:4c:1e:17:43:de:28: ad:99:c3:a0:be:81:74:e1:a6:6b:7c:b2:ab:2f:3b: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D5:9E:2E:1E:57:77:56:CD:1A:0A:C2:EE:9D:01:F4:15:63:F5:A8 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:f5:c9:9b:77:01:37:47:00:dc:90:72:f1:d6:cb:88:7e: 3c:84:aa:6e:50:e4:fe:75:11:82:80:43:66:66:28:03:1a:c1: 1e:54:47:66:38:e1:20:b8:fe:b0:48:cd:e3:29:39:6d:d9:75: 1f:51:4d:58:4e:bf:54:dd:18:ca:17:16:2b:47:90:12:d6:e9: f7:5e:64:ae:cb:11:73:62:c0:b0:07:4c:15:8b:10:f5:de:87: ac:4f:c4:eb:e8:dd:c2:58:a9:ae:6d:18:f9:f4:c8:24:10:ec: 0c:c9:b2:8e:88:d2:4b:b5:29:43:12:91:96:e5:3e:e0:44:fb: 3d:0d:ad:6d:ce:a2:46:06:f6:32:89:1e:3f:04:1f:9b:38:ad: ea:bd:16:56:72:31:88:f2:3b:90:8d:c6:1f:4d:49:b3:3f:a4: 6a:a3:cd:dd:69:85:90:ec:e5:33:d8:5d:d9:8e:1e:ba:d4:54: 42:d5:1f:fa:52:68:a3:01:52:9c:05:64:6a:69:e7:55:f4:18: 88:e7:c4:7c:6c:2a:46:3e:89:5b:67:a9:ab:83:13:3a:4c:b6: 1b:8d:a3:5f:8f:54:9f:2b:8b:4f:c5:3b:87:e4:32:8f:77:5c: ea:1f:ec:b3:c4:a4:1b:bd:1a:76:41:db:4f:57:6f:71:bd:f3: fd:b0:43:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUwNTA3MDUwODE2WhcNMjUwNTE0MDUwODE1WjAYMRYwFAYD VQQDEw02ODFhZWFjMC01YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHYAuVUHtxPZR3NFWbNYA2IoVRsZzAr+VrJV8mC9ulberTW2QOywZ0G9txo5 5ATlMvodJ5bhBtDTjodW8bXMyHhM2fu5s7Pw41VB8d/W6c0z4rXqu+7Rgrs2xk/3 RAOSQaddkhB7Rm/EnSlhDaFWhrCHf6qnZfTK70a5mY2ubwIkJjLSzDwoOVcsGKii dEyTcSlCqL/spTQEbmiKNt3PWBiavaVG+lDvnPWMRrO4fzoR5Kd4UIk9fBh3vnkj 6WN1Y+vUUwfhtlmwlJW6L7Pc9Sb0ru6bxBm2+OWBHiKcsE9fDmdbKDT6RDlMHhdD 3iitmcOgvoF04aZrfLKrLzvmdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLVni4e V3dWzRoKwu6dAfQVY/WoMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJcvXJm3cBN0cA3JBy8dbLiH48hKpuUOT+dRGCgENmZigDGsEeVEdm OOEguP6wSM3jKTlt2XUfUU1YTr9U3RjKFxYrR5AS1un3XmSuyxFzYsCwB0wVixD1 3oesT8Tr6N3CWKmubRj59MgkEOwMybKOiNJLtSlDEpGW5T7gRPs9Da1tzqJGBvYy iR4/BB+bOK3qvRZWcjGI8juQjcYfTUmzP6Rqo83daYWQ7OUz2F3Zjh661FRC1R/6 UmijAVKcBWRqaedV9BiI58R8bCpGPolbZ6mrgxM6TLYbjaNfj1SfK4tPxTuH5DKP d1zqH+yzxKQbvRp2QdtPV29xvfP9sEOG -----END CERTIFICATE-----Generated at Fri May 9 00:32:32 2025 by rpki-client