$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: uKDWB41FFOWZ1ig7W3wR0moXTginzEsK/JQrci2395A= Subject key identifier: EB:3D:26:40:1E:98:A6:29:1A:1B:D9:A7:BB:62:4B:5F:C7:7D:67:F0 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 05E7 Signing time: Thu 24 Apr 2025 22:44:56 +0000 Manifest this update: Thu 24 Apr 2025 22:44:56 +0000 Manifest next update: Thu 01 May 2025 22:44:56 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: a976oQftq0eIpkiSlMcjVF34+GaYhA3PgXUyyIbJRus=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: pMCjO+dEpym8WZT6FFXX0BN+eJ9YjqXuqC09C9kAxVs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: 3RUylNRBzlhM6wNTSM7RbhRXATKVFjngYSNzKv1ez60=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: BlXgUYLAQgGHTY4XpWyfRou2YPtS9beWJgAM39FVJwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Apr 24 22:44:56 2025 GMT Not After : May 1 22:44:56 2025 GMT Subject: CN=680abee8-25c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:3e:37:ad:ee:33:9b:d2:92:73:50:ee:5c: 9e:ab:83:96:23:9c:72:13:71:20:b2:b7:85:c0:c8: 78:9a:7b:7f:e2:9f:73:82:55:a6:a7:00:51:06:1e: 24:1c:a3:c5:ca:16:9d:c6:58:34:c6:a7:9b:6c:d3: 76:4d:ee:3d:34:34:28:3c:14:3d:08:6d:73:cf:30: 6f:63:29:5d:17:1c:fa:ad:2a:05:51:ac:60:ca:a6: 32:f5:76:d2:c8:6c:16:aa:c4:6b:0f:5a:93:66:26: 89:b3:e2:14:d4:09:3c:bd:7d:be:52:99:04:60:2f: 92:d3:7a:b9:da:9e:b5:1d:37:22:d6:43:38:ad:ce: 7e:25:b0:43:a9:53:de:b1:b5:50:8b:52:30:0d:2a: 0c:f4:cb:c8:dc:42:b4:a1:94:cf:64:d8:8e:7e:bc: a9:0e:5b:83:78:c7:eb:c2:f3:4c:7a:70:69:f7:ab: e5:08:00:db:e7:bc:c1:d1:84:64:ef:9e:bc:33:e0: d1:e9:ba:41:09:7c:e3:48:fd:b8:04:80:52:32:c6: 70:45:fc:b6:03:19:4d:30:9d:c3:e2:13:61:c1:85: 1b:7c:a6:21:16:f4:c6:63:85:a1:8d:9f:36:18:b1: 5a:e4:c2:d5:1f:f6:a6:0f:e2:ad:da:99:06:cb:0f: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3D:26:40:1E:98:A6:29:1A:1B:D9:A7:BB:62:4B:5F:C7:7D:67:F0 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:71:84:13:1e:71:74:d6:45:c2:a0:e6:3e:de:69:e6:5e:5e: 3d:a0:05:64:af:a0:25:d1:a8:19:93:3b:43:1c:8c:9e:9b:16: f8:93:76:9c:c3:81:01:fc:a4:c7:99:ee:b7:8d:8c:d2:a7:d5: ff:0d:6e:34:e5:ea:19:2c:ec:bb:f1:67:c2:b9:ae:fb:b3:f8: 35:1e:18:9f:7c:6a:4c:4d:94:8e:aa:a4:ef:72:94:1e:f1:1e: af:43:e3:7b:f3:6f:df:ba:44:00:3e:59:01:70:3e:30:46:db: cd:89:93:f3:3d:1e:b6:be:a0:86:c8:b4:3a:e5:a3:c9:c7:1b: 03:7c:c7:80:8d:02:c4:bb:d6:cc:2c:92:3c:77:63:ba:44:fb: c9:b1:6f:ec:b5:cb:96:35:5e:1b:08:33:fe:df:f2:88:fe:7f: 82:d8:ad:36:7e:10:c5:66:40:d3:0c:92:d0:69:4b:81:f8:e3: 85:8d:ef:12:94:a8:59:05:d7:8d:3c:31:59:9b:9b:7d:8d:f9: c1:ee:21:79:77:c6:ed:d3:62:36:2a:a5:dd:4b:86:a4:1c:a9: da:3f:4a:f6:a0:d5:c4:2d:36:3d:b5:f4:7c:9b:0a:e0:9e:82: e9:67:29:6a:53:68:28:12:72:50:3d:c8:9d:9a:85:ce:bc:71: 68:92:bf:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUwNDI0MjI0NDU2WhcNMjUwNTAxMjI0NDU2WjAYMRYwFAYD VQQDEw02ODBhYmVlOC0yNWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9w+N63uM5vSknNQ7lyeq4OWI5xyE3EgsreFwMh4mnt/4p9zglWmpwBRBh4k HKPFyhadxlg0xqebbNN2Te49NDQoPBQ9CG1zzzBvYyldFxz6rSoFUaxgyqYy9XbS yGwWqsRrD1qTZiaJs+IU1Ak8vX2+UpkEYC+S03q52p61HTci1kM4rc5+JbBDqVPe sbVQi1IwDSoM9MvI3EK0oZTPZNiOfrypDluDeMfrwvNMenBp96vlCADb57zB0YRk 7568M+DR6bpBCXzjSP24BIBSMsZwRfy2AxlNMJ3D4hNhwYUbfKYhFvTGY4WhjZ82 GLFa5MLVH/amD+Kt2pkGyw+uJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs9JkAe mKYpGhvZp7tiS1/HfWfwMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBcYQTHnF01kXCoOY+3mnmXl49oAVkr6Al0agZkztDHIyemxb4k3ac w4EB/KTHme63jYzSp9X/DW405eoZLOy78WfCua77s/g1HhiffGpMTZSOqqTvcpQe 8R6vQ+N782/fukQAPlkBcD4wRtvNiZPzPR62vqCGyLQ65aPJxxsDfMeAjQLEu9bM LJI8d2O6RPvJsW/stcuWNV4bCDP+3/KI/n+C2K02fhDFZkDTDJLQaUuB+OOFje8S lKhZBdeNPDFZm5t9jfnB7iF5d8bt02I2KqXdS4akHKnaP0r2oNXELTY9tfR8mwrg noLpZylqU2goEnJQPcidmoXOvHFokr/2 -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:17 2025 by rpki-client