$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: hDrFmx0Qu1yjDW3nEY3Uq503DmFtWUzmzeDtEwemeFw= Subject key identifier: 90:F2:2C:00:09:E9:B3:4A:59:31:A4:68:DF:2E:FC:AF:47:84:57:D3 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:55:47 +0000 Manifest this update: Fri 25 Apr 2025 04:55:46 +0000 Manifest next update: Fri 02 May 2025 04:55:46 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: XEK/ZcMkPzj0tMzBgdXBnWTczpdMhbwq0bCF+1+uKZw=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: FsP9VYFAICAa71awQKv/xp4WMIgY/BZLf1PogGiTuE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Apr 25 04:55:46 2025 GMT Not After : May 2 04:55:46 2025 GMT Subject: CN=680b15d3-89e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:28:8f:d4:82:14:6b:50:84:cf:cb:98:30: 62:e4:3e:77:57:af:64:04:19:09:cb:7b:85:64:cf: 41:b9:97:ef:dd:f6:55:81:e6:d1:15:f7:10:bc:6d: d5:f8:41:88:ac:39:b1:71:07:70:a2:5f:39:fc:43: a4:88:32:5a:cc:89:68:0a:f6:e1:e0:c4:48:79:f5: 3c:bf:f5:1a:bd:84:3b:2e:ba:e6:a9:74:c4:f3:71: c0:0b:50:d1:1b:50:70:4e:38:6d:0d:bb:ce:4e:6c: 36:21:ea:91:e2:c2:11:19:82:9b:9d:1a:65:4b:18: 24:a1:73:fb:31:51:37:c8:56:ed:15:19:84:f6:4f: 0e:2d:a7:4e:42:16:8b:31:a3:ff:aa:ba:28:76:9f: 41:9c:03:36:a0:86:bf:fb:a4:33:5c:48:9b:1e:97: 8e:44:f7:eb:cb:f8:a7:d6:7e:a5:f7:9c:ec:91:2e: fb:21:15:bf:8f:86:7e:65:a3:09:4a:20:c5:f1:9d: 7f:c2:06:5d:cc:4a:17:7a:c8:2b:38:c5:58:a5:94: 7a:19:92:ab:bf:60:57:89:51:15:cc:41:b4:38:6e: f0:58:49:92:8d:1a:fa:02:51:b7:ff:2e:96:9c:49: 8a:17:fd:b5:9f:5a:d3:f8:95:38:3f:20:de:ff:1b: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F2:2C:00:09:E9:B3:4A:59:31:A4:68:DF:2E:FC:AF:47:84:57:D3 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e5:36:34:57:10:01:61:e4:c6:d6:8f:1a:d8:d1:dc:9c:2a: 9a:f3:03:4e:22:11:dd:f7:62:34:c4:49:23:47:e2:8e:7f:0c: ee:e0:7b:19:ca:78:53:0e:06:31:4b:33:08:61:2e:26:b8:1a: ba:34:fe:ca:4f:36:0f:c8:07:91:fe:42:12:1c:fc:a9:3b:4e: 19:08:9e:74:9a:3a:f6:a9:b8:8a:59:2e:ac:30:7b:23:2e:d3: b8:36:6a:a1:e4:ed:42:3d:a3:d6:4e:6c:7e:fb:77:24:d7:0d: be:dd:2e:5c:a5:05:99:37:93:28:42:c6:89:3e:91:87:4d:23: 2b:cc:12:70:80:f8:26:0d:a9:6e:e4:5f:4e:9e:45:4e:a4:2d: e9:61:93:19:53:20:5f:b8:e0:f5:d8:65:e9:13:d0:02:28:19: e7:c1:8c:23:f3:e2:7d:57:b7:93:ec:2b:93:f9:8b:1f:4c:b7: 08:10:99:90:21:57:90:a2:ce:06:d4:25:a2:20:34:83:50:17: 76:c0:b5:07:50:93:ab:b0:16:93:d9:56:85:44:5a:b0:97:ed: d9:47:b2:a7:d8:54:a2:c6:9e:80:10:e7:79:cc:b3:1d:e2:2a: 14:08:98:73:bb:cf:dd:2b:05:9d:ab:aa:8d:a7:da:53:65:61: 22:61:58:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUwNDI1MDQ1NTQ2WhcNMjUwNTAyMDQ1NTQ2WjAYMRYwFAYD VQQDEw02ODBiMTVkMy04OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30soj9SCFGtQhM/LmDBi5D53V69kBBkJy3uFZM9BuZfv3fZVgebRFfcQvG3V +EGIrDmxcQdwol85/EOkiDJazIloCvbh4MRIefU8v/UavYQ7LrrmqXTE83HAC1DR G1BwTjhtDbvOTmw2IeqR4sIRGYKbnRplSxgkoXP7MVE3yFbtFRmE9k8OLadOQhaL MaP/qroodp9BnAM2oIa/+6QzXEibHpeORPfry/in1n6l95zskS77IRW/j4Z+ZaMJ SiDF8Z1/wgZdzEoXesgrOMVYpZR6GZKrv2BXiVEVzEG0OG7wWEmSjRr6AlG3/y6W nEmKF/21n1rT+JU4PyDe/xtUzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDyLAAJ 6bNKWTGkaN8u/K9HhFfTMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY5TY0VxABYeTG1o8a2NHcnCqa8wNOIhHd92I0xEkjR+KOfwzu4HsZ ynhTDgYxSzMIYS4muBq6NP7KTzYPyAeR/kISHPypO04ZCJ50mjr2qbiKWS6sMHsj LtO4Nmqh5O1CPaPWTmx++3ck1w2+3S5cpQWZN5MoQsaJPpGHTSMrzBJwgPgmDalu 5F9OnkVOpC3pYZMZUyBfuOD12GXpE9ACKBnnwYwj8+J9V7eT7CuT+YsfTLcIEJmQ IVeQos4G1CWiIDSDUBd2wLUHUJOrsBaT2VaFRFqwl+3ZR7Kn2FSixp6AEOd5zLMd 4ioUCJhzu8/dKwWdq6qNp9pTZWEiYVg+ -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:55 2025 by rpki-client