$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: g6LDuzHk2ZB9pdRxiGdmyihAFiYHnTmmueGnp0AHF6E= Subject key identifier: 26:E9:2F:52:1B:55:7F:00:D7:09:B9:71:69:CB:D7:90:06:D1:39:01 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 0114 Signing time: Fri 25 Apr 2025 03:56:56 +0000 Manifest this update: Fri 25 Apr 2025 03:56:56 +0000 Manifest next update: Fri 02 May 2025 03:56:56 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: cHHrnpoWPtev3/AG7+fqrRVSUc0hFtUnVsyWbHE5V3o=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: UKOODE+aPAFflvFmKVNYOJaCaH8V6bUeZIgoCqj/k80=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: IP+1b1MWNwsXEa5/Ri8CW/cM8GMHLYMixTxcrnkax+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Apr 25 03:56:56 2025 GMT Not After : May 2 03:56:56 2025 GMT Subject: CN=680b0808-800d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:1d:60:40:b3:64:e9:75:fa:57:d6:3f:c3: 71:6a:e8:3a:33:c2:fa:2f:44:6d:8f:1b:59:4d:63: 9f:2a:38:b9:29:be:66:6d:3e:ef:b4:d7:2d:3c:45: c4:f1:e5:ea:01:79:7b:b4:aa:22:dc:0d:d5:a7:2a: a9:89:9e:65:89:84:ed:e7:29:e9:d1:af:69:49:13: 85:37:7f:5c:40:df:84:10:4e:52:de:c4:bf:48:ba: 6b:b8:0d:54:6b:8e:91:a0:d4:5a:0d:c3:5a:99:60: a1:f8:db:5d:de:5e:99:94:39:07:d1:51:5d:31:32: 19:38:95:3b:da:75:66:6b:95:84:32:9e:3c:69:e2: c7:59:8b:4f:ce:50:7e:47:51:7d:cb:e9:01:a1:79: b9:8b:50:b4:a5:04:8b:2d:06:36:bd:af:03:8a:24: 08:31:0f:ed:0b:f4:77:a0:d1:ea:22:86:d0:a3:e0: 2e:9a:02:52:23:52:34:43:eb:d9:ff:b7:ea:62:c9: 93:f9:b1:d6:47:f2:ea:07:78:0e:92:5d:be:c2:97: 26:9e:56:f4:73:27:e3:25:59:3b:de:dc:4a:2c:36: 29:55:e0:38:5a:88:9c:bc:63:6c:ef:fa:2a:4f:d7: b9:b7:61:9f:3d:19:d8:6d:ee:68:a2:d5:48:fb:4d: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E9:2F:52:1B:55:7F:00:D7:09:B9:71:69:CB:D7:90:06:D1:39:01 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4e:25:1a:bc:7b:d7:06:f2:26:c8:b9:52:1a:6c:a5:e5:80: fc:86:8a:e4:67:52:83:a1:76:4f:ea:f0:43:6c:af:4a:e4:30: 73:28:2a:bb:47:9d:eb:0d:37:2c:34:d9:85:83:2c:c3:8f:ff: b0:92:84:c7:b0:e9:68:5e:28:5e:47:b6:7a:a0:71:00:da:6e: dd:c8:ec:51:69:2a:3d:bb:6f:ca:e0:d1:f1:7b:6e:13:e1:aa: 15:f4:1a:ea:de:37:4f:84:3b:76:81:5e:03:84:08:66:63:18: 2a:65:04:50:e1:46:cd:75:e8:0c:16:6d:d2:72:50:0d:56:43: aa:b6:15:2b:5a:1e:10:32:d5:ae:fa:64:c1:38:5f:b7:e9:df: 0c:85:f0:18:35:64:d6:4a:a9:86:4e:4c:7f:06:d4:c6:37:59: 4c:5f:0e:9f:7a:77:93:f2:d4:2b:25:65:3f:0b:12:5a:ff:66: 7e:bc:ac:cd:8f:25:87:20:aa:ea:fc:95:73:77:ab:cb:5a:18: e9:2e:83:e3:0c:1f:16:34:5d:7c:bc:63:67:f6:95:e2:10:48: 30:7d:78:e4:a1:14:17:ed:32:2a:9b:e9:4b:d4:5c:22:d9:6a: 4f:89:d0:25:ab:24:e1:2e:bb:34:7d:ed:22:5f:c8:b7:8e:93: 27:47:62:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjUwNDI1MDM1NjU2WhcNMjUwNTAyMDM1NjU2WjAYMRYwFAYD VQQDEw02ODBiMDgwOC04MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2asdYECzZOl1+lfWP8Nxaug6M8L6L0RtjxtZTWOfKji5Kb5mbT7vtNctPEXE 8eXqAXl7tKoi3A3VpyqpiZ5liYTt5ynp0a9pSROFN39cQN+EEE5S3sS/SLpruA1U a46RoNRaDcNamWCh+Ntd3l6ZlDkH0VFdMTIZOJU72nVma5WEMp48aeLHWYtPzlB+ R1F9y+kBoXm5i1C0pQSLLQY2va8DiiQIMQ/tC/R3oNHqIobQo+AumgJSI1I0Q+vZ /7fqYsmT+bHWR/LqB3gOkl2+wpcmnlb0cyfjJVk73txKLDYpVeA4WoicvGNs7/oq T9e5t2GfPRnYbe5ootVI+02QHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbpL1Ib VX8A1wm5cWnL15AG0TkBMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeTiUavHvXBvImyLlSGmyl5YD8horkZ1KDoXZP6vBDbK9K5DBzKCq7 R53rDTcsNNmFgyzDj/+wkoTHsOloXiheR7Z6oHEA2m7dyOxRaSo9u2/K4NHxe24T 4aoV9Brq3jdPhDt2gV4DhAhmYxgqZQRQ4UbNdegMFm3SclANVkOqthUrWh4QMtWu +mTBOF+36d8MhfAYNWTWSqmGTkx/BtTGN1lMXw6feneT8tQrJWU/CxJa/2Z+vKzN jyWHIKrq/JVzd6vLWhjpLoPjDB8WNF18vGNn9pXiEEgwfXjkoRQX7TIqm+lL1Fwi 2WpPidAlqyThLrs0fe0iX8i3jpMnR2LX -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:30 2025 by rpki-client