$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft File: HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json) Hash identifier: mL6UeiAsJGZn5pf4c1mcAInzFgDM3O6cJnKZW35X1fQ= Subject key identifier: AE:8B:F4:2A:00:8D:47:DC:37:33:F5:AE:EE:B3:DB:B0:E9:0C:A1:50 Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft Manifest number: 1BE3 Signing time: Thu 24 Apr 2025 16:13:59 +0000 Manifest this update: Thu 24 Apr 2025 16:13:59 +0000 Manifest next update: Thu 01 May 2025 16:13:59 +0000 Files and hashes: 1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: bS6W/d3HVhgpLUW95ILATSa0S9NOQRZYJisv+X+C3/4=) 2: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: 9EcXEyYQS23lcV2U+HKPELhdNtW+6VqWRslfao0UNEU=) 3: 9933B21049D411E7AA790315C4F9AE02.roa (hash: QoTcLfEkEV4sZtEqMQTgGT13hqif8q7yBrWiFwLEqIo=) 4: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: ZGC2ZFJHwlq5Ep2j3cd1PYdlRsmipJnSDGQN5BOUcNk=) 5: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: dgOhhCgJNmqIABfmqn7RZ7HEHVhf8zRLQCOO0zkoj5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7178 (0x1c0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: Apr 24 16:13:59 2025 GMT Not After : May 1 16:13:59 2025 GMT Subject: CN=680a6347-f426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:c1:d7:3b:65:3b:b2:38:37:3b:f7:7d:21: 73:58:27:52:d7:f9:5f:b9:2e:45:08:9e:b5:3e:d8: a6:c8:b9:b4:b8:54:e8:c0:a1:d2:14:f2:46:dd:1e: 3e:27:28:01:f3:71:36:84:f5:ad:56:4a:16:2d:a6: 9b:09:91:04:1d:f8:d9:1e:fc:18:d4:25:58:1e:0d: d6:f5:87:cd:ad:f7:1f:db:29:6a:34:56:06:ab:f3: ed:dc:fe:bf:8d:62:56:92:f1:d6:9c:c4:ea:2d:13: 17:08:75:e1:7c:7f:d5:18:84:54:d5:cb:16:38:04: 38:50:bc:6e:ed:0c:ce:a4:fd:0f:15:33:70:f8:f2: 9f:1b:be:cb:d4:88:8c:cf:2f:68:88:65:a1:0b:a6: 71:b1:16:b5:ad:ae:da:0b:91:25:b7:a2:d2:bd:1f: 98:24:9e:71:0d:13:53:7d:4d:a0:55:17:c1:55:c4: 39:6b:91:0a:d4:b8:0e:b9:ea:b2:97:77:0a:39:0c: e3:06:c6:01:b4:ad:26:02:17:1b:d9:9d:77:51:6d: 88:5c:7c:bb:fb:af:2d:fa:96:36:7a:ab:a6:52:15: 82:7f:58:86:44:1e:14:74:61:78:9e:63:15:26:66: 2d:aa:25:62:e2:b6:86:fa:fe:f0:64:63:ca:9e:eb: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:F4:2A:00:8D:47:DC:37:33:F5:AE:EE:B3:DB:B0:E9:0C:A1:50 X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fc:b8:66:df:d0:98:c2:4c:22:c2:43:15:d8:af:a1:56:b2: ff:2b:b8:6b:c3:54:72:bf:a4:99:3f:83:88:65:e2:8b:4c:48: c6:b0:2d:3b:ef:d2:d0:e9:7c:36:9f:08:02:1b:6c:1b:23:4c: 9d:61:bf:ec:21:bd:c2:8e:a0:86:94:b3:79:98:8c:bf:f0:56: c4:fc:5a:76:45:64:06:55:26:4e:16:00:5e:ec:70:79:b6:10: cd:58:05:f2:ed:84:f3:63:2f:c6:40:20:2e:39:32:08:97:c9: 4b:b1:14:79:a6:72:b6:d6:a2:07:f1:a0:3d:d7:b6:34:cd:80: 5a:82:6f:a3:00:c7:61:eb:b2:a7:08:9b:47:ad:fb:71:82:7d: f9:47:a1:40:0e:4a:cc:51:93:de:fa:2f:b3:16:06:d6:ab:5c: 41:bc:38:c5:1f:cb:c6:d5:2c:9c:b0:53:76:65:65:19:2e:33: 03:a3:56:73:a4:5d:66:da:a9:e5:17:97:0b:d8:34:b6:0f:a0: 6e:cf:c5:17:b5:76:d7:85:ba:44:70:f1:2c:20:90:c4:bb:e0: e0:47:14:cb:32:54:97:28:63:06:00:10:8b:a1:e1:ff:36:94: 40:c4:c6:2a:e9:ab:79:9c:c7:e1:53:d3:df:90:89:87:14:af: 0d:b4:4a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjUwNDI0MTYxMzU5WhcNMjUwNTAxMTYxMzU5WjAYMRYwFAYD VQQDEw02ODBhNjM0Ny1mNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjPB1ztlO7I4Nzv3fSFzWCdS1/lfuS5FCJ61PtimyLm0uFTowKHSFPJG3R4+ JygB83E2hPWtVkoWLaabCZEEHfjZHvwY1CVYHg3W9YfNrfcf2ylqNFYGq/Pt3P6/ jWJWkvHWnMTqLRMXCHXhfH/VGIRU1csWOAQ4ULxu7QzOpP0PFTNw+PKfG77L1IiM zy9oiGWhC6ZxsRa1ra7aC5Elt6LSvR+YJJ5xDRNTfU2gVRfBVcQ5a5EK1LgOueqy l3cKOQzjBsYBtK0mAhcb2Z13UW2IXHy7+68t+pY2equmUhWCf1iGRB4UdGF4nmMV JmYtqiVi4raG+v7wZGPKnuv95QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6L9CoA jUfcNzP1ru6z27DpDKFQMB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FFOS8wOERBNjBDNkYxQjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlH Yi1scUtYOTNMdWdMVVlwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi/Lhm39CYwkwiwkMV2K+hVrL/K7hrw1Ryv6SZP4OIZeKLTEjGsC07 79LQ6Xw2nwgCG2wbI0ydYb/sIb3CjqCGlLN5mIy/8FbE/Fp2RWQGVSZOFgBe7HB5 thDNWAXy7YTzYy/GQCAuOTIIl8lLsRR5pnK21qIH8aA917Y0zYBagm+jAMdh67Kn CJtHrftxgn35R6FADkrMUZPe+i+zFgbWq1xBvDjFH8vG1SycsFN2ZWUZLjMDo1Zz pF1m2qnlF5cL2DS2D6Buz8UXtXbXhbpEcPEsIJDEu+DgRxTLMlSXKGMGABCLoeH/ NpRAxMYq6at5nMfhU9PfkImHFK8NtEoQ -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:01 2025 by rpki-client