$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json) Hash identifier: xqd7hDCz8O7rMLzDypEpg9b4V9SgKqsDnI3vD7/o5Gg= Subject key identifier: EC:78:BC:29:7A:9B:2C:61:31:FE:1A:9A:36:AD:FE:F8:58:63:E1:55 Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft Manifest number: 81 Signing time: Fri 25 Apr 2025 05:37:41 +0000 Manifest this update: Fri 25 Apr 2025 05:37:40 +0000 Manifest next update: Fri 02 May 2025 05:37:40 +0000 Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: /N6K8+vC7KL2KqR4jESKZ3v3LRYYq2hNYJsAs3HD02s=) 2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: yDqC4T9k/RQEkfG5fQ7+DRcSfQmuJV8SSd24ypWwq18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Validity Not Before: Apr 25 05:37:40 2025 GMT Not After : May 2 05:37:40 2025 GMT Subject: CN=680b1fa5-e7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:b7:d9:b8:7c:b5:7f:36:05:ac:56:00:8b: 7f:d0:4c:56:30:3c:b9:65:b5:f4:87:ac:65:72:df: 3e:23:19:00:cb:24:5b:bc:70:5d:2c:41:25:50:80: c3:16:bb:77:9b:ed:8f:73:38:a7:11:cf:54:b7:f5: 0d:00:ec:db:ca:10:84:de:8c:5b:d0:78:15:91:38: a8:b4:84:29:ec:90:35:21:d1:a7:0e:b5:08:ea:fe: 6e:5f:5b:d6:67:50:76:0f:b4:76:f2:91:21:3a:ea: a9:b4:e1:c0:04:26:5c:30:87:86:0e:19:f1:79:8d: af:f3:8d:5d:ae:05:53:14:a0:6b:c9:d9:20:d0:17: 7b:fb:4c:4d:50:9e:0b:53:5d:31:94:46:74:3c:6d: 59:c4:9a:01:76:9c:c4:d5:7d:30:25:5b:7f:ec:c6: 71:c2:9a:45:66:d5:24:54:24:b2:21:e7:5a:67:39: bc:3e:7c:c5:44:d8:28:bb:9e:95:68:97:f3:93:ac: 06:e7:06:fb:16:4d:0d:0b:dd:25:07:a5:77:1d:83: d2:4e:ef:4f:74:d0:94:20:fa:b9:11:7b:4d:9e:56: 41:7b:47:ad:b8:c4:32:95:4b:52:ad:32:a0:96:a8: bf:b7:cf:c8:af:f8:5f:1e:7c:08:71:b9:06:c8:81: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:BC:29:7A:9B:2C:61:31:FE:1A:9A:36:AD:FE:F8:58:63:E1:55 X509v3 Authority Key Identifier: keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:8a:ba:c0:1b:04:04:6f:84:53:f2:13:b3:b9:93:2d:b3:f3: 2e:b7:fe:f3:2c:32:7c:e8:81:3b:80:64:0e:d3:f0:5b:0d:e9: 91:86:ac:67:e2:57:77:af:90:ef:cb:39:8b:4f:f2:87:a8:21: bf:cd:e1:d8:fa:e6:56:93:0c:5c:a5:f3:5d:2b:3b:05:f2:69: 85:a2:c0:d2:23:21:1d:f9:65:6a:d7:6e:4e:b6:11:e5:55:84: 79:f3:ee:7b:e0:a7:df:b1:c9:58:3a:db:21:42:da:a7:d8:5f: d5:70:b2:f3:11:89:6b:3a:ed:dc:26:72:26:47:a9:a6:88:ea: 7c:62:9b:8d:68:d9:52:b3:f0:a9:e9:c4:d5:8e:9d:d4:bf:31: 71:1d:98:9f:c3:0c:e8:da:9e:26:ec:41:fe:a5:13:25:0e:d0: 59:07:28:07:18:8a:d4:71:be:2f:d8:42:35:c5:24:42:1b:67: 28:7b:04:e7:7e:7d:c4:0c:3d:05:9d:d0:01:1a:4f:7b:15:e1: 8f:ff:2e:11:a9:ba:61:56:30:c6:6a:64:24:a6:89:fc:ae:fa: 87:d1:fe:63:43:58:90:96:e1:d3:85:b2:47:85:44:64:c4:38: 66:04:50:3b:e0:f5:8b:a6:8d:33:ef:5d:ad:d4:be:66:0a:d4: 73:6d:d0:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBQzYxMTAvBgNVBAUTKEZDNzkyRjFENjJGMjk1REY0NDFGQTIxRThGM0JDRjI3 Q0E2MTA2MzAwHhcNMjUwNDI1MDUzNzQwWhcNMjUwNTAyMDUzNzQwWjAYMRYwFAYD VQQDEw02ODBiMWZhNS1lN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo+32bh8tX82BaxWAIt/0ExWMDy5ZbX0h6xlct8+IxkAyyRbvHBdLEElUIDD Frt3m+2PczinEc9Ut/UNAOzbyhCE3oxb0HgVkTiotIQp7JA1IdGnDrUI6v5uX1vW Z1B2D7R28pEhOuqptOHABCZcMIeGDhnxeY2v841drgVTFKBrydkg0Bd7+0xNUJ4L U10xlEZ0PG1ZxJoBdpzE1X0wJVt/7MZxwppFZtUkVCSyIedaZzm8PnzFRNgou56V aJfzk6wG5wb7Fk0NC90lB6V3HYPSTu9PdNCUIPq5EXtNnlZBe0etuMQylUtSrTKg lqi/t8/Ir/hfHnwIcbkGyIGAnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOx4vCl6 myxhMf4amjat/vhYY+FVMB8GA1UdIwQYMBaAFPx5Lx1i8pXfRB+iHo87zyfKYQYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREFDNi81OUVCRTJBRTVF QzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxkOUVINkllanp2UEo4cGhC akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxk OUVINkllanp2UEo4cGhCakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAirrAGwQEb4RT8hOzuZMts/Mut/7zLDJ86IE7gGQO0/BbDemRhqxn 4ld3r5DvyzmLT/KHqCG/zeHY+uZWkwxcpfNdKzsF8mmFosDSIyEd+WVq125OthHl VYR58+574KffsclYOtshQtqn2F/VcLLzEYlrOu3cJnImR6mmiOp8YpuNaNlSs/Cp 6cTVjp3UvzFxHZifwwzo2p4m7EH+pRMlDtBZBygHGIrUcb4v2EI1xSRCG2coewTn fn3EDD0FndABGk97FeGP/y4RqbphVjDGamQkpon8rvqH0f5jQ1iQluHThbJHhURk xDhmBFA74PWLpo0z712t1L5mCtRzbdCO -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:36 2025 by rpki-client