$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: dG4O7hSSQs2i52zFwbcm014rJExDcFlL717nMuL8Gg0= Subject key identifier: B8:7E:8D:A6:68:B9:64:32:2C:0E:5D:98:CE:CB:A2:B3:0D:1F:D4:87 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A0C Signing time: Fri 02 May 2025 16:31:45 +0000 Manifest this update: Fri 02 May 2025 16:31:45 +0000 Manifest next update: Fri 09 May 2025 16:31:45 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: hya/ZpJvq7DT5T6JYsnADjj+iuv+8JnAuWXvfolmZ9w=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: YOnwHdL+VM4WZZwYTJ66mt2t+UeBiT+rfThROtawpHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6676 (0x1a14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: May 2 16:31:45 2025 GMT Not After : May 9 16:31:45 2025 GMT Subject: CN=6814f371-e2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:2f:5e:d5:66:bd:d6:26:bc:f5:da:b6:c0: be:80:3f:58:14:99:b8:ce:32:9c:c3:75:fb:05:db: 2d:59:ff:eb:75:f7:ac:bc:c9:b2:d5:42:40:bd:78: ca:d1:f7:3f:57:38:d3:53:aa:32:bc:f8:09:57:36: 74:b5:07:b1:34:3a:ad:a1:79:5b:07:a4:e1:9d:83: 9c:57:3f:45:f5:4b:85:f1:89:e5:d1:83:06:be:03: 6d:e2:44:aa:86:8c:83:53:20:90:5c:ce:5f:4a:96: a9:5f:3b:ea:e2:f7:ba:74:83:6a:81:bd:01:6f:a7: b1:b0:cc:b1:11:87:e2:a7:ae:2a:ff:72:77:8a:cb: 65:70:b1:49:2c:30:2e:06:c7:c5:3e:19:d9:98:13: ea:29:04:fa:db:a6:83:29:a7:40:7a:74:1a:e3:80: 12:a4:c8:07:37:61:26:e8:1b:d6:31:02:6d:3b:1b: 29:b6:d4:6c:9a:d2:f3:f4:96:1c:a7:f9:40:db:86: e0:e8:06:7b:fd:ab:fc:ea:de:21:88:a2:c0:11:f8: 96:c3:96:4f:bc:e1:a7:bb:d4:cc:d0:aa:1a:dc:0a: e9:a8:4d:11:95:58:47:54:cc:65:7c:5d:e3:7b:06: 8e:0d:b5:4f:4a:52:a8:ef:3e:92:17:dd:2f:82:84: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7E:8D:A6:68:B9:64:32:2C:0E:5D:98:CE:CB:A2:B3:0D:1F:D4:87 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:65:9d:77:5d:b4:93:9c:b0:e1:c5:d2:7f:15:79:77:06:a2: 92:df:f6:3b:30:54:4a:07:68:d8:30:24:6a:80:dd:5f:67:89: 34:5a:60:fb:fa:1e:7a:13:ca:dc:b0:93:c8:2a:45:9e:45:e0: 0e:e9:d0:18:f5:98:69:e1:6f:db:6f:23:73:4f:e9:31:3d:bc: 2a:e1:e5:01:6c:58:2e:9d:72:9e:83:d6:6b:74:4b:c6:ae:3c: a8:ef:4c:32:8e:9b:6b:41:a0:28:48:02:6d:1b:52:c9:33:89: 48:ce:07:51:1f:3c:7e:5e:05:8a:bd:72:0a:a8:e2:c8:20:96: 4a:8f:7d:bc:f5:b7:fd:3e:88:3d:a2:df:fa:b8:ee:05:7c:b8: b7:75:99:17:d1:f0:f9:75:5c:37:03:26:34:20:a5:d9:80:0d: 42:33:b8:86:e6:e3:85:c2:a5:65:0a:4d:54:14:97:86:38:d5: fb:60:f7:68:47:db:7d:45:db:a4:6f:12:e8:13:ad:a8:bd:32: fb:c1:c9:a4:02:09:56:34:14:38:ab:0d:46:49:b6:26:34:36: 0b:7f:3d:d4:af:4e:0a:a4:1f:00:66:ac:df:f3:c6:4e:e6:a8: c3:e6:18:54:cd:89:1d:2d:34:2b:4b:ca:62:57:f1:ce:4e:22: 47:a3:48:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwNTAyMTYzMTQ1WhcNMjUwNTA5MTYzMTQ1WjAYMRYwFAYD VQQDEw02ODE0ZjM3MS1lMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRQvXtVmvdYmvPXatsC+gD9YFJm4zjKcw3X7BdstWf/rdfesvMmy1UJAvXjK 0fc/VzjTU6oyvPgJVzZ0tQexNDqtoXlbB6ThnYOcVz9F9UuF8Ynl0YMGvgNt4kSq hoyDUyCQXM5fSpapXzvq4ve6dINqgb0Bb6exsMyxEYfip64q/3J3istlcLFJLDAu BsfFPhnZmBPqKQT626aDKadAenQa44ASpMgHN2Em6BvWMQJtOxspttRsmtLz9JYc p/lA24bg6AZ7/av86t4hiKLAEfiWw5ZPvOGnu9TM0Koa3ArpqE0RlVhHVMxlfF3j ewaODbVPSlKo7z6SF90vgoRkXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh+jaZo uWQyLA5dmM7LorMNH9SHMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJZZ13XbSTnLDhxdJ/FXl3BqKS3/Y7MFRKB2jYMCRqgN1fZ4k0WmD7 +h56E8rcsJPIKkWeReAO6dAY9Zhp4W/bbyNzT+kxPbwq4eUBbFgunXKeg9ZrdEvG rjyo70wyjptrQaAoSAJtG1LJM4lIzgdRHzx+XgWKvXIKqOLIIJZKj3289bf9Pog9 ot/6uO4FfLi3dZkX0fD5dVw3AyY0IKXZgA1CM7iG5uOFwqVlCk1UFJeGONX7YPdo R9t9RdukbxLoE62ovTL7wcmkAglWNBQ4qw1GSbYmNDYLfz3Ur04KpB8AZqzf88ZO 5qjD5hhUzYkdLTQrS8piV/HOTiJHo0i9 -----END CERTIFICATE-----Generated at Sun May 4 04:11:06 2025 by rpki-client