$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json) Hash identifier: 9RDgyl7KxcWlIdjnvclFLU8Oc6C1xHh4vgvy2nRe1X4= Subject key identifier: CA:64:58:DD:98:8E:1C:FB:50:A9:59:6F:F9:D7:0A:5A:0F:C4:6A:47 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft Manifest number: 0555 Signing time: Thu 24 Apr 2025 23:11:59 +0000 Manifest this update: Thu 24 Apr 2025 23:11:58 +0000 Manifest next update: Thu 01 May 2025 23:11:58 +0000 Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: vaUDJQAZ711MLxxxluyVjriNG2UMa8bSq1PnsjFdghI=) 2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: uFNNtsVKGrVOfxCqtFLk0MfQv5FVtYeu4lj2O4PA2Ig=) 3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: Dqt0GvAw9X9y8Ef/O7ERED07Rd+HbqI7uD9ujxO75Dg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Apr 24 23:11:58 2025 GMT Not After : May 1 23:11:58 2025 GMT Subject: CN=680ac53e-150f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:8e:51:d6:3e:7b:d0:59:2b:67:b0:80:16: 0a:68:f0:33:8a:30:e0:c9:e1:42:91:7b:38:11:75: b9:9a:ba:a4:e4:77:6b:50:29:b8:b3:10:82:2c:26: 78:1e:38:ec:e6:96:ae:f8:31:c8:7b:47:c4:b3:5d: 24:b4:87:5a:a8:3b:18:f1:d7:df:52:60:a1:b9:f4: 90:3d:5b:3a:33:76:8e:56:4d:8a:86:df:41:a5:27: 9a:55:11:9b:f3:fa:7c:ba:61:55:b6:f3:47:f4:67: 58:cf:00:ec:61:0c:ec:00:b1:38:d4:71:a9:81:81: 45:52:50:a5:84:f5:9a:e9:f9:e2:ec:99:5b:af:6f: 4a:7c:47:6a:32:79:d2:32:85:25:5a:0f:72:ee:cd: 25:c3:1d:05:3c:5c:63:12:23:ce:69:08:93:59:10: 35:d6:5f:9d:40:4d:fa:91:8e:d3:d0:2d:56:8d:5b: 76:d8:c3:54:83:e5:69:d4:24:40:7e:13:b4:72:27: 2b:5a:b5:86:10:c4:4c:6d:84:ef:fe:5f:d1:e8:2e: 7c:0f:72:75:af:96:87:62:11:84:4f:24:f4:36:00: ba:68:be:b9:31:59:fe:94:12:b3:8f:91:4f:de:7d: b9:58:e5:a3:51:9f:27:2a:0c:98:b6:e1:89:91:5d: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:64:58:DD:98:8E:1C:FB:50:A9:59:6F:F9:D7:0A:5A:0F:C4:6A:47 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b1:1f:38:94:a5:b5:b5:1f:24:fe:05:7c:74:50:1f:6e:4d: 79:eb:a1:d7:41:93:50:0a:5a:c7:92:d0:d4:2e:b2:1f:ee:9c: ae:95:e8:86:1b:a6:32:4d:14:e6:92:89:ca:4d:e4:79:8a:81: 74:df:87:14:fb:40:25:ad:1d:62:a0:7b:1b:92:47:da:94:79: de:cd:7f:38:77:f3:27:4c:68:fa:20:80:9a:07:0c:5c:2d:28: 20:ea:6e:1a:f9:87:e3:e5:6f:3b:fb:64:fe:6d:9c:be:d9:84: eb:18:a3:9d:04:ba:2d:6e:bd:2a:17:5d:8d:63:3e:b8:2f:4d: 6c:fc:b0:2d:7b:b5:cd:95:be:45:83:74:32:63:88:8b:d2:70: 50:0b:9c:cb:b8:2d:4b:2d:ad:7a:5f:bc:68:85:db:38:34:41: 1c:67:22:62:4d:09:41:df:0d:22:e7:e1:dd:f4:53:be:a0:56: 18:24:db:55:f1:90:5d:5c:6b:ba:3e:4b:a4:21:b8:40:ea:53: ec:87:b1:35:87:fe:ef:d0:d7:82:b0:0e:87:0a:63:7d:19:eb: cf:17:c8:bf:d0:23:9c:ca:66:97:e7:7c:55:82:5b:85:49:7e: 4f:92:3d:9a:e9:02:6f:82:c5:e9:a0:22:72:db:1e:d8:f0:f2: 98:e3:aa:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjUwNDI0MjMxMTU4WhcNMjUwNTAxMjMxMTU4WjAYMRYwFAYD VQQDEw02ODBhYzUzZS0xNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9yOUdY+e9BZK2ewgBYKaPAzijDgyeFCkXs4EXW5mrqk5HdrUCm4sxCCLCZ4 Hjjs5pau+DHIe0fEs10ktIdaqDsY8dffUmChufSQPVs6M3aOVk2Kht9BpSeaVRGb 8/p8umFVtvNH9GdYzwDsYQzsALE41HGpgYFFUlClhPWa6fni7Jlbr29KfEdqMnnS MoUlWg9y7s0lwx0FPFxjEiPOaQiTWRA11l+dQE36kY7T0C1WjVt22MNUg+Vp1CRA fhO0cicrWrWGEMRMbYTv/l/R6C58D3J1r5aHYhGETyT0NgC6aL65MVn+lBKzj5FP 3n25WOWjUZ8nKgyYtuGJkV0JzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpkWN2Y jhz7UKlZb/nXCloPxGpHMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK NW9sTmhYOXp1M3FRNEpkT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArsR84lKW1tR8k/gV8dFAfbk1566HXQZNQClrHktDULrIf7pyuleiG G6YyTRTmkonKTeR5ioF034cU+0AlrR1ioHsbkkfalHnezX84d/MnTGj6IICaBwxc LSgg6m4a+Yfj5W87+2T+bZy+2YTrGKOdBLotbr0qF12NYz64L01s/LAte7XNlb5F g3QyY4iL0nBQC5zLuC1LLa16X7xohds4NEEcZyJiTQlB3w0i5+Hd9FO+oFYYJNtV 8ZBdXGu6PkukIbhA6lPsh7E1h/7v0NeCsA6HCmN9GevPF8i/0COcymaX53xVgluF SX5Pkj2a6QJvgsXpoCJy2x7Y8PKY46q4 -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:28 2025 by rpki-client