$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: dxt3q0d9LPQzC0RkTSBc+Ab9Hc1jm/Sspf1923SDDsU= Subject key identifier: 8B:2C:72:06:29:A2:DF:1B:A3:D0:CC:D1:57:F8:B9:AC:A3:06:E7:A1 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 193B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 1925 Signing time: Thu 24 Apr 2025 16:44:35 +0000 Manifest this update: Thu 24 Apr 2025 16:44:35 +0000 Manifest next update: Thu 01 May 2025 16:44:35 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: bp93QfT+d5wYj4FznSLda5XTPlknVKM6sxZndOYmj7I=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6459 (0x193b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Apr 24 16:44:35 2025 GMT Not After : May 1 16:44:35 2025 GMT Subject: CN=680a6a73-6921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:7d:c7:31:b6:e3:a2:7d:00:ba:96:16:c1: e8:7b:9e:0d:54:46:62:ea:fc:1b:7e:ef:37:6f:50: 17:7d:4d:41:f0:59:9d:da:18:bd:8e:5d:c3:49:e9: 07:3c:2f:1f:93:d2:de:5f:ab:5e:61:77:ad:6b:e6: b9:57:15:34:4f:37:ff:4d:aa:ce:39:88:a1:10:cf: 84:d9:5e:4c:3d:88:73:0e:de:d5:17:95:a6:2b:fc: dd:e5:e1:fc:24:5b:73:44:60:ad:f8:f6:7a:84:ff: d8:34:f1:73:d6:60:fd:fd:73:ca:5f:e7:38:cd:79: be:89:fd:87:cd:38:8b:ac:81:7f:82:33:ec:7c:b0: 29:33:0c:e9:62:57:14:da:3a:5b:3d:0f:80:51:d8: 76:ad:52:8b:78:cb:90:bd:26:18:52:6d:0c:36:a0: ea:0a:78:88:c5:2f:af:8f:ab:c6:f7:60:94:8e:5c: 8e:de:c2:b1:69:88:3b:f9:98:58:d4:2b:ce:38:e9: 7f:e6:b6:88:8b:fc:2b:dc:d6:72:2d:8e:11:20:46: 65:c2:cc:08:16:90:ce:b9:26:b6:21:08:2c:28:bb: a2:3c:a2:0f:84:60:84:51:d0:61:55:9b:00:31:27: 0c:10:9f:91:a6:59:79:c3:48:c1:58:99:c0:ab:4b: 05:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2C:72:06:29:A2:DF:1B:A3:D0:CC:D1:57:F8:B9:AC:A3:06:E7:A1 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:af:06:79:7f:30:fa:aa:0e:9c:0f:45:52:1f:f9:9b:13:9d: b2:b2:2a:7d:ee:50:e2:41:cd:de:45:e2:f6:0f:68:4f:a1:12: 13:3c:be:01:16:49:5f:5a:37:c6:f6:af:db:d2:92:e4:41:1c: 59:f0:4a:68:73:e9:7c:e3:e8:7b:4f:62:6f:b3:16:64:7a:27: ab:47:70:de:a4:60:ce:2d:a3:da:9c:a1:1c:ae:49:e0:da:0a: 95:df:fc:ad:b1:ec:bd:05:5c:6e:84:7e:6e:c6:04:8d:88:59: 51:ef:8f:c2:47:3e:99:12:55:c2:3b:d8:97:de:21:00:e3:e2: 03:be:f8:69:cc:f6:b9:25:f8:7d:29:cd:d2:8d:92:cd:92:a0: 04:56:15:d4:63:52:35:c2:2b:3e:d6:14:bb:4b:3b:4a:5e:9a: 6a:20:b1:35:0e:f8:3f:b9:e9:b1:2b:98:8e:a3:a9:be:42:12: e2:0a:c9:ea:4e:11:36:2f:39:b4:d6:27:38:36:d2:31:6a:42: 99:2e:ff:19:b9:0f:f1:74:3d:d3:8a:0e:74:26:3c:0a:c3:0b: 9a:4f:81:37:c4:8e:78:39:1a:f8:9d:09:da:b6:2d:ab:1c:0e: e0:da:aa:03:8d:95:1f:2f:28:ad:58:bd:51:b9:9b:a3:db:bd: 86:72:fe:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUwNDI0MTY0NDM1WhcNMjUwNTAxMTY0NDM1WjAYMRYwFAYD VQQDEw02ODBhNmE3My02OTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt499xzG246J9ALqWFsHoe54NVEZi6vwbfu83b1AXfU1B8Fmd2hi9jl3DSekH PC8fk9LeX6teYXeta+a5VxU0Tzf/TarOOYihEM+E2V5MPYhzDt7VF5WmK/zd5eH8 JFtzRGCt+PZ6hP/YNPFz1mD9/XPKX+c4zXm+if2HzTiLrIF/gjPsfLApMwzpYlcU 2jpbPQ+AUdh2rVKLeMuQvSYYUm0MNqDqCniIxS+vj6vG92CUjlyO3sKxaYg7+ZhY 1CvOOOl/5raIi/wr3NZyLY4RIEZlwswIFpDOuSa2IQgsKLuiPKIPhGCEUdBhVZsA MScMEJ+Rpll5w0jBWJnAq0sFAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsscgYp ot8bo9DM0Vf4uayjBuehMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rwZ5fzD6qg6cD0VSH/mbE52ysip97lDiQc3eReL2D2hPoRITPL4B FklfWjfG9q/b0pLkQRxZ8Epoc+l84+h7T2JvsxZkeierR3DepGDOLaPanKEcrkng 2gqV3/ytsey9BVxuhH5uxgSNiFlR74/CRz6ZElXCO9iX3iEA4+IDvvhpzPa5Jfh9 Kc3SjZLNkqAEVhXUY1I1wis+1hS7SztKXppqILE1Dvg/uemxK5iOo6m+QhLiCsnq ThE2Lzm01ic4NtIxakKZLv8ZuQ/xdD3Tig50JjwKwwuaT4E3xI54ORr4nQnati2r HA7g2qoDjZUfLyitWL1RuZuj272Gcv6o -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:42 2025 by rpki-client