$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: o48Ui/o9sYa5aVYJqPRyaDbK+OXSFa5cM1/n65uKfOE= Subject key identifier: 50:62:5B:BC:42:13:4C:7D:D6:4A:C4:BF:67:AD:D7:A4:61:0C:99:8B Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:15:12 +0000 Manifest this update: Fri 25 Apr 2025 02:15:11 +0000 Manifest next update: Fri 02 May 2025 02:15:11 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: hCjGTKwHNgConw/NqPD5EhF/Sa8sDkmkMQP5qZq2TYc=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Apr 25 02:15:11 2025 GMT Not After : May 2 02:15:11 2025 GMT Subject: CN=680af02f-fb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3d:87:38:c3:70:23:74:ea:f4:2e:5e:36:12: fa:1d:c7:57:72:f7:41:09:b1:13:e4:57:95:7d:94: c8:ae:56:8c:52:46:b9:ab:d2:0c:d2:b8:67:54:40: eb:2f:6c:da:a1:f4:a4:6d:21:8b:79:1e:04:41:c1: bc:71:e7:82:2e:af:f5:3c:9e:08:48:01:85:0b:24: 6c:ac:8c:26:56:00:66:ad:8e:8a:05:b5:f8:70:77: ac:96:88:4b:ce:e9:38:3b:f0:eb:8d:e3:36:0c:98: 75:4f:09:0f:4b:29:46:4b:e4:52:54:25:ab:c5:fd: bc:6e:e2:81:74:6c:fd:6e:fd:e9:28:52:5a:b4:32: 7c:b8:1c:6e:7f:6d:de:ae:3f:8f:e2:9c:6f:12:83: 2f:ce:cf:95:8e:98:55:ae:94:c5:cd:5c:d5:2b:2b: ae:b7:26:d1:56:bd:78:e5:0c:7a:70:1c:3e:bd:7f: ed:b6:31:41:36:52:d7:ad:57:0e:31:39:18:ef:b5: 98:79:1b:2b:ab:dd:f9:56:da:9a:f2:4e:6c:18:1e: ff:0c:5f:1d:55:e0:d3:fe:f3:ae:2b:c6:35:17:48: 63:f4:77:9b:81:e0:e5:89:1d:ee:85:bc:79:2f:ff: b3:b7:ca:a3:7f:c5:f5:5e:7b:01:44:28:a8:95:db: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:62:5B:BC:42:13:4C:7D:D6:4A:C4:BF:67:AD:D7:A4:61:0C:99:8B X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b8:08:c4:14:27:69:f7:8e:1a:18:61:e4:ca:07:89:90:4f: 96:92:3d:7a:b0:f7:9c:12:dd:58:71:fe:c7:f2:9a:34:96:8d: ac:23:a9:1e:63:3b:73:a6:8f:87:66:dd:cb:7a:02:d9:be:dc: f1:b4:c9:80:3f:0f:57:b5:86:df:47:1f:57:96:c0:ef:b8:2c: b5:94:45:33:7d:e0:40:3d:80:80:fb:54:69:33:8f:c3:85:f8: 64:6a:0e:64:5d:06:60:b0:ea:68:0f:66:60:f9:a1:c3:42:4e: e5:93:fe:66:27:99:8d:88:0a:03:b0:a4:02:eb:f5:43:af:86: 3d:42:3f:30:80:4b:a2:f4:ad:65:09:06:44:77:d7:87:70:bd: ba:41:cd:55:a4:46:b5:0d:00:77:48:17:e5:7f:f6:c6:dd:2c: 54:f0:ea:11:c0:61:41:64:cf:b7:b6:38:48:d9:e6:c6:39:db: 35:ab:9a:4c:bc:cb:07:95:b1:44:8b:99:5e:94:07:57:52:aa: 8a:c5:e2:45:35:65:07:fc:2f:d0:02:db:d9:c7:a6:6c:41:62: 33:a8:11:57:98:06:cf:eb:31:d3:3a:0c:b8:9c:9b:03:83:4d: f3:7e:a8:7c:d4:26:c7:5c:fd:5e:67:92:74:67:5f:ff:b3:38: be:50:f5:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwNDI1MDIxNTExWhcNMjUwNTAyMDIxNTExWjAYMRYwFAYD VQQDEw02ODBhZjAyZi1mYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z2HOMNwI3Tq9C5eNhL6HcdXcvdBCbET5FeVfZTIrlaMUka5q9IM0rhnVEDr L2zaofSkbSGLeR4EQcG8ceeCLq/1PJ4ISAGFCyRsrIwmVgBmrY6KBbX4cHeslohL zuk4O/DrjeM2DJh1TwkPSylGS+RSVCWrxf28buKBdGz9bv3pKFJatDJ8uBxuf23e rj+P4pxvEoMvzs+VjphVrpTFzVzVKyuutybRVr145Qx6cBw+vX/ttjFBNlLXrVcO MTkY77WYeRsrq935Vtqa8k5sGB7/DF8dVeDT/vOuK8Y1F0hj9HebgeDliR3uhbx5 L/+zt8qjf8X1XnsBRCioldtOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBiW7xC E0x91krEv2et16RhDJmLMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5uAjEFCdp944aGGHkygeJkE+Wkj16sPecEt1Ycf7H8po0lo2sI6ke Yztzpo+HZt3LegLZvtzxtMmAPw9XtYbfRx9XlsDvuCy1lEUzfeBAPYCA+1RpM4/D hfhkag5kXQZgsOpoD2Zg+aHDQk7lk/5mJ5mNiAoDsKQC6/VDr4Y9Qj8wgEui9K1l CQZEd9eHcL26Qc1VpEa1DQB3SBflf/bG3SxU8OoRwGFBZM+3tjhI2ebGOds1q5pM vMsHlbFEi5lelAdXUqqKxeJFNWUH/C/QAtvZx6ZsQWIzqBFXmAbP6zHTOgy4nJsD g03zfqh81CbHXP1eZ5J0Z1//szi+UPXr -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:05 2025 by rpki-client