$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: Erv315RgyWfi4zPmW0sH1DbJwSSuZY+RY0fWPgPmHC0= Subject key identifier: 61:6F:CB:E5:BB:33:50:9B:8E:EF:6F:AD:1A:5E:78:F0:BD:D6:7E:47 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: E2 Signing time: Fri 25 Apr 2025 04:36:24 +0000 Manifest this update: Fri 25 Apr 2025 04:36:24 +0000 Manifest next update: Fri 02 May 2025 04:36:24 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: CddtM19xNh4v/tRlzDM5hHgtKeUxwOKV19nVlD11exI=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: o014SpMqOiTDvJKjuitWu+6F68KRrDYkeyld85oQ3gg=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: Gi1fjcJYFrnx1YgdQysI3ht+gEJR9oM+PSXe3rgp9Wc=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Apr 25 04:36:24 2025 GMT Not After : May 2 04:36:24 2025 GMT Subject: CN=680b1148-cc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:9f:30:fa:b3:3b:c7:f0:45:e0:54:87:f1: 24:0a:09:e1:fa:0d:7a:77:e9:af:b2:a7:c0:df:e6: b2:ec:c0:92:e0:c6:bb:8c:bc:d0:3a:fd:5b:83:fc: f0:54:7d:9a:b4:7f:36:65:7e:27:00:ea:57:d9:75: ff:03:3e:3b:bb:61:52:a4:62:45:05:0d:66:1a:ae: 41:ef:79:c9:ce:47:9a:eb:a7:da:f0:ec:a3:07:9f: d7:d3:cd:88:af:a9:21:48:ef:68:13:8b:4a:c4:b6: 56:20:fd:af:d5:04:23:db:9a:b4:90:dc:db:86:bd: bd:4a:1f:16:1c:38:be:b3:65:e8:0e:0c:17:55:ed: 79:31:b4:b8:3f:6d:af:0f:5a:87:59:21:c7:fd:dc: 33:91:fc:0a:82:4c:fd:45:12:78:86:56:4b:c4:b8: 91:b0:4a:09:b8:a2:7b:01:e5:49:22:b1:04:2c:7b: 3a:c2:09:d7:c5:41:9f:0f:95:13:a8:46:2d:5d:2e: 71:72:77:86:8e:b3:ef:39:c0:3a:9e:ab:5c:1a:25: 62:0c:1e:50:1b:e7:d4:6b:4c:85:00:c3:1d:c1:17: b1:b5:3f:6d:b1:24:c3:73:f7:7f:3f:fc:5d:70:5a: 22:53:a0:78:aa:79:de:7c:e9:24:1e:ed:c0:1a:b6: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6F:CB:E5:BB:33:50:9B:8E:EF:6F:AD:1A:5E:78:F0:BD:D6:7E:47 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:69:a4:e0:7e:7f:28:9e:e7:3d:65:76:43:93:79:e0:8d:f6: 83:54:09:ee:99:bf:9a:4b:7b:86:60:44:1b:c9:74:94:44:18: 2d:ab:9d:d1:3e:21:43:d6:9d:cc:bd:4c:b0:95:76:f7:74:dc: 32:23:91:d4:b0:c6:9a:3b:cd:1e:71:9b:f1:21:0b:55:81:c6: a0:73:28:b6:a1:5e:a2:28:b5:7a:56:36:d1:5f:b6:e0:07:5e: 7b:87:f0:20:14:c8:4b:a0:34:52:49:68:b2:f5:99:14:5c:e2: 0a:99:29:37:9e:68:fe:f8:a1:9d:fd:14:b6:94:f3:92:a2:6b: c6:a3:7c:d9:d2:11:52:0d:bc:2c:98:e3:91:b9:e2:8b:96:97: bf:12:5b:3e:d0:bc:30:cb:fa:ae:ff:12:cb:7d:a9:3a:94:31: 94:ab:78:d6:91:1f:ca:52:34:c9:f1:ba:4e:79:45:2f:74:97: 0e:42:66:17:8a:f8:c5:72:62:4e:52:93:c1:c8:1b:36:a2:a2: 10:3d:19:5c:40:00:c1:05:e6:52:6a:88:2b:0a:2f:9a:f3:c5: 88:c5:28:6b:fd:89:6b:5f:49:1d:58:08:1c:b0:1e:8a:25:48: ae:4a:a7:66:93:39:36:ae:ea:8f:48:75:2b:5c:02:f0:b4:5d: e4:68:a2:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwNDI1MDQzNjI0WhcNMjUwNTAyMDQzNjI0WjAYMRYwFAYD VQQDEw02ODBiMTE0OC1jYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzWfMPqzO8fwReBUh/EkCgnh+g16d+mvsqfA3+ay7MCS4Ma7jLzQOv1bg/zw VH2atH82ZX4nAOpX2XX/Az47u2FSpGJFBQ1mGq5B73nJzkea66fa8OyjB5/X082I r6khSO9oE4tKxLZWIP2v1QQj25q0kNzbhr29Sh8WHDi+s2XoDgwXVe15MbS4P22v D1qHWSHH/dwzkfwKgkz9RRJ4hlZLxLiRsEoJuKJ7AeVJIrEELHs6wgnXxUGfD5UT qEYtXS5xcneGjrPvOcA6nqtcGiViDB5QG+fUa0yFAMMdwRextT9tsSTDc/d/P/xd cFoiU6B4qnnefOkkHu3AGratSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFvy+W7 M1Cbju9vrRpeePC91n5HMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKaaTgfn8onuc9ZXZDk3ngjfaDVAnumb+aS3uGYEQbyXSURBgtq53R PiFD1p3MvUywlXb3dNwyI5HUsMaaO80ecZvxIQtVgcagcyi2oV6iKLV6VjbRX7bg B157h/AgFMhLoDRSSWiy9ZkUXOIKmSk3nmj++KGd/RS2lPOSomvGo3zZ0hFSDbws mOORueKLlpe/Els+0Lwwy/qu/xLLfak6lDGUq3jWkR/KUjTJ8bpOeUUvdJcOQmYX ivjFcmJOUpPByBs2oqIQPRlcQADBBeZSaogrCi+a88WIxShr/YlrX0kdWAgcsB6K JUiuSqdmkzk2ruqPSHUrXALwtF3kaKIe -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:34 2025 by rpki-client