$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: vTai1Dmz9htezl+yeG2/RxT1hfG8Q6FQtbR6tsdFNCA= Subject key identifier: F9:36:9A:36:6F:17:D0:95:5A:F4:A3:E6:3B:81:6C:31:32:A9:4A:A2 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: FC Signing time: Fri 13 Jun 2025 04:12:59 +0000 Manifest this update: Fri 13 Jun 2025 04:12:59 +0000 Manifest next update: Fri 20 Jun 2025 04:12:59 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: +fky+hJfWDJAxE2apTALR4g8px+7qgLXJ7wHfVbd248=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: Gi1fjcJYFrnx1YgdQysI3ht+gEJR9oM+PSXe3rgp9Wc=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Jun 13 04:12:59 2025 GMT Not After : Jun 20 04:12:59 2025 GMT Subject: CN=684ba54b-cca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:81:33:6b:c5:5f:9b:38:aa:75:f9:eb:9f: a4:1f:d9:5a:cb:f7:e9:0b:3a:2e:3b:03:13:52:70: 61:87:4d:ac:14:cf:aa:17:e0:3c:c5:96:5e:2c:4b: 28:e0:2f:34:1f:77:aa:f7:5f:71:32:a0:ab:77:60: f2:c6:fb:e4:5f:ff:ad:ef:f7:8f:c7:9b:24:f2:fd: 17:1b:1c:3f:f4:51:7c:86:dd:fc:ad:fc:b2:a2:32: 50:c1:15:94:d9:4f:cf:f2:39:5f:52:8d:ce:ed:43: 06:3a:73:71:16:5f:be:e6:08:89:1c:29:d1:7b:ac: 91:de:58:77:71:6e:df:17:5d:8c:d3:8c:95:84:6b: fa:be:0d:38:1d:5a:c5:8b:48:e9:d2:94:2c:d7:18: b3:b1:b7:6d:15:af:81:80:a0:2d:26:46:1e:e0:b8: 2c:88:43:a3:22:73:98:d8:24:55:e3:39:6a:71:42: da:ab:14:d6:13:29:5f:59:9b:ab:9a:74:3e:ab:5d: c3:b9:a4:a2:97:87:80:65:eb:cd:92:c8:ca:47:44: c3:ab:5b:a0:12:43:f8:8c:8a:0c:25:a7:cd:15:c4: 0d:d0:6e:95:10:31:a5:c0:18:15:5b:11:63:53:b6: 6d:43:05:81:d5:1f:62:bc:13:16:01:a6:b1:90:90: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:36:9A:36:6F:17:D0:95:5A:F4:A3:E6:3B:81:6C:31:32:A9:4A:A2 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:94:47:0b:dd:bf:4c:ca:1f:3b:2a:92:80:fe:09:2a:0e:c5: a4:17:a9:97:67:84:eb:db:cc:4c:e9:64:b5:f9:16:bd:74:c2: a9:6d:24:a2:78:cc:05:62:c9:aa:2a:38:b7:23:7c:8d:b6:d7: 83:47:81:5c:9d:61:2f:02:1b:5b:d8:15:51:16:87:06:72:6c: 38:b1:3f:35:3f:f5:38:c4:53:43:9f:1b:58:a5:db:3d:34:02: 51:16:7c:d5:71:c6:0d:9b:0f:72:1e:70:ce:6f:1f:0d:ea:fe: f6:ab:50:85:aa:00:d6:cf:fc:c6:e5:fb:7d:81:18:29:2a:93: a5:5c:d8:ff:31:24:a5:59:8f:d2:29:be:15:56:23:0b:d0:06: 1c:f4:8c:ef:35:97:e3:ed:7a:ce:b2:04:b1:f8:94:2e:14:37: df:fa:49:1b:52:e9:27:33:7a:fc:40:95:3d:ee:b8:5f:62:29: 33:8e:31:e2:24:82:56:ea:eb:81:6f:67:63:22:7e:f7:da:35: 36:ef:75:53:80:b6:0f:e5:cc:da:2d:9e:2a:f4:1f:6b:0a:ac: 87:a1:58:c7:2c:9e:b6:23:27:83:07:91:18:4e:b6:29:29:7a: ae:34:44:4a:20:7a:04:5f:c9:b3:0a:a6:13:de:6b:22:5f:6b: 89:0e:f7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwNjEzMDQxMjU5WhcNMjUwNjIwMDQxMjU5WjAYMRYwFAYD VQQDEw02ODRiYTU0Yi1jY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxuBM2vFX5s4qnX565+kH9lay/fpCzouOwMTUnBhh02sFM+qF+A8xZZeLEso 4C80H3eq919xMqCrd2DyxvvkX/+t7/ePx5sk8v0XGxw/9FF8ht38rfyyojJQwRWU 2U/P8jlfUo3O7UMGOnNxFl++5giJHCnRe6yR3lh3cW7fF12M04yVhGv6vg04HVrF i0jp0pQs1xizsbdtFa+BgKAtJkYe4LgsiEOjInOY2CRV4zlqcULaqxTWEylfWZur mnQ+q13DuaSil4eAZevNksjKR0TDq1ugEkP4jIoMJafNFcQN0G6VEDGlwBgVWxFj U7ZtQwWB1R9ivBMWAaaxkJD3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk2mjZv F9CVWvSj5juBbDEyqUqiMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFlEcL3b9Myh87KpKA/gkqDsWkF6mXZ4Tr28xM6WS1+Ra9dMKpbSSi eMwFYsmqKji3I3yNtteDR4FcnWEvAhtb2BVRFocGcmw4sT81P/U4xFNDnxtYpds9 NAJRFnzVccYNmw9yHnDObx8N6v72q1CFqgDWz/zG5ft9gRgpKpOlXNj/MSSlWY/S Kb4VViML0AYc9IzvNZfj7XrOsgSx+JQuFDff+kkbUuknM3r8QJU97rhfYikzjjHi JIJW6uuBb2djIn732jU273VTgLYP5czaLZ4q9B9rCqyHoVjHLJ62IyeDB5EYTrYp KXquNERKIHoEX8mzCqYT3msiX2uJDveM -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:05 2025 by rpki-client