$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft File: -1Hou5mkLX1_xMVwQZv3TIbTr9w.mft (raw, json) Hash identifier: a650nStpDPbNjNpnB4s2hLKc3b3HV+NguEd9Ksw+zEw= Subject key identifier: 30:DE:F0:27:0B:C8:71:C5:A1:82:D3:93:A5:A9:10:F8:69:0C:A4:13 Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC Certificate issuer: /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft Manifest number: 0606 Signing time: Thu 24 Apr 2025 22:40:27 +0000 Manifest this update: Thu 24 Apr 2025 22:40:27 +0000 Manifest next update: Thu 01 May 2025 22:40:27 +0000 Files and hashes: 1: -1Hou5mkLX1_xMVwQZv3TIbTr9w.crl (hash: MgxIIMhwDZ2EBQ0Q2D0CfQ1rY4VmkZK6Svyg3PJ+hQ0=) 2: A2835E90A0B211EBA87FF23EC4F9AE02.roa (hash: VRjoLmafAxq4ektn9uauBKFkk07qZLl2+f3SufQLeJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC Validity Not Before: Apr 24 22:40:27 2025 GMT Not After : May 1 22:40:27 2025 GMT Subject: CN=680abddb-4c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:70:ae:a7:25:a4:5d:5a:a5:88:3a:9d:91: 91:f4:47:c9:f5:65:49:a5:ec:9c:a4:48:f5:7b:b8: b6:e7:a6:85:e2:ed:12:b6:d8:52:72:78:35:19:44: 16:6b:ec:68:f8:59:d0:91:20:d4:d7:76:9d:b5:07: 3b:1d:2a:2d:73:09:e4:a1:c0:d6:04:3d:29:b1:8b: 7e:92:2e:7c:1d:bb:cb:10:bc:ea:7c:e6:46:5b:15: 0a:64:cf:de:07:82:c2:b6:64:2b:87:f3:08:08:93: 73:5c:ff:a6:6b:3e:c8:57:85:fe:42:03:c8:2c:17: bb:ce:41:20:f8:b8:8d:09:a1:b8:79:33:1a:b3:b4: 99:d8:04:a2:f5:60:00:7f:f0:08:c3:a5:61:ff:84: 51:59:09:e5:75:cc:5b:b0:bb:49:47:a5:86:fe:ab: 07:c9:f8:31:ec:ca:65:c8:49:89:16:f5:bf:0d:4a: c9:16:f0:96:63:1e:72:d9:6b:2a:59:82:42:be:03: 65:3a:1e:b3:b3:95:9b:62:3b:63:21:0a:a3:5e:e5: d0:f1:6b:87:0d:d9:42:2d:64:24:27:6b:1d:5e:26: e1:d1:2f:c3:81:92:81:a7:fe:3e:34:25:50:a9:70: 69:f0:f4:d4:d6:6d:b5:4a:ef:02:b1:94:d8:aa:e9: 28:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DE:F0:27:0B:C8:71:C5:A1:82:D3:93:A5:A9:10:F8:69:0C:A4:13 X509v3 Authority Key Identifier: keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:18:0e:d3:68:72:9a:e8:9d:34:56:bd:69:a1:1f:03:e6:97: 23:d3:01:d8:64:f7:79:80:f5:7c:84:6e:c6:89:fb:06:84:6e: d4:c2:a3:59:32:08:32:3b:50:d6:b2:f3:a8:16:dc:03:eb:81: d7:1d:9a:9c:9d:cc:14:7d:df:7f:c0:b9:d0:28:32:c5:36:e8: 6f:cb:6f:ed:9d:2b:09:3c:5e:fe:30:2e:c1:92:51:13:be:ce: b8:91:26:96:dd:ec:63:0c:3d:cc:5f:be:2f:7e:32:4e:df:e2: 52:02:40:6d:d0:1c:f4:84:8c:34:9d:6d:e6:bd:7b:80:14:43: 55:0d:b6:51:34:e1:c1:a1:f9:7d:11:89:0a:18:05:1d:e9:1e: 2a:08:4c:a3:65:5e:32:2b:a3:1b:69:39:e0:f2:a1:27:47:7c: bf:da:db:1f:72:d6:3f:63:af:23:f9:f1:da:ba:80:61:30:8c: 2b:7a:0c:db:10:32:c4:30:7d:52:9d:52:fa:02:a6:ec:f6:07: 70:10:5b:ba:94:b3:8b:7c:77:dc:64:18:ce:77:e6:c0:b0:4f: 6d:65:0c:e5:c5:14:cb:00:61:7a:d5:ff:1e:3b:2c:e9:22:26: b2:47:4e:93:87:35:8a:1f:3e:08:d1:fe:ec:fd:34:59:c8:f0: 57:3b:13:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI3MzkxMTAvBgNVBAUTKEZCNTFFOEJCOTlBNDJEN0Q3RkM0QzU3MDQxOUJGNzRD ODZEM0FGREMwHhcNMjUwNDI0MjI0MDI3WhcNMjUwNTAxMjI0MDI3WjAYMRYwFAYD VQQDEw02ODBhYmRkYi00YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoY1wrqclpF1apYg6nZGR9EfJ9WVJpeycpEj1e7i256aF4u0StthScng1GUQW a+xo+FnQkSDU13adtQc7HSotcwnkocDWBD0psYt+ki58HbvLELzqfOZGWxUKZM/e B4LCtmQrh/MICJNzXP+maz7IV4X+QgPILBe7zkEg+LiNCaG4eTMas7SZ2ASi9WAA f/AIw6Vh/4RRWQnldcxbsLtJR6WG/qsHyfgx7MplyEmJFvW/DUrJFvCWYx5y2Wsq WYJCvgNlOh6zs5WbYjtjIQqjXuXQ8WuHDdlCLWQkJ2sdXibh0S/DgZKBp/4+NCVQ qXBp8PTU1m21Su8CsZTYquko8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDe8CcL yHHFoYLTk6WpEPhpDKQTMB8GA1UdIwQYMBaAFPtR6LuZpC19f8TFcEGb90yG06/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjczOS8wOEY3RkUwNEEw QTYxMUVCQTVBNkMzNTFDNEY5QUUwMi8tMUhvdTVta0xYMV94TVZ3UVp2M1RJYlRy OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0xSG91NW1rTFgxX3hNVndRWnYzVEliVHI5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjczOS8wOEY3RkUwNEEwQTYxMUVCQTVBNkMzNTFDNEY5QUUwMi8tMUhvdTVta0xY MV94TVZ3UVp2M1RJYlRyOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTGA7TaHKa6J00Vr1poR8D5pcj0wHYZPd5gPV8hG7GifsGhG7UwqNZ MggyO1DWsvOoFtwD64HXHZqcncwUfd9/wLnQKDLFNuhvy2/tnSsJPF7+MC7BklET vs64kSaW3exjDD3MX74vfjJO3+JSAkBt0Bz0hIw0nW3mvXuAFENVDbZRNOHBofl9 EYkKGAUd6R4qCEyjZV4yK6MbaTng8qEnR3y/2tsfctY/Y68j+fHauoBhMIwregzb EDLEMH1SnVL6Aqbs9gdwEFu6lLOLfHfcZBjOd+bAsE9tZQzlxRTLAGF61f8eOyzp IiayR06ThzWKHz4I0f7s/TRZyPBXOxPo -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:29 2025 by rpki-client