$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json) Hash identifier: v9ES1vaa1osKkp7k/Hcvvek7u3c7S7xPqOlci8IL9RM= Subject key identifier: 2B:71:F6:51:55:E9:00:98:D1:D3:3F:58:46:32:3B:CC:E4:58:21:FB Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Certificate serial: 0954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft Manifest number: 093B Signing time: Thu 24 Apr 2025 20:09:00 +0000 Manifest this update: Thu 24 Apr 2025 20:09:00 +0000 Manifest next update: Thu 01 May 2025 20:09:00 +0000 Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: U+U55beghhYZEP5ZwahnMhNHPLOIc7rFt2zAACA+IXE=) 2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: wci0Xfqzo59Y8jWuwf9OlzNgtFeflA2lDlymuLqWFus=) 3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: vQbCuWQwTDhbmdI3t8jm44MzJ+6k3uWJJXIQLGrnQxI=) 4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2388 (0x954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Validity Not Before: Apr 24 20:09:00 2025 GMT Not After : May 1 20:09:00 2025 GMT Subject: CN=680a9a5c-1db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cf:02:c9:f6:3f:9e:32:5f:34:92:d7:2a:68: 93:80:65:8f:e8:c3:5c:b4:d1:43:7e:3c:ad:9e:f5: 73:34:66:22:49:81:0d:b5:1c:54:df:3d:2d:53:64: 7c:9d:db:07:75:18:bf:b2:f0:c4:c6:f7:ca:62:92: 05:6f:a7:9a:54:dc:cd:6e:27:1b:23:79:8e:db:3e: e3:e8:a5:2b:05:96:fa:34:e4:13:89:b3:85:8b:a4: 62:a7:8c:52:ad:0b:dd:f4:24:18:88:66:ce:68:20: 84:5c:0b:8e:54:c9:0d:fc:f4:d8:4d:bd:97:91:a2: 00:08:f9:c8:1a:6a:9f:2b:a4:19:e6:4a:8b:de:35: 17:96:4e:11:ef:18:27:d4:d5:42:21:e6:16:9e:8d: fa:ee:5f:8b:60:70:bf:d6:6a:9f:2c:36:f0:9a:95: fb:ce:8e:e3:49:2c:77:25:2a:ed:72:12:e5:b5:71: 96:59:cd:ef:5f:ed:ea:e3:69:76:58:50:84:69:66: 30:49:a6:16:13:55:d3:63:51:83:2f:c9:f1:3f:70: 24:ad:0a:c4:97:53:56:5e:39:02:37:6e:4a:cb:77: ca:97:be:b5:37:0b:3a:5e:9d:8a:83:e2:f5:ad:e9: 81:5b:99:59:b7:ce:9e:5d:54:40:c1:87:57:82:fb: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:71:F6:51:55:E9:00:98:D1:D3:3F:58:46:32:3B:CC:E4:58:21:FB X509v3 Authority Key Identifier: keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:aa:93:00:2a:b3:20:20:3d:e4:94:91:99:dd:10:ea:f1:56: 8f:e6:20:22:4a:51:b6:e0:3e:83:a5:1c:92:25:86:5b:53:1f: 10:3f:a6:87:ca:32:41:14:87:82:76:b5:77:ac:fc:c7:11:72: ab:2f:18:7f:04:b6:86:2c:ed:bb:7b:61:19:9b:76:38:f9:19: a1:92:05:bf:c7:a5:f6:33:85:fc:48:77:8a:4e:32:4c:68:34: be:a5:1b:31:f2:1c:be:f5:bf:9f:ce:e0:d9:ef:53:99:2a:9d: 1e:dd:1d:fe:b3:6c:0e:da:2b:92:55:9c:f6:e2:85:ae:87:02: d3:e5:10:c6:e6:6f:1b:e8:17:75:eb:8a:fe:c2:1e:8f:e4:ee: bc:e7:9a:71:e4:e1:60:8f:5e:17:55:2d:fd:89:02:41:6f:c4: 33:24:37:99:ad:bc:6b:ca:73:23:40:7f:b0:e9:6e:c5:6d:50: d9:cd:bb:8b:ac:ea:34:eb:8c:62:3a:c8:d7:6d:a9:95:e8:8b: 76:3f:0d:c9:f3:58:3c:a1:fe:d6:0d:b8:b1:65:72:3c:43:5d: b0:9d:f4:36:8e:86:7a:07:0a:b0:59:64:69:0e:9f:12:d1:f4: c6:af:26:a4:ce:e5:6f:a2:3b:80:9d:4a:da:02:f7:03:31:6b: 0e:c2:5b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODYxMTAvBgNVBAUTKDFDOUJBMkM1RkVBOEMwMzREQTU1MUZEQURDNjJBNTNB N0EwMkU1REIwHhcNMjUwNDI0MjAwOTAwWhcNMjUwNTAxMjAwOTAwWjAYMRYwFAYD VQQDEw02ODBhOWE1Yy0xZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6M8CyfY/njJfNJLXKmiTgGWP6MNctNFDfjytnvVzNGYiSYENtRxU3z0tU2R8 ndsHdRi/svDExvfKYpIFb6eaVNzNbicbI3mO2z7j6KUrBZb6NOQTibOFi6Rip4xS rQvd9CQYiGbOaCCEXAuOVMkN/PTYTb2XkaIACPnIGmqfK6QZ5kqL3jUXlk4R7xgn 1NVCIeYWno367l+LYHC/1mqfLDbwmpX7zo7jSSx3JSrtchLltXGWWc3vX+3q42l2 WFCEaWYwSaYWE1XTY1GDL8nxP3AkrQrEl1NWXjkCN25Ky3fKl761Nws6Xp2Kg+L1 remBW5lZt86eXVRAwYdXgvszFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtx9lFV 6QCY0dM/WEYyO8zkWCH7MB8GA1UdIwQYMBaAFBybosX+qMA02lUf2txipTp6AuXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4Ni9DNjdEMTc2RTlB NUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dEVGFWUl9hM0dLbE9ub0M1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hKdWl4ZjZvd0RUYVZSX2EzR0tsT25vQzVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4Ni9DNjdEMTc2RTlBNUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dE VGFWUl9hM0dLbE9ub0M1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUqpMAKrMgID3klJGZ3RDq8VaP5iAiSlG24D6DpRySJYZbUx8QP6aH yjJBFIeCdrV3rPzHEXKrLxh/BLaGLO27e2EZm3Y4+RmhkgW/x6X2M4X8SHeKTjJM aDS+pRsx8hy+9b+fzuDZ71OZKp0e3R3+s2wO2iuSVZz24oWuhwLT5RDG5m8b6Bd1 64r+wh6P5O6855px5OFgj14XVS39iQJBb8QzJDeZrbxrynMjQH+w6W7FbVDZzbuL rOo064xiOsjXbamV6It2Pw3J81g8of7WDbixZXI8Q12wnfQ2joZ6BwqwWWRpDp8S 0fTGryakzuVvojuAnUraAvcDMWsOwlvk -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:08 2025 by rpki-client