$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: /mqxViUP4FSyEcUf/Jt+RFIK5bqHgHbF9v4bODkPr/Q= Subject key identifier: 78:FF:96:AA:DC:99:C6:77:5E:85:E5:E3:C9:71:0D:1D:54:9F:DC:B0 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 1480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 1469 Signing time: Thu 24 Apr 2025 16:55:34 +0000 Manifest this update: Thu 24 Apr 2025 16:55:34 +0000 Manifest next update: Thu 01 May 2025 16:55:34 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: 82e3EYf5u69Zqh4Izl5ZMhmatU7zpqxYjQ3at1fU08c=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5248 (0x1480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Apr 24 16:55:34 2025 GMT Not After : May 1 16:55:34 2025 GMT Subject: CN=680a6d06-8f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:4c:17:fa:01:c5:44:73:0d:64:cf:0b:cf: 47:9e:2b:4c:dd:a5:99:77:21:16:2c:ba:a6:04:82: c1:f8:8e:ec:0c:8c:23:86:76:52:80:bd:14:ad:32: 11:41:1a:5b:4b:b5:b0:40:43:35:7f:fb:0c:09:1d: 0c:ff:59:c5:7d:f7:bc:71:b3:70:9d:64:b2:12:47: e6:23:a9:c4:10:b2:bc:cb:b7:77:0b:37:40:e8:76: a2:e1:85:7e:0b:e0:69:17:11:40:42:9a:5d:b0:ff: 1c:72:09:67:4b:c8:f4:a2:f6:5f:40:81:0a:34:46: 95:02:e3:8f:7c:53:00:26:ef:97:d6:c3:2c:dc:91: b3:b1:65:f9:c6:f0:54:e1:ac:98:07:a3:e8:19:60: 75:a6:4e:9e:b4:83:ac:44:87:4f:71:39:af:c0:f7: 5d:2c:c4:48:cb:b7:b3:f9:43:4f:40:69:8a:67:31: ae:17:27:79:83:fd:db:f8:5d:fb:01:a4:50:af:c9: 0e:2c:d9:18:5b:03:3a:7d:bd:9e:e0:20:ba:fb:58: a2:24:c9:75:d8:b7:4c:69:b6:a5:8d:28:df:a6:00: 48:b4:69:be:14:54:6a:f7:0c:78:c7:7b:14:60:ad: c5:dc:9e:97:25:60:e6:58:07:50:32:a5:a8:d5:b6: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:96:AA:DC:99:C6:77:5E:85:E5:E3:C9:71:0D:1D:54:9F:DC:B0 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:69:2f:49:25:ed:c2:63:d4:e7:a2:c7:f2:bf:c0:77:a5:78: b6:e7:53:0d:66:b7:0f:6a:58:5d:fe:f6:4f:d8:89:ea:76:05: 52:83:64:44:0d:ed:6c:9d:d3:f4:e7:d8:26:49:87:5a:98:80: 25:7b:1b:f6:cc:39:6f:9b:0e:1a:8b:e3:56:2b:7e:a0:b4:35: f9:83:61:d9:72:43:da:b9:e7:3e:8d:06:d3:94:bf:3c:8c:c3: 2e:f2:bc:cd:61:0b:b3:4a:63:a3:76:0e:8d:16:87:7c:20:66: 84:c2:c0:5e:35:8f:7c:ed:0f:3b:0b:14:ae:43:3d:d9:3e:1b: 55:4a:58:01:a8:98:48:9d:0c:3b:90:e3:99:30:e2:7b:e9:e6: fb:8b:93:6d:c1:a4:f6:e9:72:1f:bb:25:08:3e:6d:43:72:b6: c1:bb:91:99:a9:e5:89:53:20:c8:97:03:66:40:a2:5e:d3:c1: 92:e5:ad:30:c5:7d:0c:de:c8:99:b2:04:a6:13:7d:bc:95:36: bf:3f:e7:6a:12:90:8b:d0:f0:03:ad:64:af:a7:dd:02:08:05: 99:97:d4:bf:b8:49:7d:ed:1f:4a:2e:e5:3e:cb:1d:3b:88:70: f3:43:03:73:24:0d:30:32:1b:25:55:5c:95:ee:04:aa:e1:05: e9:43:c1:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNDI0MTY1NTM0WhcNMjUwNTAxMTY1NTM0WjAYMRYwFAYD VQQDEw02ODBhNmQwNi04ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TRMF/oBxURzDWTPC89HnitM3aWZdyEWLLqmBILB+I7sDIwjhnZSgL0UrTIR QRpbS7WwQEM1f/sMCR0M/1nFffe8cbNwnWSyEkfmI6nEELK8y7d3CzdA6Hai4YV+ C+BpFxFAQppdsP8ccglnS8j0ovZfQIEKNEaVAuOPfFMAJu+X1sMs3JGzsWX5xvBU 4ayYB6PoGWB1pk6etIOsRIdPcTmvwPddLMRIy7ez+UNPQGmKZzGuFyd5g/3b+F37 AaRQr8kOLNkYWwM6fb2e4CC6+1iiJMl12LdMabaljSjfpgBItGm+FFRq9wx4x3sU YK3F3J6XJWDmWAdQMqWo1bZ70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj/lqrc mcZ3XoXl48lxDR1Un9ywMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQaS9JJe3CY9Tnosfyv8B3pXi251MNZrcPalhd/vZP2InqdgVSg2RE De1sndP059gmSYdamIAlexv2zDlvmw4ai+NWK36gtDX5g2HZckPauec+jQbTlL88 jMMu8rzNYQuzSmOjdg6NFod8IGaEwsBeNY987Q87CxSuQz3ZPhtVSlgBqJhInQw7 kOOZMOJ76eb7i5NtwaT26XIfuyUIPm1DcrbBu5GZqeWJUyDIlwNmQKJe08GS5a0w xX0M3siZsgSmE328lTa/P+dqEpCL0PADrWSvp90CCAWZl9S/uEl97R9KLuU+yx07 iHDzQwNzJA0wMhslVVyV7gSq4QXpQ8Ee -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:25 2025 by rpki-client