$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: C2BrIURprt8MvTFY5c3Gd5Oj3YJoL5END8GRPUqfbSs= Subject key identifier: 33:9A:75:06:11:28:97:56:52:43:FC:D7:C3:67:2E:31:CF:6A:B0:C0 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 0309 Signing time: Fri 25 Apr 2025 00:59:02 +0000 Manifest this update: Fri 25 Apr 2025 00:59:01 +0000 Manifest next update: Fri 02 May 2025 00:59:01 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: OAGc3Oo1eubkXHQubLUMETWwbTwzyKNo6w3smMiFluw=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Apr 25 00:59:01 2025 GMT Not After : May 2 00:59:01 2025 GMT Subject: CN=680ade55-041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:c5:a7:2d:47:35:af:32:ed:e9:1e:6c:1a: b7:c1:ef:9b:cd:e7:05:21:99:58:7d:f3:5b:dd:d9: f6:c9:a5:35:db:9c:fb:b2:68:d4:8d:da:4a:8f:ab: 88:55:61:08:50:cf:93:f0:c6:8c:f6:03:85:53:bf: e2:5f:bf:c4:dd:3f:a7:fb:10:82:82:a6:60:44:af: 33:c6:42:e5:06:7d:c4:88:dc:0a:55:c6:ec:79:85: 70:01:14:97:e4:60:f4:72:75:61:4b:a8:d4:0c:c2: d1:15:de:48:8d:a1:3b:59:9d:2e:fd:9d:b9:bd:63: 4b:7e:20:3d:f5:71:f7:ff:b8:04:3e:c8:09:2c:88: e4:47:11:3c:35:0d:22:d3:d5:06:9c:29:86:0b:90: 09:02:79:ed:85:a9:e6:87:9c:ea:22:5b:d9:52:93: 90:71:da:8c:0d:18:32:65:b6:ab:35:bb:08:31:c3: 9c:e9:10:e9:9f:a5:ad:65:d0:b5:ef:35:d5:b4:d7: 67:8b:eb:04:7d:ad:d4:a2:cc:3a:55:00:1e:d5:4b: dc:75:04:d4:d0:e3:7b:84:f2:aa:d5:0f:1d:58:ae: 1d:52:05:06:20:d9:0e:aa:18:e9:59:eb:76:3a:29: 8b:3e:75:bf:56:fb:5f:d5:b5:7a:9f:51:cc:09:51: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:75:06:11:28:97:56:52:43:FC:D7:C3:67:2E:31:CF:6A:B0:C0 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:05:ce:e7:71:25:4a:ac:8c:d8:e6:5c:1d:3e:13:ec:55:e6: 17:7c:a7:9f:81:10:1e:6f:4f:5c:45:9f:b3:e9:70:e6:3a:7d: d7:40:af:2c:ee:9a:f0:ba:bc:5c:51:e7:ea:29:aa:04:96:1c: 14:e7:6c:79:a6:92:bd:8f:47:a8:e3:08:c5:5d:8d:20:69:b0: 40:f9:b0:c5:b0:78:a3:0b:1a:8e:f4:a1:3c:7d:7f:85:c0:31: 41:d4:86:c9:1b:e6:ad:0a:b1:16:03:7f:de:dd:ae:12:bb:cb: d5:72:85:46:47:ef:b5:aa:31:24:f3:f4:00:28:df:79:67:97: 49:80:03:6b:61:bd:d0:b9:32:e7:14:6e:53:3f:c2:83:d2:98: 06:d5:ba:16:b7:79:9f:b4:bb:1a:f8:d9:58:b2:0f:2c:60:44: f2:d4:38:bd:c1:b4:4f:46:bd:68:53:e3:a0:ec:82:f8:91:a8: a3:dd:1f:ea:4a:71:65:1a:67:63:65:ac:8d:41:ae:1e:32:4a: 64:92:d7:0b:26:b9:eb:10:d3:51:c0:48:ad:8d:36:a0:4c:5f: ff:3f:a8:f5:ce:47:2b:25:be:7d:f3:75:44:61:75:13:5d:2f: fc:bc:b4:f2:c5:23:36:07:d8:68:79:e8:6c:dd:0d:f8:09:f3: ca:12:e4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwNDI1MDA1OTAxWhcNMjUwNTAyMDA1OTAxWjAYMRYwFAYD VQQDEw02ODBhZGU1NS0wNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy17Fpy1HNa8y7ekebBq3we+bzecFIZlYffNb3dn2yaU125z7smjUjdpKj6uI VWEIUM+T8MaM9gOFU7/iX7/E3T+n+xCCgqZgRK8zxkLlBn3EiNwKVcbseYVwARSX 5GD0cnVhS6jUDMLRFd5IjaE7WZ0u/Z25vWNLfiA99XH3/7gEPsgJLIjkRxE8NQ0i 09UGnCmGC5AJAnnthanmh5zqIlvZUpOQcdqMDRgyZbarNbsIMcOc6RDpn6WtZdC1 7zXVtNdni+sEfa3Uosw6VQAe1UvcdQTU0ON7hPKq1Q8dWK4dUgUGINkOqhjpWet2 OimLPnW/Vvtf1bV6n1HMCVEZUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOadQYR KJdWUkP818NnLjHParDAMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvBc7ncSVKrIzY5lwdPhPsVeYXfKefgRAeb09cRZ+z6XDmOn3XQK8s 7prwurxcUefqKaoElhwU52x5ppK9j0eo4wjFXY0gabBA+bDFsHijCxqO9KE8fX+F wDFB1IbJG+atCrEWA3/e3a4Su8vVcoVGR++1qjEk8/QAKN95Z5dJgANrYb3QuTLn FG5TP8KD0pgG1boWt3mftLsa+NlYsg8sYETy1Di9wbRPRr1oU+Og7IL4kaij3R/q SnFlGmdjZayNQa4eMkpkktcLJrnrENNRwEitjTagTF//P6j1zkcrJb5983VEYXUT XS/8vLTyxSM2B9hoeehs3Q34CfPKEuQj -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:59 2025 by rpki-client