$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: D8MomzE5qMkA9G6NWwPzrSlmjd936/BDLSLTwfN9dp4= Subject key identifier: 77:4B:D8:8F:78:9B:EB:8F:DE:1D:3C:28:C7:DE:5E:8A:3A:DF:FB:55 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 53 Signing time: Fri 25 Apr 2025 06:23:32 +0000 Manifest this update: Fri 25 Apr 2025 06:23:32 +0000 Manifest next update: Fri 02 May 2025 06:23:32 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: md1xUpej/OXfjqjlYXEdBymyg+ML3sdc1JuxYoTXcR4=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: B6GTUBQJjZfy0L/2y0BwFYd9G60axGsfhhHtTmQD3Vw=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: MaCtkavFP9h6cbzbI+/48yQalN3EQ9/HSWusPsbFrP0=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: 8ewBwE8XstXeeqmSvgrbIwTd2CEtwyCXsNRMX6ARDE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Apr 25 06:23:32 2025 GMT Not After : May 2 06:23:32 2025 GMT Subject: CN=680b2a64-7dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:df:a0:ca:ca:88:4e:04:d7:e4:25:b8:28: 74:d9:49:c2:d3:cf:1f:e9:78:28:a9:39:b1:7b:8c: f5:61:2d:40:d0:64:a0:cc:b3:7d:83:ea:7f:c0:c6: 44:99:3a:d4:07:6c:e5:3d:6f:2f:51:b5:23:fa:be: 50:99:42:11:f6:86:4d:1e:0e:7e:ff:d3:51:3f:bd: 7e:82:96:29:b2:49:ac:9b:b7:93:8a:98:2e:51:58: ea:31:be:f7:5c:08:a7:24:1e:60:7e:49:b6:54:c6: 57:2a:71:91:bb:63:91:b4:c3:05:df:da:e4:0b:89: 19:51:ff:16:b1:cb:1a:f8:aa:94:84:fe:c4:e8:bc: 76:71:c5:67:67:cb:24:0a:8e:18:6e:a3:28:47:9e: cf:f1:65:21:6e:2a:71:1d:1a:be:b6:cf:bd:68:a7: 85:72:d2:84:ea:9f:88:29:a4:70:14:c4:c4:c7:5c: 85:73:5b:bd:30:9c:23:4b:84:7f:f8:79:b7:35:df: f7:ba:fb:6c:05:ae:5b:44:bf:4b:9d:92:fc:67:87: 03:11:e9:ab:6f:ed:fb:77:87:d4:21:27:96:ac:ea: ea:47:f6:ba:c9:04:8c:a7:04:73:e5:10:8c:b8:ce: 81:ba:bb:cb:a8:65:ef:01:5a:b3:e4:ad:41:ac:00: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4B:D8:8F:78:9B:EB:8F:DE:1D:3C:28:C7:DE:5E:8A:3A:DF:FB:55 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:05:6c:c8:20:e8:a8:ed:bb:ac:ca:bf:6b:a3:fe:77:ab:1b: 86:fb:a4:16:e9:47:e1:77:1b:4e:22:3e:4a:8d:d2:67:05:ce: 23:67:a9:a7:8f:50:ba:cc:5c:5d:1b:da:88:5b:61:d7:40:89: 3b:b4:b1:87:a1:a3:f5:88:52:2c:f9:26:d4:e1:45:ed:a4:e0: dd:a6:fd:92:86:b7:2a:9c:a3:e9:6c:f1:36:c3:9a:81:5e:5e: 60:00:a9:2c:02:b9:b7:5f:4b:fa:05:35:a8:c7:33:4d:84:05: 3b:56:25:cb:db:cf:b8:ec:ae:b6:b3:6a:97:51:86:bd:72:33: 46:75:07:b8:a0:0e:49:93:9f:04:f6:b2:cb:28:91:67:8f:4b: 67:e3:48:6d:ab:5c:57:7b:1b:43:a9:03:8a:71:c9:8e:e4:48: 86:ce:57:de:18:cc:38:05:05:71:3d:b5:2c:91:15:9f:06:a4: a7:47:a7:a6:91:62:e6:4f:78:19:d9:e9:41:3b:0e:77:77:84: bf:f4:be:ad:76:f8:c5:df:6f:4e:ce:d4:e9:d0:31:30:62:d9: ae:4e:27:b8:0d:61:6d:02:62:c0:0c:27:32:49:13:dd:c9:e8: 66:82:3d:75:7a:4c:8b:fa:46:c2:08:8e:35:d3:6e:31:f0:01: e6:54:5c:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJFRjExMC8GA1UEBRMoODcxOTdGRDU0NkRDMzE1MjMxMTFERDkzOTBCMUJBM0Yz RDcwMjY1NjAeFw0yNTA0MjUwNjIzMzJaFw0yNTA1MDIwNjIzMzJaMBgxFjAUBgNV BAMTDTY4MGIyYTY0LTdkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLwd+gysqITgTX5CW4KHTZScLTzx/peCipObF7jPVhLUDQZKDMs32D6n/AxkSZ OtQHbOU9by9RtSP6vlCZQhH2hk0eDn7/01E/vX6ClimySaybt5OKmC5RWOoxvvdc CKckHmB+SbZUxlcqcZG7Y5G0wwXf2uQLiRlR/xaxyxr4qpSE/sTovHZxxWdnyyQK jhhuoyhHns/xZSFuKnEdGr62z71op4Vy0oTqn4gppHAUxMTHXIVzW70wnCNLhH/4 ebc13/e6+2wFrltEv0udkvxnhwMR6atv7ft3h9QhJ5as6upH9rrJBIynBHPlEIy4 zoG6u8uoZe8BWrPkrUGsAJqRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd0vYj3ib 64/eHTwox95eijrf+1UwHwYDVR0jBBgwFoAUhxl/1UbcMVIxEd2TkLG6Pz1wJlYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkVGL0ZDNjUwQjcyQjcx RDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0ps WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHhsXzFVYmNNVkl4RWQyVGtMRzZQejF3SmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkVGL0ZDNjUwQjcyQjcxRDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJ eEVkMlRrTEc2UHoxd0psWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgFbMgg6Kjtu6zKv2uj/nerG4b7pBbpR+F3G04iPkqN0mcFziNnqaeP ULrMXF0b2ohbYddAiTu0sYeho/WIUiz5JtThRe2k4N2m/ZKGtyqco+ls8TbDmoFe XmAAqSwCubdfS/oFNajHM02EBTtWJcvbz7jsrrazapdRhr1yM0Z1B7igDkmTnwT2 sssokWePS2fjSG2rXFd7G0OpA4pxyY7kSIbOV94YzDgFBXE9tSyRFZ8GpKdHp6aR YuZPeBnZ6UE7Dnd3hL/0vq12+MXfb07O1OnQMTBi2a5OJ7gNYW0CYsAMJzJJE93J 6GaCPXV6TIv6RsIIjjXTbjHwAeZUXJw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:05:58 2025 by rpki-client