$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: sxyit5hETbNVUpetZisSWfJ6QnzUYaaOq2T2+b3iUNo= Subject key identifier: A5:32:33:7F:4E:43:05:7B:24:CF:4A:8A:C7:B0:A5:A6:AA:79:4C:D3 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B06 Signing time: Thu 24 Apr 2025 16:18:53 +0000 Manifest this update: Thu 24 Apr 2025 16:18:52 +0000 Manifest next update: Thu 01 May 2025 16:18:52 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: s5X/3/wLXoytNFVe/IG1MKQG3gSzMIMaBoJfPL0AyKM=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6984 (0x1b48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Apr 24 16:18:52 2025 GMT Not After : May 1 16:18:52 2025 GMT Subject: CN=680a646c-af85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:07:c5:77:2f:58:f4:33:45:27:9b:8d:34: bf:97:d8:50:46:74:c5:e1:b4:e5:fb:23:05:90:61: 3e:72:bc:3a:95:eb:15:b9:21:2b:63:38:a7:77:a5: e6:42:5c:5b:67:33:99:34:4d:be:e0:26:16:7c:dc: 79:c4:ca:a2:15:e5:1a:20:df:20:f3:e3:84:0f:b1: b2:d0:73:aa:05:2c:b0:89:7e:92:cf:8d:a2:53:2b: 1e:bd:1d:5c:29:09:23:c3:bc:2c:aa:4d:b4:17:55: b5:43:c4:10:87:a9:7c:f8:7b:7a:fd:1b:15:46:26: 97:eb:1b:4b:13:7a:71:29:96:63:d8:11:50:ee:e8: 81:8d:ad:cf:6b:93:9a:11:3f:04:5d:bb:b6:b7:c0: c0:52:4f:49:19:ce:da:42:0e:f1:ae:7f:c8:c9:d0: 9a:5e:0b:29:e0:a9:0b:bb:b4:75:98:f4:14:6f:97: 95:3e:ac:e8:b7:f2:a6:88:c6:f9:17:18:58:32:89: 89:22:56:d4:db:8d:c9:45:fb:56:96:21:9e:3b:40: e9:d8:27:82:82:4d:bc:9f:4f:e1:ef:f3:53:d1:b5: 60:da:e5:f7:83:fd:54:4d:6d:34:27:0d:b5:36:ca: 82:3e:b2:bb:65:cd:82:eb:a1:41:f2:98:76:76:16: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:33:7F:4E:43:05:7B:24:CF:4A:8A:C7:B0:A5:A6:AA:79:4C:D3 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:af:27:c7:5c:21:45:43:a0:29:97:07:d7:1a:96:22:f5:ae: a4:9a:fd:d0:b1:68:44:56:f2:c1:05:c0:4f:ae:bd:8c:fe:c6: 40:4b:9f:8f:76:eb:78:98:12:76:12:a5:95:8e:65:87:e5:3e: 79:56:11:1a:2f:a0:5e:24:52:4c:40:2f:0d:32:ef:59:ea:a3: d3:0f:6b:53:a8:46:66:76:1d:af:02:29:bf:a1:3e:06:d7:2e: 54:1f:85:00:72:1d:58:d6:eb:3c:a9:78:17:a5:16:f2:8a:e6: f7:04:fb:05:90:09:dc:7b:60:76:b0:1b:fa:ae:e5:5a:2c:2a: 13:9a:76:e2:3a:34:da:d1:95:66:88:dc:70:ff:99:47:b3:84: 45:0a:22:8f:16:dd:9d:d3:9c:fc:81:08:42:bc:23:bf:ab:d3: 70:a0:72:1c:09:90:ce:59:cb:9c:6c:68:b3:21:fb:6d:33:d5: d6:6e:69:ec:f6:40:ae:14:e9:bd:df:98:ef:e8:3a:2b:ab:45: 23:7e:38:95:84:46:0e:36:64:b0:5b:df:50:68:37:67:dd:2d: 63:6b:6c:4d:3e:4a:0d:62:4c:b0:9d:f4:34:69:68:0b:8a:ea: 4c:66:5f:d7:02:f9:10:a6:a8:69:f0:0b:6c:41:d8:97:5a:3f: 6f:65:63:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwNDI0MTYxODUyWhcNMjUwNTAxMTYxODUyWjAYMRYwFAYD VQQDEw02ODBhNjQ2Yy1hZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyykHxXcvWPQzRSebjTS/l9hQRnTF4bTl+yMFkGE+crw6lesVuSErYzind6Xm QlxbZzOZNE2+4CYWfNx5xMqiFeUaIN8g8+OED7Gy0HOqBSywiX6Sz42iUysevR1c KQkjw7wsqk20F1W1Q8QQh6l8+Ht6/RsVRiaX6xtLE3pxKZZj2BFQ7uiBja3Pa5Oa ET8EXbu2t8DAUk9JGc7aQg7xrn/IydCaXgsp4KkLu7R1mPQUb5eVPqzot/KmiMb5 FxhYMomJIlbU243JRftWliGeO0Dp2CeCgk28n0/h7/NT0bVg2uX3g/1UTW00Jw21 NsqCPrK7Zc2C66FB8ph2dhasEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUyM39O QwV7JM9KisewpaaqeUzTMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANryfHXCFFQ6AplwfXGpYi9a6kmv3QsWhEVvLBBcBPrr2M/sZAS5+P dut4mBJ2EqWVjmWH5T55VhEaL6BeJFJMQC8NMu9Z6qPTD2tTqEZmdh2vAim/oT4G 1y5UH4UAch1Y1us8qXgXpRbyiub3BPsFkAnce2B2sBv6ruVaLCoTmnbiOjTa0ZVm iNxw/5lHs4RFCiKPFt2d05z8gQhCvCO/q9NwoHIcCZDOWcucbGizIfttM9XWbmns 9kCuFOm935jv6Dorq0UjfjiVhEYONmSwW99QaDdn3S1ja2xNPkoNYkywnfQ0aWgL iupMZl/XAvkQpqhp8AtsQdiXWj9vZWOR -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:48 2025 by rpki-client