$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: wfEBzq4sCWN1J3pfbFX3aypelcbU+gFv44CcWFHqIxY= Subject key identifier: 1C:B9:6D:1F:F1:24:33:17:61:C5:A4:C7:D6:3A:46:CB:5B:41:9A:5C Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: 01AE Signing time: Fri 25 Apr 2025 02:27:26 +0000 Manifest this update: Fri 25 Apr 2025 02:27:26 +0000 Manifest next update: Fri 02 May 2025 02:27:26 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: t+fY8LTHnDfuIFZSNJhVO7s4JsBkunTgN/1T5qoulaE=) 2: F8582E301E6411EF99A50843C4F9AE02.roa (hash: ShXADDJpnj7w4eyyUS0fvnc0x0GGma16cf7GD5v3SiE=) 3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: Apr 25 02:27:26 2025 GMT Not After : May 2 02:27:26 2025 GMT Subject: CN=680af30e-9570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:15:50:52:c6:32:14:4c:d3:db:38:1f:35: 1c:f9:38:4d:6c:73:40:00:fb:b0:68:5b:8e:87:ce: cd:da:81:59:86:91:0d:d9:3d:b7:8c:8b:49:fd:d2: 8b:25:c2:11:69:c1:2d:61:d7:a9:f6:c8:d8:9d:54: b0:b9:e5:5a:02:38:fd:b3:b1:69:33:c3:c6:8c:3a: ac:8e:43:bf:ac:e4:97:8d:32:b3:79:57:40:c0:0e: 5b:66:8c:ce:03:5a:07:5b:68:69:20:c8:61:86:d3: 33:5f:72:23:f2:ab:6d:a9:f4:f5:5e:5f:fe:a1:2d: ec:38:87:2d:84:12:bd:cd:a9:e2:b0:c5:7f:31:32: 50:a3:f0:dc:64:48:77:f7:ff:11:00:dc:fa:18:12: 66:4d:c9:7b:c2:2a:cb:cb:30:32:14:4a:fd:b7:dd: da:76:1e:39:8f:dc:26:02:0c:4f:39:9a:7c:e8:14: 4a:66:00:36:d2:b9:74:e2:9e:af:d6:50:fc:28:c9: f4:4d:eb:91:82:99:e9:ac:27:39:f1:72:8f:91:51: 13:cc:36:1b:62:de:85:65:00:01:ea:aa:73:d5:03: 6e:d1:bf:92:f6:47:14:05:63:9c:9d:88:4c:3a:d3: 82:54:05:eb:76:47:ca:53:6c:1e:46:92:45:54:cb: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B9:6D:1F:F1:24:33:17:61:C5:A4:C7:D6:3A:46:CB:5B:41:9A:5C X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:59:7b:68:8d:fb:4f:88:40:34:f4:fd:69:3a:e3:f8:08:99: a5:b2:37:5a:77:d1:87:0d:64:93:ce:9d:68:d1:2d:16:c5:2c: e4:2c:0e:51:cf:8d:8a:ae:74:f1:2b:58:bd:83:1f:a7:f5:ab: c1:93:86:95:d1:e9:cb:d6:9a:43:d5:35:83:2e:1d:3d:f8:cd: 04:ff:27:2a:a6:56:42:a6:ee:71:ac:17:5c:df:a9:36:74:3e: 30:5b:78:18:a7:ce:4e:72:07:de:59:2d:f4:54:3f:8a:2d:dd: ce:51:5f:6a:6d:04:c6:3c:5b:3d:57:52:32:14:36:97:5b:11: e0:33:93:ab:fc:81:a5:ab:b8:47:7d:1f:13:52:71:46:af:b6: 3c:b0:b9:6c:c3:36:ad:b4:ba:80:a3:4b:b6:21:45:ef:ea:6a: 47:cf:0e:57:33:23:10:02:72:c8:4d:c4:3e:7c:a3:11:f8:48: 29:6e:8d:5a:ed:4b:5d:f2:09:1d:0c:42:6d:02:6f:38:5b:9c: 33:41:22:13:d6:e1:d3:53:85:f7:e4:13:dd:5e:44:da:ad:41: 58:a4:a3:44:71:de:f4:41:b8:47:00:80:07:52:6f:d0:80:e2: 72:72:d1:93:bc:12:ae:dc:2f:df:fe:df:0a:00:15:c0:b0:ea: e9:be:3f:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjUwNDI1MDIyNzI2WhcNMjUwNTAyMDIyNzI2WjAYMRYwFAYD VQQDEw02ODBhZjMwZS05NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6AVUFLGMhRM09s4HzUc+ThNbHNAAPuwaFuOh87N2oFZhpEN2T23jItJ/dKL JcIRacEtYdep9sjYnVSwueVaAjj9s7FpM8PGjDqsjkO/rOSXjTKzeVdAwA5bZozO A1oHW2hpIMhhhtMzX3Ij8qttqfT1Xl/+oS3sOIcthBK9zanisMV/MTJQo/DcZEh3 9/8RANz6GBJmTcl7wirLyzAyFEr9t93adh45j9wmAgxPOZp86BRKZgA20rl04p6v 1lD8KMn0TeuRgpnprCc58XKPkVETzDYbYt6FZQAB6qpz1QNu0b+S9kcUBWOcnYhM OtOCVAXrdkfKU2weRpJFVMu2bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBy5bR/x JDMXYcWkx9Y6RstbQZpcMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUWXtojftPiEA09P1pOuP4CJmlsjdad9GHDWSTzp1o0S0WxSzkLA5R z42KrnTxK1i9gx+n9avBk4aV0enL1ppD1TWDLh09+M0E/ycqplZCpu5xrBdc36k2 dD4wW3gYp85OcgfeWS30VD+KLd3OUV9qbQTGPFs9V1IyFDaXWxHgM5Or/IGlq7hH fR8TUnFGr7Y8sLlswzattLqAo0u2IUXv6mpHzw5XMyMQAnLITcQ+fKMR+Egpbo1a 7Utd8gkdDEJtAm84W5wzQSIT1uHTU4X35BPdXkTarUFYpKNEcd70QbhHAIAHUm/Q gOJyctGTvBKu3C/f/t8KABXAsOrpvj8L -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:28 2025 by rpki-client