$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft File: Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json) Hash identifier: /PyxyWodzQ5cVWBEpwj5+Dd5DsXqNEfcdyDDi4K+vGo= Subject key identifier: F6:4A:B4:F2:98:3C:6B:6D:2E:40:6F:E6:C1:38:F8:AD:A8:55:08:E9 Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 Certificate issuer: /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft Manifest number: 02B0 Signing time: Fri 25 Apr 2025 01:15:59 +0000 Manifest this update: Fri 25 Apr 2025 01:15:58 +0000 Manifest next update: Fri 02 May 2025 01:15:58 +0000 Files and hashes: 1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: WYDP7zMklPVrmriadvW7i2vVP5VBmNRiJFZC6B2/p50=) 2: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=) 3: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=) 4: 6B18B650ADB311EF8CC1FB7BC4F9AE02.roa (hash: k9zAAHn9EIQpLq7EiBS7GWyLVtI0EwocRCBQ5ijC7AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Validity Not Before: Apr 25 01:15:58 2025 GMT Not After : May 2 01:15:58 2025 GMT Subject: CN=680ae24f-4453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:29:46:4c:16:7a:31:39:5c:b2:7b:47:7c: 9c:23:a4:32:17:50:a9:b0:cf:61:2d:03:03:5a:83: 1a:34:df:79:27:f4:48:0a:bf:38:52:a3:0a:eb:58: d6:05:41:31:9e:c3:10:1d:49:a0:d2:70:c8:23:e7: 81:f7:fa:00:86:ae:ae:85:8a:f9:51:69:62:94:b2: e5:a1:21:31:99:30:4b:8d:47:00:bb:c1:bd:82:87: 44:5f:0a:b8:46:14:7e:1d:37:38:7f:4b:25:c5:8d: 14:2c:9d:ad:ad:ef:00:07:1e:76:88:18:b4:eb:dd: a0:de:85:4a:73:fd:fa:da:27:08:da:cb:82:d8:2a: b6:79:f4:f7:3b:ed:57:ab:54:f4:03:c8:79:4f:03: 97:06:1d:3a:9c:46:f2:b4:ff:30:85:98:ae:6c:c8: df:cc:58:8d:e2:12:67:d5:aa:f8:6c:e1:86:58:2d: ca:de:b6:1d:ee:90:28:b0:85:10:c9:23:4b:da:b0: 98:24:9f:60:c6:1b:a2:44:d6:ea:30:ec:03:da:c9: e3:4f:ca:e7:17:27:bf:cd:5e:96:ee:7c:65:ed:14: 42:38:f1:8a:99:99:9a:25:40:81:ab:17:07:b4:96: 8b:8d:78:21:af:d1:7a:0a:5e:82:d0:79:f2:f1:b4: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4A:B4:F2:98:3C:6B:6D:2E:40:6F:E6:C1:38:F8:AD:A8:55:08:E9 X509v3 Authority Key Identifier: keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:a9:6d:22:1d:b2:3e:05:16:ac:53:61:3c:d6:90:0e:f7: 68:1b:ef:1e:7e:08:0d:6e:53:d6:88:dd:42:66:30:91:1f:70: 40:57:98:4f:92:0f:97:39:b7:84:ff:8d:48:9f:3b:a3:54:0b: 0f:c3:8c:78:aa:04:c5:ff:22:3b:56:cc:be:89:5e:4d:63:9b: ff:86:54:45:10:ef:c6:64:0c:ea:89:2f:49:04:c9:ed:10:74: b7:91:24:05:64:93:8f:ad:57:ee:ec:29:05:d6:a5:f3:d4:c9: 55:b9:a9:ff:0c:c3:27:0a:ae:1d:4d:c2:ce:07:e2:9a:8a:02: b9:c8:f2:d4:07:22:7e:23:76:29:b1:e0:63:d3:6e:cb:e8:a5: 7e:7f:b4:68:ca:eb:91:60:77:eb:7b:e6:c0:e9:63:1c:51:ae: 4b:8c:b4:26:ea:ab:17:44:d3:99:2a:80:3f:1f:a6:fd:cc:91: bf:ef:4f:ad:1a:8e:22:62:23:46:0b:b5:f8:f3:7a:4e:f2:35: b5:cd:c2:9a:cf:29:83:2b:9f:93:59:08:22:44:cb:c7:a1:21: d8:0a:ca:88:cd:f1:05:23:6b:5f:04:e8:0b:c8:e4:3d:e8:82: f9:64:af:53:75:5b:be:f8:15:78:b0:d3:08:28:13:11:dc:94: 8b:d8:7e:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBQzQxMTAvBgNVBAUTKDFGMDkyQkYwRTM2N0ZEQTUxNDZEMjg3RDgxMDJCMjZF QzhGQjgyQjUwHhcNMjUwNDI1MDExNTU4WhcNMjUwNTAyMDExNTU4WjAYMRYwFAYD VQQDEw02ODBhZTI0Zi00NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdspRkwWejE5XLJ7R3ycI6QyF1CpsM9hLQMDWoMaNN95J/RICr84UqMK61jW BUExnsMQHUmg0nDII+eB9/oAhq6uhYr5UWlilLLloSExmTBLjUcAu8G9godEXwq4 RhR+HTc4f0slxY0ULJ2tre8ABx52iBi0692g3oVKc/362icI2suC2Cq2efT3O+1X q1T0A8h5TwOXBh06nEbytP8whZiubMjfzFiN4hJn1ar4bOGGWC3K3rYd7pAosIUQ ySNL2rCYJJ9gxhuiRNbqMOwD2snjT8rnFye/zV6W7nxl7RRCOPGKmZmaJUCBqxcH tJaLjXghr9F6Cl6C0Hny8bR+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZKtPKY PGttLkBv5sE4+K2oVQjpMB8GA1UdIwQYMBaAFB8JK/DjZ/2lFG0ofYECsm7I+4K1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUFDNC8xQ0I1M0YzMEY2 QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9hVVViU2g5Z1FLeWJzajdn clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h3a3I4T05uX2FVVWJTaDlnUUt5YnNqN2dyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUFDNC8xQ0I1M0YzMEY2QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9h VVViU2g5Z1FLeWJzajdnclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRoaltIh2yPgUWrFNhPNaQDvdoG+8efggNblPWiN1CZjCRH3BAV5hP kg+XObeE/41InzujVAsPw4x4qgTF/yI7Vsy+iV5NY5v/hlRFEO/GZAzqiS9JBMnt EHS3kSQFZJOPrVfu7CkF1qXz1MlVuan/DMMnCq4dTcLOB+KaigK5yPLUByJ+I3Yp seBj027L6KV+f7RoyuuRYHfre+bA6WMcUa5LjLQm6qsXRNOZKoA/H6b9zJG/70+t Go4iYiNGC7X483pO8jW1zcKazymDK5+TWQgiRMvHoSHYCsqIzfEFI2tfBOgLyOQ9 6IL5ZK9TdVu++BV4sNMIKBMR3JSL2H7A -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:43 2025 by rpki-client