$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: wSBWimlzMILuVrvlAfdNoTiAzC2TNa0Jri7rgfE0nzE= Subject key identifier: 16:6F:55:95:A9:27:3D:29:93:CB:E3:95:B3:F9:D1:02:B9:66:24:9C Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 34C7 Signing time: Thu 24 Apr 2025 14:38:43 +0000 Manifest this update: Thu 24 Apr 2025 14:38:43 +0000 Manifest next update: Thu 01 May 2025 14:38:43 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: QV5EF+SPedK2HvJyiLrUG59zsQhgPDhRt3J30hHZ+hQ=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13584 (0x3510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 24 14:38:43 2025 GMT Not After : May 1 14:38:43 2025 GMT Subject: CN=680a4cf3-20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:e6:65:cc:31:49:e0:51:55:1d:59:ed:c5: 71:5c:9f:b2:c6:bb:5e:d1:c1:62:ec:f4:0e:99:0a: 15:ad:83:f8:1e:43:35:42:24:12:27:4f:0b:e7:29: a0:ec:ab:f8:ea:c6:c1:b4:cf:48:79:fa:0c:3f:60: ce:88:9e:0d:0e:20:11:af:c2:58:b1:42:f4:81:2f: 28:3d:c7:cd:e9:14:45:25:27:4c:16:63:29:c4:9c: b4:95:59:78:ff:4c:c4:50:e2:09:4a:dd:33:10:31: 68:a8:27:17:a9:8d:e4:9a:b3:ca:ce:ec:08:72:24: 53:71:ed:a2:25:48:81:ac:00:ff:a2:43:a3:e3:8e: e4:ff:b2:af:b8:0e:26:de:7a:fd:64:ef:20:b7:41: fc:9d:1d:9a:54:68:66:21:0e:8f:51:e1:35:af:8a: 86:6c:d6:00:96:c8:3b:70:e5:8e:ff:47:46:05:95: 3d:a3:07:27:1b:d3:8b:7a:3a:cd:e8:36:01:c5:72: 9b:cd:3a:63:38:25:91:2d:89:c3:b0:9f:e9:0b:dd: 3a:4f:c1:d5:58:5d:62:a1:8c:4a:6d:c4:1b:51:fa: a7:31:b6:52:60:7f:5a:26:9b:d8:c3:6f:9b:fe:0e: 07:58:c6:1f:fb:06:96:ba:5a:b5:8d:3c:40:a6:b9: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6F:55:95:A9:27:3D:29:93:CB:E3:95:B3:F9:D1:02:B9:66:24:9C X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:c3:ba:1b:ec:fb:12:9f:d9:4f:bc:06:97:26:2f:45:72: ad:e8:06:89:c3:bd:3f:19:01:cd:b0:78:eb:dd:18:b7:58:10: d3:ce:1e:95:9a:82:28:1e:08:33:34:96:9f:58:3d:a2:33:ca: 36:b0:cd:b8:70:44:55:23:fe:a8:13:f9:3c:2e:f3:34:2a:0b: 1d:a4:c9:9b:08:dc:26:bd:66:58:7e:3b:cf:34:3f:cb:84:f1: 36:db:7f:6f:35:59:ff:81:71:8a:64:c1:41:14:ee:2b:fc:70: e9:58:0b:a4:f6:5a:14:11:dd:9b:18:b3:ee:dd:b0:7e:65:33: 6d:6e:31:07:91:1e:89:bd:77:b8:f5:54:d8:e7:c2:be:7a:aa: dd:98:36:a7:57:ed:89:f7:78:86:e0:2d:68:55:e1:16:ea:94: 67:19:8b:7f:a2:d3:6f:0e:87:21:b7:98:8c:12:d6:cd:60:b7: b9:c6:f5:5f:8b:e7:c6:ab:fd:34:a8:f2:0a:d4:90:89:e4:21: fc:5f:14:38:48:9d:d1:1d:1c:dd:7c:f7:3e:88:f3:1c:dc:45: 3e:a8:b8:d9:b2:6a:43:99:97:11:44:d7:3b:5b:50:9f:ef:88: 8a:9a:e5:f8:0a:22:f8:cf:41:fd:46:e1:43:6e:4e:3b:e7:29: d8:a9:b0:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwNDI0MTQzODQzWhcNMjUwNTAxMTQzODQzWjAYMRYwFAYD VQQDEw02ODBhNGNmMy0yMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmu3mZcwxSeBRVR1Z7cVxXJ+yxrte0cFi7PQOmQoVrYP4HkM1QiQSJ08L5ymg 7Kv46sbBtM9IefoMP2DOiJ4NDiARr8JYsUL0gS8oPcfN6RRFJSdMFmMpxJy0lVl4 /0zEUOIJSt0zEDFoqCcXqY3kmrPKzuwIciRTce2iJUiBrAD/okOj447k/7KvuA4m 3nr9ZO8gt0H8nR2aVGhmIQ6PUeE1r4qGbNYAlsg7cOWO/0dGBZU9owcnG9OLejrN 6DYBxXKbzTpjOCWRLYnDsJ/pC906T8HVWF1ioYxKbcQbUfqnMbZSYH9aJpvYw2+b /g4HWMYf+waWulq1jTxAprnZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZvVZWp Jz0pk8vjlbP50QK5ZiScMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSfsO6G+z7Ep/ZT7wGlyYvRXKt6AaJw70/GQHNsHjr3Ri3WBDTzh6V moIoHggzNJafWD2iM8o2sM24cERVI/6oE/k8LvM0KgsdpMmbCNwmvWZYfjvPND/L hPE2239vNVn/gXGKZMFBFO4r/HDpWAuk9loUEd2bGLPu3bB+ZTNtbjEHkR6JvXe4 9VTY58K+eqrdmDanV+2J93iG4C1oVeEW6pRnGYt/otNvDocht5iMEtbNYLe5xvVf i+fGq/00qPIK1JCJ5CH8XxQ4SJ3RHRzdfPc+iPMc3EU+qLjZsmpDmZcRRNc7W1Cf 74iKmuX4CiL4z0H9RuFDbk475ynYqbDS -----END CERTIFICATE-----Generated at Sat Apr 26 04:41:19 2025 by rpki-client