$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: dotjUFNkKgE0GHWusyRTp8UkKOW37klVjELrnBjVfSs= Subject key identifier: DA:CF:B0:A2:12:2C:15:6A:F6:50:9F:4D:AD:96:E3:65:8D:42:C9:7C Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 13F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 13F0 Signing time: Thu 24 Apr 2025 17:15:46 +0000 Manifest this update: Thu 24 Apr 2025 17:15:45 +0000 Manifest next update: Thu 01 May 2025 17:15:45 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: yViIniNrcnfTAzgy1najrr98GgKa6BjHUL4eFMvc3D0=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5113 (0x13f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Apr 24 17:15:45 2025 GMT Not After : May 1 17:15:45 2025 GMT Subject: CN=680a71c2-b07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:85:fd:07:f3:55:d0:e0:89:15:e1:b7:22:b1: 83:80:fb:77:6c:3f:43:4c:5c:33:56:54:51:21:3f: 60:b6:3e:d1:40:6c:fb:12:86:f0:d4:d5:80:87:6b: 03:df:52:9a:01:3e:e9:8d:51:f2:0d:1a:41:c4:b8: f8:1c:d2:8f:ad:2e:fa:0c:97:ab:e9:71:70:a7:1f: f6:87:28:6e:2c:2c:6f:8f:27:21:d9:65:ef:5f:bc: c2:fc:c9:f0:62:e1:d5:e4:17:f2:27:ed:25:6f:c0: 3c:ad:bc:2d:98:8e:4e:b1:dc:6d:a1:31:67:16:f9: 38:ce:98:17:c2:bb:48:35:a9:98:e0:9e:ef:04:a9: 0f:57:b7:0f:f2:21:ad:3b:a7:2a:d2:93:6c:37:b6: 2c:67:a2:c8:b7:20:d5:b5:ef:74:2e:e2:10:56:2b: d2:ab:ae:df:e8:80:87:30:9f:5f:7b:53:5d:4b:f8: e0:d2:aa:1e:05:07:da:b9:41:cd:14:7f:85:15:e4: 82:65:7d:5f:cf:fd:4a:9d:9f:c4:6f:ac:b3:72:8b: c2:0c:1b:1b:d7:83:71:ea:be:55:23:cb:c7:92:2e: 44:72:7d:d0:bd:c5:1c:dd:93:f5:0c:b1:bd:09:c3: 68:49:35:be:64:72:bb:5c:79:7b:02:93:5a:0f:6f: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:B0:A2:12:2C:15:6A:F6:50:9F:4D:AD:96:E3:65:8D:42:C9:7C X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:77:7b:38:cb:8b:60:d8:2a:7b:a9:24:8b:3c:65:ea:50:d6: 94:c0:b8:00:7e:08:50:71:45:13:f1:a7:15:98:e2:39:1f:09: 2a:1a:6a:95:33:c9:ce:cb:58:eb:fb:03:c0:a3:a8:30:7b:26: 17:de:b7:5f:e3:19:a2:ad:5c:a8:ec:b0:73:e0:3f:67:7b:31: 42:82:3b:aa:27:5f:8d:d1:63:83:49:1a:98:88:3c:86:c9:09: 1d:1d:10:ab:c3:42:71:53:21:9a:06:20:a0:77:1d:97:9b:d0: 2e:50:70:8f:a4:da:68:c1:66:01:17:92:ac:f6:58:81:1d:72: 09:7e:77:5c:ae:74:40:f3:eb:99:5c:e0:b5:19:28:45:7f:ad: 1d:03:5f:27:e9:13:ed:b8:e5:51:08:ea:0e:31:16:71:a1:5b: c3:1e:2a:bd:33:51:47:0d:8c:ae:db:e8:50:d3:4b:c2:99:dc: eb:55:b0:24:44:08:85:60:5d:a1:63:75:b6:b5:3d:a3:fb:a6: 84:05:30:b8:27:49:8a:9b:c6:0a:77:a3:5e:c9:31:16:f2:76: 9f:c0:45:d7:2f:71:53:cf:03:63:7c:d7:d2:61:a0:5b:a8:6c: 10:3f:f4:7e:be:1a:1b:fc:99:37:42:3e:92:92:6b:d9:29:d1: 09:ae:f9:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUwNDI0MTcxNTQ1WhcNMjUwNTAxMTcxNTQ1WjAYMRYwFAYD VQQDEw02ODBhNzFjMi1iMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oX9B/NV0OCJFeG3IrGDgPt3bD9DTFwzVlRRIT9gtj7RQGz7Eobw1NWAh2sD 31KaAT7pjVHyDRpBxLj4HNKPrS76DJer6XFwpx/2hyhuLCxvjych2WXvX7zC/Mnw YuHV5BfyJ+0lb8A8rbwtmI5OsdxtoTFnFvk4zpgXwrtINamY4J7vBKkPV7cP8iGt O6cq0pNsN7YsZ6LItyDVte90LuIQVivSq67f6ICHMJ9fe1NdS/jg0qoeBQfauUHN FH+FFeSCZX1fz/1KnZ/Eb6yzcovCDBsb14Nx6r5VI8vHki5Ecn3QvcUc3ZP1DLG9 CcNoSTW+ZHK7XHl7ApNaD2/gmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrPsKIS LBVq9lCfTa2W42WNQsl8MB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWd3s4y4tg2Cp7qSSLPGXqUNaUwLgAfghQcUUT8acVmOI5HwkqGmqV M8nOy1jr+wPAo6gweyYX3rdf4xmirVyo7LBz4D9nezFCgjuqJ1+N0WODSRqYiDyG yQkdHRCrw0JxUyGaBiCgdx2Xm9AuUHCPpNpowWYBF5Ks9liBHXIJfndcrnRA8+uZ XOC1GShFf60dA18n6RPtuOVRCOoOMRZxoVvDHiq9M1FHDYyu2+hQ00vCmdzrVbAk RAiFYF2hY3W2tT2j+6aEBTC4J0mKm8YKd6NeyTEW8nafwEXXL3FTzwNjfNfSYaBb qGwQP/R+vhob/Jk3Qj6SkmvZKdEJrvk5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:59 2025 by rpki-client