$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json) Hash identifier: 9H9dra52qOGSxcXEJnIZMMzBJGvXXmy8T2TnjQT7w/8= Subject key identifier: ED:30:9E:68:F1:73:78:6B:50:F3:2A:9E:75:38:68:6E:BE:41:AE:46 Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft Manifest number: 01FF Signing time: Fri 25 Apr 2025 01:59:29 +0000 Manifest this update: Fri 25 Apr 2025 01:59:28 +0000 Manifest next update: Fri 02 May 2025 01:59:28 +0000 Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: EIwtTI6lPfOQZqCo9HV7ATpmWdrUBqhyyQ4iPFhBQJY=) 2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: bOpqrbhh4Bh4AWp/OZ52rop88bWyVMsrGceDfsrfghM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Validity Not Before: Apr 25 01:59:28 2025 GMT Not After : May 2 01:59:28 2025 GMT Subject: CN=680aec81-cf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:17:16:02:9c:3d:5b:4a:00:c4:19:45:a3: 2d:7b:be:6e:96:3f:ed:83:ff:5f:f4:77:e5:99:b5: b3:8a:89:36:2f:42:d1:a3:2b:a5:b5:76:40:62:9a: 59:48:af:82:5f:a0:e3:ae:c5:1f:21:c0:a7:e4:d7: fc:54:89:11:8b:c0:09:2b:3e:48:ad:7f:8a:0b:fc: 9b:f8:c0:f7:64:3f:43:45:b8:71:2a:d6:62:2a:21: 2b:e9:22:c3:a1:a6:a4:62:50:92:87:a4:0d:31:d3: 3d:e0:4f:d5:06:e2:35:07:69:15:c0:e3:3a:25:10: 31:d2:22:e7:3b:1d:32:25:b0:bf:91:c4:86:40:8e: 65:f9:d7:7c:0f:e6:97:df:9d:7b:cd:ca:25:3f:80: 70:0e:86:0f:ea:9d:b3:89:15:6a:a4:59:85:e5:86: 67:33:14:a9:d3:35:09:03:58:95:93:24:1c:f8:f8: 6c:4e:f1:a9:8b:5c:b6:15:bd:80:38:99:2f:81:97: 23:94:84:7a:7f:cf:4b:c1:5f:f5:76:6c:05:4a:26: 5a:1a:89:fd:e5:fa:77:55:e5:a6:32:7f:4f:78:d4: 5e:41:c1:9b:b4:1a:42:97:a0:ce:3c:99:c5:53:d4: 91:3a:ac:9c:64:2b:fd:23:8c:a0:45:05:6a:25:25: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:9E:68:F1:73:78:6B:50:F3:2A:9E:75:38:68:6E:BE:41:AE:46 X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:97:63:67:54:c4:29:b9:9c:9d:83:83:2b:52:12:3b:fc:c8: 50:b2:08:00:35:74:a3:6c:81:06:36:7d:1e:13:4b:9f:09:d2: 9e:be:75:9c:cc:80:df:c1:7e:41:35:9c:12:a2:60:61:6c:0c: 9c:e8:c9:e8:e3:a9:f9:e2:22:9a:e2:da:c6:1c:d0:cf:36:ac: 48:59:a3:fd:27:a2:b6:9d:37:e2:6a:a9:fe:bc:ea:88:bd:75: 01:82:67:15:88:38:16:84:3a:b9:63:a8:f8:54:b4:62:d8:7d: dc:4c:83:63:0b:86:0c:11:91:47:5e:29:07:01:c5:2c:09:e1: e3:90:2c:fa:f2:50:26:4f:8d:6a:00:71:e6:f6:52:31:0d:90: 93:c2:37:b4:8f:3a:80:55:da:76:c0:22:3d:80:5e:b4:5c:50: 49:68:fb:46:a3:b1:c5:f0:15:c9:1d:9a:ab:37:92:ae:3c:69: e9:81:cf:46:d7:31:e1:55:12:e3:4b:89:ea:80:bd:86:24:88: cc:cd:ff:88:63:aa:e1:7f:0a:ed:53:8c:56:e9:bd:9b:1d:c5: c3:ed:ad:4e:a8:5c:02:a9:ea:cd:f9:62:53:01:fe:3c:40:0b: 46:30:8d:40:bb:a1:4f:df:92:5f:b8:63:e4:7c:e3:4c:ce:a5: 65:f3:c5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjUwNDI1MDE1OTI4WhcNMjUwNTAyMDE1OTI4WjAYMRYwFAYD VQQDEw02ODBhZWM4MS1jZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p8XFgKcPVtKAMQZRaMte75ulj/tg/9f9HflmbWziok2L0LRoyultXZAYppZ SK+CX6DjrsUfIcCn5Nf8VIkRi8AJKz5IrX+KC/yb+MD3ZD9DRbhxKtZiKiEr6SLD oaakYlCSh6QNMdM94E/VBuI1B2kVwOM6JRAx0iLnOx0yJbC/kcSGQI5l+dd8D+aX 3517zcolP4BwDoYP6p2ziRVqpFmF5YZnMxSp0zUJA1iVkyQc+PhsTvGpi1y2Fb2A OJkvgZcjlIR6f89LwV/1dmwFSiZaGon95fp3VeWmMn9PeNReQcGbtBpCl6DOPJnF U9SROqycZCv9I4ygRQVqJSVA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0wnmjx c3hrUPMqnnU4aG6+Qa5GMB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh Rzg0dnJGN20zSGhiQUtreDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+l2NnVMQpuZydg4MrUhI7/MhQsggANXSjbIEGNn0eE0ufCdKevnWc zIDfwX5BNZwSomBhbAyc6Mno46n54iKa4trGHNDPNqxIWaP9J6K2nTfiaqn+vOqI vXUBgmcViDgWhDq5Y6j4VLRi2H3cTINjC4YMEZFHXikHAcUsCeHjkCz68lAmT41q AHHm9lIxDZCTwje0jzqAVdp2wCI9gF60XFBJaPtGo7HF8BXJHZqrN5KuPGnpgc9G 1zHhVRLjS4nqgL2GJIjMzf+IY6rhfwrtU4xW6b2bHcXD7a1OqFwCqerN+WJTAf48 QAtGMI1Au6FP35JfuGPkfONMzqVl88W9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:47 2025 by rpki-client