$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json) Hash identifier: bbtvBzZuM5kcMLNhr23K6P96iVsEXbAWb4LXBUPZvz0= Subject key identifier: 98:8F:80:FE:02:DB:C7:F9:0A:F8:8E:7D:7E:64:4A:17:87:F6:88:4B Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft Manifest number: 015A Signing time: Fri 25 Apr 2025 03:10:25 +0000 Manifest this update: Fri 25 Apr 2025 03:10:25 +0000 Manifest next update: Fri 02 May 2025 03:10:25 +0000 Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: xzUlU7KVEafuiMQe4BTqMihYGkJD7ziKMduRc6Gqs90=) 2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: 1DTHOwSIeyOlP/85nvDSKsIu+CBj2ErQg5LShUWz4KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Validity Not Before: Apr 25 03:10:25 2025 GMT Not After : May 2 03:10:25 2025 GMT Subject: CN=680afd21-d9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:e5:cf:bb:82:f0:f2:27:27:b7:c1:c7:60: 07:ec:13:bd:1d:9f:88:45:5a:75:00:c4:a5:30:43: 7d:d4:15:f4:f7:36:4f:b6:d3:a6:e9:34:25:f5:5d: 3a:f1:01:34:40:3f:cf:08:51:54:99:91:55:15:5e: 10:15:ea:ed:4b:3b:03:5e:23:20:8b:c6:15:fa:14: 85:45:3c:ad:bf:2b:d4:56:35:c1:37:27:69:b8:12: cc:d3:3a:7c:2f:bf:57:2f:1a:56:e4:99:24:9c:95: 9c:a1:0d:95:6c:4f:85:04:03:5f:b8:44:c8:59:5e: e0:a1:1f:14:d3:26:b2:89:44:3c:b0:df:0b:c0:00: 64:bc:40:8c:9a:fd:1f:8f:eb:f9:81:76:ed:0f:ce: 79:21:92:f4:7f:a1:2f:15:c3:38:a0:9c:45:9d:11: 37:ed:11:b1:71:83:a1:bb:0e:cd:59:ef:6a:0b:84: dd:69:f0:ff:fa:59:df:99:a1:14:b0:d7:98:22:88: b4:19:b5:f4:57:fd:dd:3a:16:70:2a:f6:25:61:e7: 86:b9:6d:6c:47:f8:a5:67:ef:df:96:41:9b:af:e5: 8f:bf:00:e3:ad:2f:c8:69:c4:d7:1a:89:4b:17:9a: 5e:a9:9e:a5:23:bf:ae:e0:35:06:50:e9:82:70:10: b9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8F:80:FE:02:DB:C7:F9:0A:F8:8E:7D:7E:64:4A:17:87:F6:88:4B X509v3 Authority Key Identifier: keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9c:af:0b:77:24:5f:ed:bc:54:ed:ad:75:e0:54:32:1e:28: e1:05:cf:5f:80:ba:0e:57:f2:18:e3:3d:f7:5e:67:03:0c:a9: 4b:ee:24:e8:9c:69:2c:44:e1:18:e4:d7:36:e8:2f:6b:97:14: 61:4f:a7:1e:c2:3c:e3:ad:b8:da:75:88:d3:94:3e:f4:b9:6f: 84:6e:12:cf:bc:b7:86:ca:38:74:1c:9e:46:65:f4:a8:8b:a8: 79:0b:71:ed:c7:76:17:1a:79:f3:3b:c4:38:af:12:97:12:bc: 2b:8e:9e:29:b3:c2:a4:08:6d:6c:97:dc:ca:b3:4c:60:4d:c0: f1:52:5c:eb:bd:31:e6:dc:dd:dc:6f:59:35:22:26:f6:ae:b7: 3b:15:22:88:e7:ec:d7:64:f9:e1:35:2e:45:a8:bb:ac:17:95: 9d:53:49:34:a1:3f:20:29:cd:92:74:9d:28:7f:eb:24:66:94: ae:5f:69:7a:3f:9a:81:b4:53:c0:e3:3f:c0:db:e0:ac:bc:ab: 11:68:86:3d:30:3a:ca:e9:91:9c:00:f0:bb:72:15:c4:ca:cb: 97:a2:eb:d1:80:91:80:1c:7f:e5:6f:1f:17:79:10:7d:70:0d: 9b:8e:83:f3:d6:7c:ab:9c:74:d1:4c:11:01:cc:de:38:75:95: 6a:15:71:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5 REM4NTI3RjIwHhcNMjUwNDI1MDMxMDI1WhcNMjUwNTAyMDMxMDI1WjAYMRYwFAYD VQQDEw02ODBhZmQyMS1kOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArozlz7uC8PInJ7fBx2AH7BO9HZ+IRVp1AMSlMEN91BX09zZPttOm6TQl9V06 8QE0QD/PCFFUmZFVFV4QFertSzsDXiMgi8YV+hSFRTytvyvUVjXBNydpuBLM0zp8 L79XLxpW5JkknJWcoQ2VbE+FBANfuETIWV7goR8U0yayiUQ8sN8LwABkvECMmv0f j+v5gXbtD855IZL0f6EvFcM4oJxFnRE37RGxcYOhuw7NWe9qC4TdafD/+lnfmaEU sNeYIoi0GbX0V/3dOhZwKvYlYeeGuW1sR/ilZ+/flkGbr+WPvwDjrS/IacTXGolL F5peqZ6lI7+u4DUGUOmCcBC5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiPgP4C 28f5CviOfX5kSheH9ohLMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf UXh3UnBZZWFuaTJkeUZKX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArnK8LdyRf7bxU7a114FQyHijhBc9fgLoOV/IY4z33XmcDDKlL7iTo nGksROEY5Nc26C9rlxRhT6cewjzjrbjadYjTlD70uW+EbhLPvLeGyjh0HJ5GZfSo i6h5C3Htx3YXGnnzO8Q4rxKXErwrjp4ps8KkCG1sl9zKs0xgTcDxUlzrvTHm3N3c b1k1Iib2rrc7FSKI5+zXZPnhNS5FqLusF5WdU0k0oT8gKc2SdJ0of+skZpSuX2l6 P5qBtFPA4z/A2+CsvKsRaIY9MDrK6ZGcAPC7chXEysuXouvRgJGAHH/lbx8XeRB9 cA2bjoPz1nyrnHTRTBEBzN44dZVqFXEK -----END CERTIFICATE-----Generated at Sat Apr 26 03:26:51 2025 by rpki-client