$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: dUUwl7OkqkVf42Lfp+MLyDBFdRrIAm/VU7/RYm/qAc8= Subject key identifier: 95:7E:A0:CB:05:26:8C:44:15:4B:C3:D8:0D:67:75:01:63:A8:E2:F3 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 026A Signing time: Fri 25 Apr 2025 01:30:31 +0000 Manifest this update: Fri 25 Apr 2025 01:30:30 +0000 Manifest next update: Fri 02 May 2025 01:30:30 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: /GJkjAi8/1t/HGE0lM21iooSCQzF4TERWU8kA9RSBiU=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Apr 25 01:30:30 2025 GMT Not After : May 2 01:30:30 2025 GMT Subject: CN=680ae5b7-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:06:81:f5:3d:a0:97:3c:96:36:4b:ca:20: e2:25:95:e1:7a:71:8e:f6:41:5f:e1:29:ce:6b:00: 2d:89:24:6c:61:15:f3:bf:07:46:82:76:07:a2:3d: d2:ff:32:2e:d3:bc:7f:e0:5f:d4:1f:ef:65:85:4a: ff:0e:68:d6:0a:8c:85:95:10:f9:c0:cd:e1:e9:a9: 95:ac:3d:39:f6:07:5e:f2:a7:e3:15:02:86:21:a4: 5c:ca:15:6a:d0:cc:d5:fb:50:77:79:c2:7d:37:6e: 8b:c7:ef:cb:4a:0e:1c:de:7c:10:36:cb:4c:e3:60: 0c:47:59:ee:ba:c0:76:82:55:39:d7:f3:9d:16:73: 95:93:0c:88:da:78:61:0b:de:79:fa:69:dc:2a:90: 55:14:47:a9:ac:07:56:24:b1:a2:0b:41:81:c1:29: 82:83:4d:6d:9d:82:2d:ff:b4:c7:0f:4e:52:fc:c5: 98:ac:a9:fe:ea:54:9f:7f:f7:06:a3:54:1a:e3:b0: 5a:62:4c:4c:37:39:36:88:d3:53:c9:b0:21:a2:c1: f7:f6:d4:3e:6f:0f:b6:cf:79:c4:fa:7f:24:3d:2a: 7a:10:d9:cc:da:eb:de:11:79:cb:2e:6f:c2:53:a5: a7:c4:57:4c:13:6f:9c:ab:32:b1:f6:9e:1c:b3:22: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7E:A0:CB:05:26:8C:44:15:4B:C3:D8:0D:67:75:01:63:A8:E2:F3 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:6b:17:76:ed:e0:ae:ca:ed:1d:e3:5f:cd:47:29:90:01:8a: 84:87:9d:e4:5e:cd:a2:3a:87:f2:34:37:7d:f8:2a:ea:ef:91: 4d:24:19:ac:86:8c:8a:c6:a7:c3:73:15:f2:41:8c:49:53:cc: e9:33:56:ea:d4:d7:92:17:8e:fd:52:14:05:38:bf:f8:df:1d: 13:aa:2b:91:86:cb:ea:3e:c5:23:ad:a3:85:df:21:9c:f8:4f: d0:dd:7f:57:62:78:7f:d8:90:2c:13:b9:c0:ed:4e:c2:15:f0: 9a:ce:06:f3:15:38:26:33:fa:27:8d:41:4f:e8:3a:85:2d:8b: e7:e9:2e:e8:bd:c9:9e:cd:f0:e3:1c:87:98:9a:64:39:20:30: be:80:c3:34:dd:b5:20:e0:91:35:3b:ef:49:94:67:4a:7d:99: 79:48:ce:5b:fe:86:47:1c:74:01:5a:0f:62:8e:3a:38:75:95: 6a:a2:7e:d5:2c:81:05:df:07:77:c2:75:7c:94:20:2e:b5:9a: 29:71:37:fc:69:f9:86:dc:ec:fe:ed:42:08:43:9f:69:fc:c1: 4b:ca:de:1c:07:7c:5b:2b:41:7b:f7:1f:67:76:3f:3e:c0:2f: 8a:02:e9:b8:36:b2:bd:90:42:90:1a:f1:e3:38:52:1b:88:e2: 3f:9a:0f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwNDI1MDEzMDMwWhcNMjUwNTAyMDEzMDMwWjAYMRYwFAYD VQQDEw02ODBhZTViNy1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WoGgfU9oJc8ljZLyiDiJZXhenGO9kFf4SnOawAtiSRsYRXzvwdGgnYHoj3S /zIu07x/4F/UH+9lhUr/DmjWCoyFlRD5wM3h6amVrD059gde8qfjFQKGIaRcyhVq 0MzV+1B3ecJ9N26Lx+/LSg4c3nwQNstM42AMR1nuusB2glU51/OdFnOVkwyI2nhh C955+mncKpBVFEeprAdWJLGiC0GBwSmCg01tnYIt/7THD05S/MWYrKn+6lSff/cG o1Qa47BaYkxMNzk2iNNTybAhosH39tQ+bw+2z3nE+n8kPSp6ENnM2uveEXnLLm/C U6WnxFdME2+cqzKx9p4csyJwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV+oMsF JoxEFUvD2A1ndQFjqOLzMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHaxd27eCuyu0d41/NRymQAYqEh53kXs2iOofyNDd9+Crq75FNJBms hoyKxqfDcxXyQYxJU8zpM1bq1NeSF479UhQFOL/43x0TqiuRhsvqPsUjraOF3yGc +E/Q3X9XYnh/2JAsE7nA7U7CFfCazgbzFTgmM/onjUFP6DqFLYvn6S7ovcmezfDj HIeYmmQ5IDC+gMM03bUg4JE1O+9JlGdKfZl5SM5b/oZHHHQBWg9ijjo4dZVqon7V LIEF3wd3wnV8lCAutZopcTf8afmG3Oz+7UIIQ59p/MFLyt4cB3xbK0F79x9ndj8+ wC+KAum4NrK9kEKQGvHjOFIbiOI/mg/M -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:52 2025 by rpki-client