$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: 2/8vwEGOw7/R3KhvLvCjOaMrpvglLyiGW/W1Bg/cnok= Subject key identifier: 4E:FF:CC:6A:CA:E3:F7:47:7F:7C:F5:6D:8C:F2:50:E2:85:4C:EA:20 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0129 Signing time: Fri 25 Apr 2025 03:43:48 +0000 Manifest this update: Fri 25 Apr 2025 03:43:47 +0000 Manifest next update: Fri 02 May 2025 03:43:47 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: 25x/99QdrTMBj60UNH9jh8WBzgIp1fzwHpaf3u7/GIY=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Apr 25 03:43:47 2025 GMT Not After : May 2 03:43:47 2025 GMT Subject: CN=680b04f3-8a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:f2:8b:5f:7b:37:a2:1d:7e:26:24:ab:73: 8a:d2:e2:1f:c6:25:94:86:14:b5:13:0f:60:aa:31: 01:4c:bb:16:13:9b:0c:2c:5b:47:da:bc:e4:d6:89: c0:8b:d9:e7:02:11:95:da:23:75:b9:6d:bd:d5:4b: 9f:e3:6b:dc:db:a4:49:68:4a:88:a1:68:0e:04:bb: d5:a8:3b:de:82:36:8c:95:a5:ed:b0:79:7e:82:73: 27:88:c3:dc:8c:d7:34:41:07:49:ab:46:ce:55:0f: 14:52:d0:0f:af:53:b4:87:7e:f2:d4:1b:77:99:40: dd:a0:36:34:f1:55:bc:e8:b5:97:d7:24:a7:cc:09: 53:22:1c:93:a3:52:62:d5:dd:12:62:f1:37:db:76: c0:ef:1e:45:40:4a:99:a2:32:f9:d4:10:73:05:bf: a6:5f:8d:22:2f:d4:41:20:03:84:e7:36:5d:4d:6d: 27:f6:74:4f:3b:c7:f3:10:55:f9:75:a0:6f:67:78: b0:40:03:b6:04:6f:03:e6:d8:f4:83:81:f3:aa:a5: 75:d6:1c:a2:01:bb:4c:24:7b:21:98:56:41:4d:3a: c2:4b:6a:23:17:d6:ad:8e:38:82:e6:ff:fb:66:45: 2a:e2:78:c1:d0:07:b4:17:13:4b:06:40:db:50:08: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:CC:6A:CA:E3:F7:47:7F:7C:F5:6D:8C:F2:50:E2:85:4C:EA:20 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:db:11:27:46:85:74:14:95:fb:5e:d0:63:e9:04:c3:68:6a: 02:96:5d:26:e7:a9:8a:a2:56:24:64:1c:f0:d1:b8:d9:44:69: d0:d5:ec:fc:49:fb:74:a8:7e:d8:4e:37:7f:90:99:fd:96:7d: 2e:44:61:fd:0c:06:d2:12:17:db:16:92:88:93:cc:ff:74:c4: 1f:4a:26:c9:e2:b3:7f:e9:a8:fe:47:51:7f:ce:84:3c:bc:58: 5c:bd:72:01:35:4e:29:f2:b2:10:91:d2:39:05:bb:8e:e2:c2: 08:82:0c:6f:88:0a:e3:4e:ae:58:33:4c:40:5c:85:f2:b5:34: 78:6e:cb:51:f8:2b:1c:97:b7:0b:a2:ee:ac:f8:a1:16:c5:96: 81:e6:10:f3:05:bd:db:c7:f4:25:e9:02:3c:af:f6:9e:35:9b: 5d:10:9c:93:41:13:59:40:48:7c:ba:34:45:c2:a7:83:fc:0e: 0a:d7:fc:19:27:b6:ff:05:ea:de:d5:3f:57:fd:00:55:a9:53: fc:6f:31:e2:14:ed:d4:3b:58:09:88:60:1f:29:33:34:b9:02: 20:43:8c:0b:b0:80:25:a7:b3:18:b0:fd:62:45:1e:cb:70:bf: d7:c0:8a:1f:52:9b:38:7f:a0:0c:73:cd:8e:86:40:8d:af:b7: 3a:c6:96:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwNDI1MDM0MzQ3WhcNMjUwNTAyMDM0MzQ3WjAYMRYwFAYD VQQDEw02ODBiMDRmMy04YTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEryi197N6IdfiYkq3OK0uIfxiWUhhS1Ew9gqjEBTLsWE5sMLFtH2rzk1onA i9nnAhGV2iN1uW291Uuf42vc26RJaEqIoWgOBLvVqDvegjaMlaXtsHl+gnMniMPc jNc0QQdJq0bOVQ8UUtAPr1O0h37y1Bt3mUDdoDY08VW86LWX1ySnzAlTIhyTo1Ji 1d0SYvE323bA7x5FQEqZojL51BBzBb+mX40iL9RBIAOE5zZdTW0n9nRPO8fzEFX5 daBvZ3iwQAO2BG8D5tj0g4HzqqV11hyiAbtMJHshmFZBTTrCS2ojF9atjjiC5v/7 ZkUq4njB0Ae0FxNLBkDbUAgTmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7/zGrK 4/dHf3z1bYzyUOKFTOogMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB92xEnRoV0FJX7XtBj6QTDaGoCll0m56mKolYkZBzw0bjZRGnQ1ez8 Sft0qH7YTjd/kJn9ln0uRGH9DAbSEhfbFpKIk8z/dMQfSibJ4rN/6aj+R1F/zoQ8 vFhcvXIBNU4p8rIQkdI5BbuO4sIIggxviArjTq5YM0xAXIXytTR4bstR+Cscl7cL ou6s+KEWxZaB5hDzBb3bx/Ql6QI8r/aeNZtdEJyTQRNZQEh8ujRFwqeD/A4K1/wZ J7b/Bere1T9X/QBVqVP8bzHiFO3UO1gJiGAfKTM0uQIgQ4wLsIAlp7MYsP1iRR7L cL/XwIofUps4f6AMc82OhkCNr7c6xpYQ -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:56 2025 by rpki-client