$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: ZnNlKCG3d7Ek13e0yIPIbojAkwj/eVfVkAlLVuaeQsM= Subject key identifier: 36:7C:6F:2E:34:97:11:07:15:B3:80:65:7A:63:B6:E5:1D:1E:B5:FD Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 0884 Signing time: Thu 24 Apr 2025 20:28:00 +0000 Manifest this update: Thu 24 Apr 2025 20:28:00 +0000 Manifest next update: Thu 01 May 2025 20:28:00 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: Ch9RdByNeGK60fIWv0mh2vogv2OhBc0CWv2yEBn24oE=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: pJopSUouAomRS7bBbLiExTbU2TzCWgsGbKH4r8LjMrI=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: NDjkgreHok48ic1Su9+HPGIeiSQ2Z7P+GcpTGnpZzHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Apr 24 20:28:00 2025 GMT Not After : May 1 20:28:00 2025 GMT Subject: CN=680a9ed0-12d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:2c:3b:b3:d5:e1:35:c0:e3:86:dc:60:7c: c9:0f:45:26:b4:8c:7b:1d:68:32:51:2b:8b:5a:61: ac:f3:f2:e7:19:54:8f:4b:27:ac:12:2d:8d:3e:78: 9e:b4:71:4a:f1:ed:45:31:e8:0f:de:eb:d9:c2:24: 18:f1:ec:d5:66:d5:42:2e:07:6d:23:c7:31:48:82: c8:c7:f4:18:6f:79:16:44:80:7c:7c:ad:6b:48:34: 46:ef:dd:98:b5:34:e7:dd:51:76:d5:8a:74:30:92: 2f:62:8f:7e:ac:8f:9b:34:99:47:ca:37:6a:f9:5f: 84:7a:e3:52:b5:f5:ca:e2:85:30:b7:c3:52:ae:64: 6b:52:f8:e4:4c:63:10:0f:07:a1:94:37:70:1f:18: 45:9e:c2:97:d8:bc:c2:a1:3b:0c:5b:29:13:fc:3f: 89:f6:ee:1f:a2:39:1e:7d:e8:55:62:2a:11:ee:a3: 32:a3:b5:c4:e3:19:f3:b1:0a:fc:7a:4d:e1:7a:02: 0d:32:0c:6f:ed:19:6c:a3:15:08:67:32:c3:74:fd: f5:1e:3e:2a:20:ed:cd:e3:b9:55:d3:93:54:5d:8d: 86:81:06:5b:e2:93:47:e8:c5:cd:53:ae:87:03:e1: 5d:63:80:81:b2:3c:c1:cc:a5:00:f2:37:de:78:b3: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7C:6F:2E:34:97:11:07:15:B3:80:65:7A:63:B6:E5:1D:1E:B5:FD X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:12:88:89:04:3b:2f:9e:b5:ba:d0:93:35:b2:ba:db:6a: b1:1c:e0:cc:d9:f9:32:1b:dd:45:3e:ec:ab:bd:98:b2:04:1a: ef:e3:f7:68:7f:7b:dd:05:b1:c3:bb:2c:50:ad:d3:b9:d8:c2: 67:81:76:6b:ca:6b:e4:ba:54:8c:5c:8f:9b:ed:38:3c:eb:b6: 7d:a0:d7:11:3c:5b:02:5f:1e:1f:4d:d3:b0:81:0d:16:cd:d5: 5b:ad:25:00:7f:e8:60:26:c7:0b:65:63:7a:f1:cc:46:ad:fe: 85:17:2e:a8:90:1e:a7:39:90:73:9f:af:a7:1b:a5:f6:94:81: 4b:c4:ae:d9:5f:5a:7f:b6:c7:f1:15:19:1b:87:dd:57:02:dd: 1e:00:51:50:1f:c3:b1:7b:d3:cd:11:34:5b:a5:5e:1f:b1:03: 6b:3b:0a:be:ec:31:d7:ab:b3:38:fe:db:b6:2c:c7:1f:16:3d: 18:1a:e2:1b:33:75:a2:f8:5f:86:a2:90:d9:79:1d:4b:90:91: 50:0a:3e:c6:74:0d:d9:de:8f:1d:75:aa:09:8d:6a:a7:15:80: 84:69:ce:d6:62:63:4e:51:ee:be:26:06:c7:df:c8:cc:8b:b6: b3:da:27:d4:13:79:62:b6:c0:a6:94:48:7a:81:e4:9d:41:5a: 0d:d6:84:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUwNDI0MjAyODAwWhcNMjUwNTAxMjAyODAwWjAYMRYwFAYD VQQDEw02ODBhOWVkMC0xMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdEsO7PV4TXA44bcYHzJD0UmtIx7HWgyUSuLWmGs8/LnGVSPSyesEi2NPnie tHFK8e1FMegP3uvZwiQY8ezVZtVCLgdtI8cxSILIx/QYb3kWRIB8fK1rSDRG792Y tTTn3VF21Yp0MJIvYo9+rI+bNJlHyjdq+V+EeuNStfXK4oUwt8NSrmRrUvjkTGMQ DwehlDdwHxhFnsKX2LzCoTsMWykT/D+J9u4fojkefehVYioR7qMyo7XE4xnzsQr8 ek3hegINMgxv7RlsoxUIZzLDdP31Hj4qIO3N47lV05NUXY2GgQZb4pNH6MXNU66H A+FdY4CBsjzBzKUA8jfeeLPCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZ8by40 lxEHFbOAZXpjtuUdHrX9MB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAcRKIiQQ7L561utCTNbK622qxHODM2fkyG91FPuyrvZiyBBrv4/do f3vdBbHDuyxQrdO52MJngXZrymvkulSMXI+b7Tg867Z9oNcRPFsCXx4fTdOwgQ0W zdVbrSUAf+hgJscLZWN68cxGrf6FFy6okB6nOZBzn6+nG6X2lIFLxK7ZX1p/tsfx FRkbh91XAt0eAFFQH8Oxe9PNETRbpV4fsQNrOwq+7DHXq7M4/tu2LMcfFj0YGuIb M3Wi+F+GopDZeR1LkJFQCj7GdA3Z3o8ddaoJjWqnFYCEac7WYmNOUe6+JgbH38jM i7az2ifUE3litsCmlEh6geSdQVoN1oTt -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:46 2025 by rpki-client