$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: 7Ma1ujbXQ61F6u7YPaDPwOGdb3IAu3pFCUaLGgtjtHc= Subject key identifier: F2:D2:98:5F:29:D7:05:4D:18:2E:4D:F5:6B:7D:A1:BE:5E:2D:1D:E4 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: 40 Signing time: Fri 25 Apr 2025 06:29:08 +0000 Manifest this update: Fri 25 Apr 2025 06:29:08 +0000 Manifest next update: Fri 02 May 2025 06:29:08 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: uXYdo1Lv70tPcqWX9127UgnMZ9EAmobHAaIyqXL+2ic=) 2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Apr 25 06:29:08 2025 GMT Not After : May 2 06:29:08 2025 GMT Subject: CN=680b2bb4-a820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:1c:15:4c:1a:b9:d3:ef:d5:23:3c:54:c6:a3: 01:bf:53:36:ef:25:74:fd:6f:07:17:7f:31:05:ad: 8c:c8:f2:8f:44:24:b8:de:0b:1f:3b:21:bf:63:b9: 48:d9:fe:7d:56:43:33:b2:26:2b:77:24:58:40:04: ee:81:4c:97:46:17:65:49:62:5b:f9:42:03:6f:5c: 20:08:cb:1c:bb:9a:cc:fe:22:c7:7b:e7:ff:ba:d4: 4d:ec:2c:9b:8f:35:86:d7:71:a6:93:83:1f:fe:7e: 63:39:41:15:2e:d6:ba:5d:4a:6f:b8:9c:25:69:eb: 1c:6f:08:b4:63:b0:d5:da:22:73:f9:ad:7f:69:1b: c1:79:02:68:6d:10:cf:f3:e9:89:47:90:48:25:b1: 84:86:df:64:30:d6:d9:8f:2a:98:7b:a5:61:c4:27: 77:34:78:67:87:ca:98:35:ef:af:ff:a1:95:7c:17: 27:31:59:f4:52:57:f5:11:0d:fa:5e:54:03:b1:58: a4:9d:89:1e:5e:2d:6a:cd:b5:20:e0:f3:8f:7f:93: 21:d1:d0:b1:02:ca:81:af:48:0c:97:f6:51:fc:a4: 09:d3:99:d6:ce:12:e8:4d:8b:d9:18:d9:9f:66:2e: 7d:27:dd:0e:94:13:96:68:5a:8f:e4:3f:39:f7:a0: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:98:5F:29:D7:05:4D:18:2E:4D:F5:6B:7D:A1:BE:5E:2D:1D:E4 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c7:7e:3b:b9:5f:cf:d6:f6:fe:0c:e7:2c:09:df:af:f8:cf: 63:12:c9:c8:c5:a5:f4:fd:89:93:c8:a1:d8:7e:b4:c8:fa:e8: 7f:19:c8:e7:1a:f6:dd:e6:89:e9:32:85:2d:d5:71:ee:52:53: 94:ff:98:27:30:a3:64:a2:ba:d4:20:c8:c6:4b:57:0c:8f:79: f8:0f:98:47:cc:f4:ec:69:0d:c9:f4:ea:e3:a9:b5:c1:bf:4f: b2:ce:1f:00:1e:ef:a8:2c:4b:80:b6:2f:14:2b:74:5a:06:ba: 83:d3:87:86:bd:ca:f1:52:5e:5c:1e:62:51:0c:e0:bc:39:a1: 6a:98:c4:00:1c:62:8c:f1:7f:55:01:15:35:17:82:da:47:66: 1a:86:f6:1b:29:a6:8d:34:5e:f4:48:fe:7b:48:3d:f5:5b:a2: 9f:ef:ca:d3:38:f2:ff:b7:7e:dc:94:d9:ad:d4:31:bd:8b:be: 8f:2b:f4:e4:21:a5:6f:41:6b:ac:03:66:63:b6:8a:79:70:55: c2:ba:91:c9:f5:c6:b0:8b:21:9c:bb:a4:f5:ea:ef:b6:eb:09: 4c:9c:6f:1b:4b:6f:7d:62:71:c2:c5:d8:f8:65:04:3f:25:89: d6:eb:d1:70:52:4f:26:4b:08:f3:f4:93:ed:51:25:18:aa:d9: 72:1a:9c:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhBNTExMC8GA1UEBRMoODVFOEVFOUE4RDMwNTI4NTk5MDYyRDA4Q0I5Q0I5RDUx M0RGNkJENzAeFw0yNTA0MjUwNjI5MDhaFw0yNTA1MDIwNjI5MDhaMBgxFjAUBgNV BAMTDTY4MGIyYmI0LWE4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD+HBVMGrnT79UjPFTGowG/UzbvJXT9bwcXfzEFrYzI8o9EJLjeCx87Ib9juUjZ /n1WQzOyJit3JFhABO6BTJdGF2VJYlv5QgNvXCAIyxy7msz+Isd75/+61E3sLJuP NYbXcaaTgx/+fmM5QRUu1rpdSm+4nCVp6xxvCLRjsNXaInP5rX9pG8F5AmhtEM/z 6YlHkEglsYSG32Qw1tmPKph7pWHEJ3c0eGeHypg176//oZV8FycxWfRSV/URDfpe VAOxWKSdiR5eLWrNtSDg849/kyHR0LECyoGvSAyX9lH8pAnTmdbOEuhNi9kY2Z9m Ln0n3Q6UE5ZoWo/kPzn3oPUdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8tKYXynX BU0YLk31a32hvl4tHeQwHwYDVR0jBBgwFoAUhejumo0wUoWZBi0Iy5y51RPfa9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEE1L0QxNTAzMTM2Qzkx QjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVqdW1vMHdVb1daQmkwSXk1eTUxUlBmYTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEE1L0QxNTAzMTM2QzkxQjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9X WkJpMEl5NXk1MVJQZmE5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjHfju5X8/W9v4M5ywJ36/4z2MSycjFpfT9iZPIodh+tMj66H8ZyOca 9t3miekyhS3Vce5SU5T/mCcwo2SiutQgyMZLVwyPefgPmEfM9OxpDcn06uOptcG/ T7LOHwAe76gsS4C2LxQrdFoGuoPTh4a9yvFSXlweYlEM4Lw5oWqYxAAcYozxf1UB FTUXgtpHZhqG9hsppo00XvRI/ntIPfVbop/vytM48v+3ftyU2a3UMb2Lvo8r9OQh pW9Ba6wDZmO2inlwVcK6kcn1xrCLIZy7pPXq77brCUycbxtLb31iccLF2PhlBD8l idbr0XBSTyZLCPP0k+1RJRiq2XIanNs= -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:05 2025 by rpki-client