$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: wc7lf8fFXTL6g9ct9eQkQze7FJKBJOJf7tWOiQsj/cQ= Subject key identifier: 2C:0B:9A:F3:30:33:36:99:23:05:94:DA:C2:E2:94:DE:D0:24:0B:35 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01C8 Signing time: Tue 13 May 2025 02:14:26 +0000 Manifest this update: Tue 13 May 2025 02:14:25 +0000 Manifest next update: Tue 20 May 2025 02:14:25 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: 6JQW4HY0PCO0ADQPMwdm4HUvhytl2TTUJSGoceKeVNc=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: May 13 02:14:25 2025 GMT Not After : May 20 02:14:25 2025 GMT Subject: CN=6822ab02-28c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:94:d8:06:e9:15:39:9c:cd:77:37:35:36: 95:95:15:d3:a1:ee:95:e7:2d:cb:be:a8:39:13:9b: 41:f7:9f:3e:d9:1c:f1:cc:3e:d0:64:9c:12:db:75: 70:7e:e6:6d:f2:4a:f7:b7:3e:ad:a3:e4:18:4a:76: ab:92:0a:9f:56:bc:cb:bd:3c:06:be:ea:4d:09:48: fc:1d:0b:39:db:df:ca:52:a6:83:08:49:fd:a4:ad: 54:ec:e2:88:da:96:21:00:2b:ff:c8:c0:9a:e8:5b: d6:a9:9a:8d:aa:fb:59:50:8d:7c:ee:1c:67:28:17: a0:87:ff:eb:77:41:0d:60:d7:f3:2a:fc:c1:f0:b4: 3a:8a:a2:7d:9a:a1:28:a6:d3:9e:c9:b3:79:4b:8b: 5b:3b:1d:b3:da:de:c5:4e:3a:14:39:72:95:ec:be: 80:d9:30:f5:19:86:69:ba:3f:23:6e:0f:7d:6f:e6: 53:ca:20:fc:01:33:8f:61:e4:49:f6:c8:22:5b:6b: 24:4d:67:8d:b8:94:4c:d3:65:f5:fb:61:91:aa:34: a3:fc:7d:12:b0:da:4e:a6:0d:25:5d:71:12:66:20: 83:05:93:42:7b:0c:cb:76:50:14:14:cc:1f:f0:f3: a1:a5:52:7d:cd:6c:d5:ed:6e:ab:c3:9b:c4:13:aa: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0B:9A:F3:30:33:36:99:23:05:94:DA:C2:E2:94:DE:D0:24:0B:35 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:b4:46:81:c4:7b:12:d4:26:41:05:82:68:37:22:16:01: 98:5d:cd:45:21:08:b3:c9:b2:5f:13:a0:3f:cb:ff:1f:a2:52: d8:c6:16:35:75:c4:28:c1:7e:c4:7e:a1:17:76:2a:96:9c:d3: 8c:b0:bc:60:dc:10:d1:40:1d:28:6b:21:b3:b9:21:ee:a3:e1: 8c:e9:00:2b:a7:51:09:ef:58:92:d9:27:4e:97:c6:e3:80:e7: 02:f6:00:d5:7c:ba:9d:74:36:71:c0:8b:6d:e3:28:ce:d5:c8: 8c:d0:5b:08:85:df:59:19:61:34:9f:e8:b6:92:29:8a:0d:d5: 27:f5:e0:2d:5e:e9:02:e1:48:ce:74:ce:79:f9:3d:c0:bb:0b: 04:c7:60:ed:4b:cb:77:52:94:f4:76:db:be:6c:37:98:67:97: b5:07:ed:18:a6:9d:c7:57:37:9d:68:8c:63:28:3e:d1:91:80: 3d:ed:d6:88:73:02:28:78:b1:27:c8:75:eb:19:ab:2e:9d:60: ec:b5:e1:e5:68:5b:fc:3e:49:8a:0d:72:73:9a:da:ee:d4:2a: 5e:36:02:02:ea:5e:b8:4c:14:30:c9:a8:45:3e:6e:0c:06:bb: cb:d7:ac:f0:78:fd:74:99:ee:b0:55:55:95:c8:8f:f0:eb:fc: 93:a4:88:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwNTEzMDIxNDI1WhcNMjUwNTIwMDIxNDI1WjAYMRYwFAYD VQQDEw02ODIyYWIwMi0yOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm6U2AbpFTmczXc3NTaVlRXToe6V5y3Lvqg5E5tB958+2RzxzD7QZJwS23Vw fuZt8kr3tz6to+QYSnarkgqfVrzLvTwGvupNCUj8HQs529/KUqaDCEn9pK1U7OKI 2pYhACv/yMCa6FvWqZqNqvtZUI187hxnKBegh//rd0ENYNfzKvzB8LQ6iqJ9mqEo ptOeybN5S4tbOx2z2t7FTjoUOXKV7L6A2TD1GYZpuj8jbg99b+ZTyiD8ATOPYeRJ 9sgiW2skTWeNuJRM02X1+2GRqjSj/H0SsNpOpg0lXXESZiCDBZNCewzLdlAUFMwf 8POhpVJ9zWzV7W6rw5vEE6r/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwLmvMw MzaZIwWU2sLilN7QJAs1MB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9orRGgcR7EtQmQQWCaDciFgGYXc1FIQizybJfE6A/y/8folLYxhY1 dcQowX7EfqEXdiqWnNOMsLxg3BDRQB0oayGzuSHuo+GM6QArp1EJ71iS2SdOl8bj gOcC9gDVfLqddDZxwItt4yjO1ciM0FsIhd9ZGWE0n+i2kimKDdUn9eAtXukC4UjO dM55+T3AuwsEx2DtS8t3UpT0dtu+bDeYZ5e1B+0Ypp3HVzedaIxjKD7RkYA97daI cwIoeLEnyHXrGasunWDsteHlaFv8PkmKDXJzmtru1CpeNgIC6l64TBQwyahFPm4M BrvL16zweP10me6wVVWVyI/w6/yTpIh0 -----END CERTIFICATE-----Generated at Tue May 13 18:39:23 2025 by rpki-client