$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: tRbQJ1F59vxfP/Ggq4l1tFA/ih1QD3O4L80koVCiDuQ= Subject key identifier: 6C:D0:11:2D:B7:47:F6:09:33:3F:7C:0B:D9:81:F5:64:83:FF:CA:8B Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 05EF Signing time: Sat 10 May 2025 22:32:23 +0000 Manifest this update: Sat 10 May 2025 22:32:22 +0000 Manifest next update: Sat 17 May 2025 22:32:22 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: I7K2sNxwPtTXKQmnL6iWi+CkV4Rj9PpXOba+bwUEL0g=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: pMCjO+dEpym8WZT6FFXX0BN+eJ9YjqXuqC09C9kAxVs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: 3RUylNRBzlhM6wNTSM7RbhRXATKVFjngYSNzKv1ez60=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: BlXgUYLAQgGHTY4XpWyfRou2YPtS9beWJgAM39FVJwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: May 10 22:32:22 2025 GMT Not After : May 17 22:32:22 2025 GMT Subject: CN=681fd3f7-48f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:d4:d6:68:d8:dc:aa:fc:71:39:cc:9f:16: 8f:c1:05:64:e0:e0:c9:e9:a1:a4:71:db:89:55:c8: be:87:7d:8a:40:b9:74:10:f2:19:73:9e:da:13:cd: bb:47:04:af:aa:b4:ff:d5:a3:7a:d3:bf:4b:98:c9: a1:1f:9a:49:7a:3b:d4:f7:12:bb:95:40:8d:8d:73: 21:5e:87:2f:bb:f6:df:77:b3:3f:d2:8d:ae:63:17: 37:b0:eb:61:4f:41:0d:89:69:2c:15:a9:bd:02:be: 1e:5f:15:00:4c:a0:10:9e:f8:53:68:8f:75:85:52: 27:67:e3:01:7a:e3:a6:be:69:49:4b:9b:c9:73:69: 4f:2e:78:16:18:18:03:3b:e6:a0:68:c5:ae:d4:64: 1c:77:00:ab:a4:ad:f9:19:2e:17:0e:5d:34:bf:97: b2:64:6f:12:9e:20:07:cd:80:f6:69:2e:5d:80:6d: 83:55:91:1f:33:81:19:d8:87:5e:2c:15:5a:e3:f3: 65:6e:11:cc:06:7e:b0:aa:b2:bc:a7:87:58:38:72: a3:d3:ec:13:75:fa:51:93:c7:3d:b5:bc:e6:24:d5: 35:10:db:3c:37:95:5b:08:7d:79:17:14:85:42:9f: 91:f4:c2:11:af:50:ee:aa:43:3d:1c:78:2f:4f:94: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D0:11:2D:B7:47:F6:09:33:3F:7C:0B:D9:81:F5:64:83:FF:CA:8B X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8e:dc:9f:80:50:2a:da:be:5e:c2:ac:db:7b:40:aa:bd:de: 4b:48:f8:4a:7c:4e:34:d5:58:92:b1:55:d7:7a:74:66:e7:ad: 6f:6e:e1:ec:3b:9f:0a:e3:0c:9e:24:41:a5:49:f9:df:3f:cd: b2:fc:e5:42:af:b1:99:9c:af:8c:ff:9c:1a:a1:c1:2c:19:3c: ce:91:9b:81:0e:0c:ef:8c:bc:15:92:0c:4f:cb:64:9a:8f:36: c6:7d:db:d3:34:97:e5:c3:fa:8e:14:ea:e8:df:44:ce:be:f9: f5:19:66:29:f5:8c:9c:64:e2:31:0e:02:83:ef:78:63:d7:90: 82:a9:34:a1:7b:ae:ce:29:b3:90:e2:e7:9d:6f:7c:a8:1e:37: 7e:74:1a:23:c1:6b:65:0f:0a:90:9a:68:30:2d:8b:94:ae:bd: 1d:7a:4b:b4:b6:35:e1:46:64:93:da:8d:88:50:67:a9:f9:40: e2:7b:2d:27:4e:65:9a:4c:9d:cb:65:b3:04:7e:ea:92:b3:0c: 7d:ec:00:84:40:c4:17:8a:5d:b0:16:5b:95:d4:7a:ac:79:88: f0:d3:c1:b2:d9:df:cc:69:25:80:bc:49:87:3e:79:de:a8:0f: 13:41:27:51:7a:ca:09:52:85:38:7c:39:54:2a:0e:ca:87:06: 20:0c:83:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUwNTEwMjIzMjIyWhcNMjUwNTE3MjIzMjIyWjAYMRYwFAYD VQQDEw02ODFmZDNmNy00OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrfU1mjY3Kr8cTnMnxaPwQVk4ODJ6aGkcduJVci+h32KQLl0EPIZc57aE827 RwSvqrT/1aN6079LmMmhH5pJejvU9xK7lUCNjXMhXocvu/bfd7M/0o2uYxc3sOth T0ENiWksFam9Ar4eXxUATKAQnvhTaI91hVInZ+MBeuOmvmlJS5vJc2lPLngWGBgD O+agaMWu1GQcdwCrpK35GS4XDl00v5eyZG8SniAHzYD2aS5dgG2DVZEfM4EZ2Ide LBVa4/NlbhHMBn6wqrK8p4dYOHKj0+wTdfpRk8c9tbzmJNU1ENs8N5VbCH15FxSF Qp+R9MIRr1DuqkM9HHgvT5T0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzQES23 R/YJMz98C9mB9WSD/8qLMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdjtyfgFAq2r5ewqzbe0Cqvd5LSPhKfE401ViSsVXXenRm561vbuHs O58K4wyeJEGlSfnfP82y/OVCr7GZnK+M/5waocEsGTzOkZuBDgzvjLwVkgxPy2Sa jzbGfdvTNJflw/qOFOro30TOvvn1GWYp9YycZOIxDgKD73hj15CCqTShe67OKbOQ 4uedb3yoHjd+dBojwWtlDwqQmmgwLYuUrr0deku0tjXhRmST2o2IUGep+UDiey0n TmWaTJ3LZbMEfuqSswx97ACEQMQXil2wFluV1HqseYjw08Gy2d/MaSWAvEmHPnne qA8TQSdResoJUoU4fDlUKg7KhwYgDIO0 -----END CERTIFICATE-----Generated at Mon May 12 04:22:17 2025 by rpki-client