$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json) Hash identifier: Um6JS5oRKzBJmixwes0wQxEGXj67giGjuDUuUe2V4Zg= Subject key identifier: A9:FE:52:DD:4F:5F:97:54:88:49:77:71:84:8C:A8:5E:8D:0B:1D:F0 Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft Manifest number: 01C4 Signing time: Sun 11 May 2025 03:47:18 +0000 Manifest this update: Sun 11 May 2025 03:47:18 +0000 Manifest next update: Sun 18 May 2025 03:47:18 +0000 Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: vMGq67j5MqKyN7oxe9RaZAHpNW95tA9+E7b3f28XFGo=) 2: 6BCEC330344311EFB7DD0D34C4F9AE02.roa (hash: V5GXfj7MVmj/bsrh8ZK5BOMK+sTslcHA1M5O9HLWM8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: May 11 03:47:18 2025 GMT Not After : May 18 03:47:18 2025 GMT Subject: CN=68201dc6-d920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:77:f8:d8:5f:33:d9:32:d5:5f:f7:ea:49: cd:be:5c:8e:fa:9f:52:6f:b7:61:86:68:e1:6b:93: e5:61:07:ce:b5:fe:b7:ab:67:dd:38:58:4f:f7:82: 9f:f0:97:fd:56:4d:2c:d4:dd:07:2f:4f:4d:59:84: fd:c5:a6:d4:28:40:2c:75:d6:be:b0:36:99:b9:05: e4:5d:c6:6a:59:67:73:22:97:14:33:46:9c:d9:b8: f1:91:6b:30:92:80:b1:42:9e:4b:c5:c1:28:17:00: 7c:08:68:22:51:9b:a1:d8:4e:8c:00:07:b4:d7:b6: 6f:d6:8d:a2:8a:2a:5b:2b:5c:69:74:40:a9:e9:83: 04:de:62:36:bc:12:13:3a:42:98:4e:5f:ce:f4:d6: 30:7a:9a:bb:b4:6f:2a:2e:42:2e:57:0e:ed:67:a6: 45:33:cb:85:4f:7d:ab:da:6e:66:3d:c4:43:28:ad: ca:69:c4:5f:12:1f:a4:6c:a6:4f:2b:16:6b:f9:5b: 95:11:60:b0:16:c7:2e:68:f1:51:34:c7:33:6c:59: 18:23:7c:fa:e5:fb:3b:f4:98:a8:9e:17:4f:ad:57: dc:07:cf:a8:f0:60:ca:a2:0c:22:e8:3e:dc:7e:7f: 38:50:7c:72:52:80:53:6f:f4:84:5a:de:4c:1b:5e: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FE:52:DD:4F:5F:97:54:88:49:77:71:84:8C:A8:5E:8D:0B:1D:F0 X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3b:1a:40:63:d8:ab:50:d8:10:04:57:51:58:fb:bd:8f:78: 5b:bf:27:f9:97:57:04:02:4a:73:a8:47:65:80:d1:8d:a3:0b: 5a:da:97:c4:8c:c1:04:56:e2:23:4f:4f:7c:ae:35:10:38:f2: ba:bb:16:6e:9a:6e:54:68:43:2a:9f:5c:6e:26:4a:0b:7c:a1: 17:ba:fa:4f:01:f1:b9:cb:36:14:86:b6:e9:89:68:31:b6:76: fc:9a:7e:e6:07:42:40:9b:c7:0a:d0:62:9a:4d:75:56:a7:69: 8d:1c:47:99:f3:0c:31:c8:88:2c:6c:82:70:44:80:4a:ce:33: 5c:ff:7e:fb:29:e4:c8:9e:71:c9:5e:ff:9f:6b:51:03:de:e7: 1f:94:cf:2f:c7:12:6b:33:9a:df:6f:99:74:da:2c:56:40:cc: 29:9f:2f:7b:12:97:51:e9:84:84:6e:85:29:25:95:d6:9a:9c: 83:5c:b7:7d:c1:3b:11:2b:3b:a5:a4:bb:a9:e8:2e:cc:7f:5d: 35:14:50:08:4c:03:49:c4:75:01:5f:65:e0:cd:33:59:6a:f0: 5e:aa:af:ff:43:0d:35:8c:d5:0e:7d:36:82:ff:c6:1f:f5:31: 65:83:74:c6:e0:ce:e3:2e:4f:23:a0:2b:de:37:da:0d:41:94: ec:6e:cb:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG MEIyQzNBNUYwHhcNMjUwNTExMDM0NzE4WhcNMjUwNTE4MDM0NzE4WjAYMRYwFAYD VQQDEw02ODIwMWRjNi1kOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLR3+NhfM9ky1V/36knNvlyO+p9Sb7dhhmjha5PlYQfOtf63q2fdOFhP94Kf 8Jf9Vk0s1N0HL09NWYT9xabUKEAsdda+sDaZuQXkXcZqWWdzIpcUM0ac2bjxkWsw koCxQp5LxcEoFwB8CGgiUZuh2E6MAAe017Zv1o2iiipbK1xpdECp6YME3mI2vBIT OkKYTl/O9NYwepq7tG8qLkIuVw7tZ6ZFM8uFT32r2m5mPcRDKK3KacRfEh+kbKZP KxZr+VuVEWCwFscuaPFRNMczbFkYI3z65fs79JionhdPrVfcB8+o8GDKogwi6D7c fn84UHxyUoBTb/SEWt5MG15J2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn+Ut1P X5dUiEl3cYSMqF6NCx3wMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf a2NMVGdUVGlDMjd3c3NPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7OxpAY9irUNgQBFdRWPu9j3hbvyf5l1cEAkpzqEdlgNGNowta2pfE jMEEVuIjT098rjUQOPK6uxZumm5UaEMqn1xuJkoLfKEXuvpPAfG5yzYUhrbpiWgx tnb8mn7mB0JAm8cK0GKaTXVWp2mNHEeZ8wwxyIgsbIJwRIBKzjNc/377KeTInnHJ Xv+fa1ED3ucflM8vxxJrM5rfb5l02ixWQMwpny97EpdR6YSEboUpJZXWmpyDXLd9 wTsRKzulpLup6C7Mf101FFAITANJxHUBX2XgzTNZavBeqq//Qw01jNUOfTaC/8Yf 9TFlg3TG4M7jLk8joCveN9oNQZTsbssc -----END CERTIFICATE-----Generated at Sun May 11 20:02:53 2025 by rpki-client