$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json) Hash identifier: 7lD+Cq2FPDWsoXyvx559a+y9M0jerSadPlSZAO/0cbw= Subject key identifier: 9D:64:6E:34:10:85:E9:F4:C2:74:C2:DF:01:E1:37:EF:84:9D:46:71 Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft Manifest number: CC Signing time: Thu 15 May 2025 05:05:57 +0000 Manifest this update: Thu 15 May 2025 05:05:57 +0000 Manifest next update: Thu 22 May 2025 05:05:57 +0000 Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: /11o8YFZE/GKF8QcQbRiyNmYxZ3TsyV68nUs7moYIiM=) 2: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (hash: ZVnbf0eZss/W/BW/uaATqG881vi7quF65kC8w3J0+jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: May 15 05:05:57 2025 GMT Not After : May 22 05:05:57 2025 GMT Subject: CN=68257635-8cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:a0:cc:90:36:a6:f7:1e:8b:05:ee:82:c1: fa:be:4b:8f:50:cd:9d:60:28:d2:dc:7e:6d:62:ab: 39:88:6a:98:d9:97:8e:d6:8d:65:75:50:c1:e3:d2: fb:38:85:63:63:d8:a9:80:98:be:58:3d:7a:d0:27: 1b:bb:d9:2d:19:41:d8:88:b1:46:72:de:e5:68:2c: 1e:a3:ac:cc:5d:92:97:46:ba:ab:c8:01:aa:48:49: af:5c:be:2f:fb:20:0b:76:63:3a:13:9e:20:92:5d: ef:47:a1:0a:46:a9:c6:77:25:0c:57:35:2e:95:ef: 28:4a:02:62:1c:d0:cf:3c:a5:90:f9:2c:0d:b5:3d: a2:28:ca:dc:1c:05:1f:40:ea:39:b1:fe:3d:13:44: ca:35:dc:79:40:35:f0:fe:1d:2b:a2:14:f6:24:37: a8:55:46:9f:98:1c:e2:48:2a:64:98:92:7f:f5:bb: 9f:3c:09:dd:d8:26:9f:e7:bd:78:f6:47:f9:9a:19: 37:5a:ae:df:93:90:80:1d:e8:4d:42:4a:57:d0:b0: 0e:3e:8a:b3:4f:3c:31:2d:f2:c0:e8:e2:c0:ea:25: 4a:4e:ea:ca:97:8e:a9:37:85:b1:24:2d:13:80:7b: 2c:09:5d:13:9e:4c:7c:6f:c3:83:07:9d:5d:5f:cb: cc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:64:6E:34:10:85:E9:F4:C2:74:C2:DF:01:E1:37:EF:84:9D:46:71 X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:4b:2a:cb:02:9e:6f:ea:7a:d6:8c:a7:92:a1:78:d0:df:bb: 02:65:2f:46:78:7c:7f:ad:d7:c6:77:9c:fd:32:cb:82:2b:01: f1:75:b1:53:85:b2:07:c0:2d:17:c3:a1:7a:06:a6:86:d3:1e: de:6b:4e:b9:23:ee:a9:01:9d:e9:ac:43:ac:8e:b9:d3:06:ad: 88:79:cc:06:0f:24:6b:e9:42:b9:26:cc:34:0a:97:6e:ce:03: bb:a9:45:ed:19:e9:7a:48:01:7b:8c:31:c8:02:02:e9:c0:c3: 75:dd:ea:6d:ac:73:0e:9c:8a:6f:e8:71:3e:dd:5b:94:e6:fb: fe:80:fb:0b:fa:67:af:61:e2:36:b1:fa:b0:b7:77:0e:c5:4d: 7c:a1:a4:cd:f5:5d:b8:8e:99:ed:ed:24:1e:1c:ac:4a:51:ce: a4:17:b6:db:c6:cf:53:52:72:23:11:1b:a3:58:05:8d:b8:33: dc:21:ac:61:d4:8f:5a:93:45:83:60:ca:54:df:0a:e2:f4:e7: 9a:98:b8:53:66:2d:94:00:46:c7:9c:de:06:85:57:b2:b8:4e: e8:3e:ea:b0:98:db:be:61:15:49:1d:b8:11:9e:c1:a4:49:95: 8f:d0:1c:55:03:cd:9e:97:06:e0:d1:5e:03:a7:61:1f:e2:84: cc:28:6a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjUwNTE1MDUwNTU3WhcNMjUwNTIyMDUwNTU3WjAYMRYwFAYD VQQDEw02ODI1NzYzNS04Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuOgzJA2pvceiwXugsH6vkuPUM2dYCjS3H5tYqs5iGqY2ZeO1o1ldVDB49L7 OIVjY9ipgJi+WD160Ccbu9ktGUHYiLFGct7laCweo6zMXZKXRrqryAGqSEmvXL4v +yALdmM6E54gkl3vR6EKRqnGdyUMVzUule8oSgJiHNDPPKWQ+SwNtT2iKMrcHAUf QOo5sf49E0TKNdx5QDXw/h0rohT2JDeoVUafmBziSCpkmJJ/9bufPAnd2Caf5714 9kf5mhk3Wq7fk5CAHehNQkpX0LAOPoqzTzwxLfLA6OLA6iVKTurKl46pN4WxJC0T gHssCV0Tnkx8b8ODB51dX8vMYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1kbjQQ hen0wnTC3wHhN++EnUZxMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0ZDRS9FMEJFMzZBQzAyM0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5 RW1nSXJfZk9wUHdJNTlrcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFSyrLAp5v6nrWjKeSoXjQ37sCZS9GeHx/rdfGd5z9MsuCKwHxdbFT hbIHwC0Xw6F6BqaG0x7ea065I+6pAZ3prEOsjrnTBq2IecwGDyRr6UK5Jsw0Cpdu zgO7qUXtGel6SAF7jDHIAgLpwMN13eptrHMOnIpv6HE+3VuU5vv+gPsL+mevYeI2 sfqwt3cOxU18oaTN9V24jpnt7SQeHKxKUc6kF7bbxs9TUnIjERujWAWNuDPcIaxh 1I9ak0WDYMpU3wri9OeamLhTZi2UAEbHnN4GhVeyuE7oPuqwmNu+YRVJHbgRnsGk SZWP0BxVA82elwbg0V4Dp2Ef4oTMKGq6 -----END CERTIFICATE-----Generated at Fri May 16 13:49:27 2025 by rpki-client