$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: 7ktSBmkjU3bmjtrApjbeLJBNeQaB3BFzx8fpoob06jk= Subject key identifier: DE:EE:B9:44:2E:33:D0:58:B7:E0:55:26:71:B9:EC:74:4F:FF:5A:B3 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: CD Signing time: Sat 17 May 2025 05:18:26 +0000 Manifest this update: Sat 17 May 2025 05:18:26 +0000 Manifest next update: Sat 24 May 2025 05:18:26 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: X2J3shWwSRMP9iS0olN/t4J1x5N3FxnveYFMDnisUvo=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: FsP9VYFAICAa71awQKv/xp4WMIgY/BZLf1PogGiTuE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: May 17 05:18:26 2025 GMT Not After : May 24 05:18:26 2025 GMT Subject: CN=68281c22-f8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:35:38:44:03:fe:a6:db:7a:e9:39:0a:10: 5c:80:53:5a:9c:ad:b8:4d:a7:34:83:a7:f6:79:8c: 84:dc:ec:ed:4f:4d:7a:fc:61:bf:11:3b:18:e5:10: 78:87:83:e1:fe:44:3c:06:5c:14:0e:91:5c:dd:a5: de:a2:cd:c9:79:ed:63:0a:aa:e7:90:a3:98:ab:a5: 7b:c8:68:b9:2e:47:07:c0:1f:fe:eb:34:40:30:3b: cd:0c:72:59:0b:57:f3:16:5d:24:7a:8e:9b:bb:79: 0e:ec:09:e0:30:7a:09:53:0a:44:90:7d:c3:42:45: 6a:0c:39:05:f4:cb:12:7c:a3:34:e7:e6:97:6e:30: cc:bd:de:a6:2f:37:47:94:14:00:16:f1:3f:50:d7: f2:8e:8e:d8:e7:87:b9:3f:a2:98:c9:58:44:bf:67: b9:61:a8:b0:35:ce:d7:42:5f:a9:a2:60:4f:88:3c: a1:e7:63:e7:4d:5f:8b:d3:f5:29:79:e7:6c:d0:dd: 9e:b2:00:0c:f1:5f:35:2e:6a:a0:bd:94:ee:88:c4: 98:5a:d1:61:41:f5:6d:43:ed:0b:36:8f:cd:7e:7e: 3d:84:7e:18:b4:df:a6:7e:b3:3a:bb:7a:ba:13:af: 85:b0:b3:16:33:a4:70:c8:5c:14:b1:a7:60:f7:34: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:B9:44:2E:33:D0:58:B7:E0:55:26:71:B9:EC:74:4F:FF:5A:B3 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b0:a3:26:13:a2:80:77:7a:1e:63:75:a2:3b:e7:ee:f7:d3: be:2f:be:c0:ec:8f:bb:fc:a5:6f:df:09:db:3d:1d:8f:c5:f8: 1e:0d:7c:db:85:96:cb:48:f7:5d:7b:fb:80:17:d0:ac:0d:a9: 1f:1c:79:dd:4c:31:e8:f6:91:cd:96:08:d2:73:11:b6:b6:d6: e5:c6:4a:7f:c4:35:56:d9:2a:72:ff:de:9e:e6:84:a8:84:e4: 1d:70:f8:ca:18:a3:13:97:17:82:fd:19:25:c2:a0:ba:f6:9a: 53:81:d1:18:ce:f5:21:ee:ec:96:d1:9f:22:55:0f:8a:7a:3f: 46:b5:a4:a7:05:13:fc:f1:17:3c:22:cc:e2:a9:cc:fa:07:a4: 0d:41:31:1b:08:53:4c:52:f2:c9:79:8b:be:a4:f5:3d:8a:8c: 61:e7:87:2a:91:8f:4a:c0:95:ba:0e:0c:64:7c:26:ec:3e:b0: f0:27:5d:46:ce:6d:37:17:0a:d0:f9:1d:e1:65:a8:64:af:b3: c3:a3:cf:d5:1b:99:b7:ca:4d:d2:c9:fb:15:ab:2e:b8:45:37: 94:0a:5f:35:94:e7:ba:89:57:7e:80:32:05:a7:57:50:5f:cc: a9:0f:c9:8c:20:aa:73:70:e6:ed:d0:a0:57:ab:36:a3:2a:b4: 72:e3:99:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUwNTE3MDUxODI2WhcNMjUwNTI0MDUxODI2WjAYMRYwFAYD VQQDEw02ODI4MWMyMi1mOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCU1OEQD/qbbeuk5ChBcgFNanK24Tac0g6f2eYyE3OztT016/GG/ETsY5RB4 h4Ph/kQ8BlwUDpFc3aXeos3Jee1jCqrnkKOYq6V7yGi5LkcHwB/+6zRAMDvNDHJZ C1fzFl0keo6bu3kO7AngMHoJUwpEkH3DQkVqDDkF9MsSfKM05+aXbjDMvd6mLzdH lBQAFvE/UNfyjo7Y54e5P6KYyVhEv2e5YaiwNc7XQl+pomBPiDyh52PnTV+L0/Up eeds0N2esgAM8V81LmqgvZTuiMSYWtFhQfVtQ+0LNo/Nfn49hH4YtN+mfrM6u3q6 E6+FsLMWM6RwyFwUsadg9zSGsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7uuUQu M9BYt+BVJnG57HRP/1qzMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6sKMmE6KAd3oeY3WiO+fu99O+L77A7I+7/KVv3wnbPR2PxfgeDXzb hZbLSPdde/uAF9CsDakfHHndTDHo9pHNlgjScxG2ttblxkp/xDVW2Spy/96e5oSo hOQdcPjKGKMTlxeC/RklwqC69ppTgdEYzvUh7uyW0Z8iVQ+Kej9GtaSnBRP88Rc8 Isziqcz6B6QNQTEbCFNMUvLJeYu+pPU9ioxh54cqkY9KwJW6DgxkfCbsPrDwJ11G zm03FwrQ+R3hZahkr7PDo8/VG5m3yk3SyfsVqy64RTeUCl81lOe6iVd+gDIFp1dQ X8ypD8mMIKpzcObt0KBXqzajKrRy45lK -----END CERTIFICATE-----Generated at Sat May 17 18:07:59 2025 by rpki-client