$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: gpQ8Iyy1MRBPN6hQOza1DMuAzd9tIWpXDQj89EGy2kU= Subject key identifier: B0:9C:C4:1C:90:76:9E:AA:0D:10:D8:43:91:19:64:6D:82:93:A7:8E Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 064D Signing time: Fri 16 May 2025 22:49:57 +0000 Manifest this update: Fri 16 May 2025 22:49:56 +0000 Manifest next update: Fri 23 May 2025 22:49:56 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: zj3pEBQ5wGpY0RtFJ+WSxQZHA9WiZ/XBSxdEuDeiSMc=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: iRYRVo5lbaJTFKYyTxWAHiXDjG/PpAWNzoZqTqR4jfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: May 16 22:49:56 2025 GMT Not After : May 23 22:49:56 2025 GMT Subject: CN=6827c115-42b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:6f:0e:cd:91:cc:d2:53:68:93:b7:a7:2b: 36:e9:5d:6b:c6:3d:85:9f:e7:e2:34:24:c2:50:a9: 0d:09:9f:42:80:b1:30:80:84:9a:df:2c:3d:e2:6b: 86:8b:67:d2:20:04:83:1b:2c:d8:51:76:82:c5:60: 03:4b:84:39:1f:7e:64:37:39:5a:68:db:9b:cf:2d: 90:0c:f0:cb:93:c5:2e:ed:77:0d:0a:09:89:cd:ae: dc:c3:5e:64:be:7e:2b:59:05:d6:14:55:e2:3e:bd: d6:19:74:3e:18:5b:30:47:16:79:aa:76:83:b9:6f: a5:2f:39:85:a4:da:7b:81:28:2e:4c:f7:68:bf:3c: c1:4e:f3:d9:f8:07:b1:d0:28:76:44:7f:78:36:cf: 25:0d:b4:16:2a:ae:a2:54:d6:b3:58:93:35:06:58: 6e:be:4b:f5:ce:03:89:4a:77:2a:a3:4d:b9:5e:17: 76:75:46:d2:a2:55:c8:88:e5:47:2e:1a:e7:7b:d5: 5b:c0:3d:cb:f6:8f:50:d2:78:b2:69:0e:df:28:2c: 90:21:58:60:6e:0f:bc:13:94:17:d4:27:96:47:a1: 8d:56:ec:65:08:94:a0:72:80:6e:ea:89:aa:4d:08: d5:3d:71:12:8a:02:8b:0b:64:85:42:08:7a:32:61: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:C4:1C:90:76:9E:AA:0D:10:D8:43:91:19:64:6D:82:93:A7:8E X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:eb:e8:3f:11:bc:d9:ae:ec:af:f5:df:4a:22:40:b7:4a:50: c7:7c:fd:3a:fb:03:de:0c:f6:c1:ca:a1:39:f1:19:a7:d8:65: b2:58:95:3a:93:db:17:76:09:5d:d6:bf:48:32:87:29:fa:98: 51:5a:2b:81:48:82:6f:ec:dd:17:00:e1:f6:b9:8a:47:ff:ee: 32:cb:ca:91:cf:b8:02:25:05:d7:ec:52:94:7c:56:0c:b0:2a: 2d:14:74:62:ea:a9:22:fa:1e:fe:7f:65:84:69:80:92:da:98: 5d:1c:87:bd:c7:c5:85:fb:a6:2f:1b:76:74:98:4f:5c:4a:da: 30:b0:de:d8:53:c5:6d:17:41:8c:30:be:a0:e6:19:fa:f2:4b: 4c:d5:e5:61:42:38:43:b2:36:6c:01:92:7d:e0:7d:47:aa:0d: 4e:8d:68:f2:e5:02:d4:d6:32:53:f1:49:13:c3:b0:b1:27:b8: db:b2:a5:98:4d:2a:6b:a3:cf:f1:20:d4:8f:75:41:e7:bc:29: 47:50:9a:a7:bc:6e:b4:2b:6a:8f:4d:3b:43:98:bc:e8:75:7b: 77:2c:8d:c1:fc:b2:78:21:9c:3e:cd:72:f0:88:71:bb:1e:e7: 37:0e:95:cb:2b:4f:99:52:41:e3:af:3e:89:73:66:a8:12:8b: bf:70:a3:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUwNTE2MjI0OTU2WhcNMjUwNTIzMjI0OTU2WjAYMRYwFAYD VQQDEw02ODI3YzExNS00MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5pvDs2RzNJTaJO3pys26V1rxj2Fn+fiNCTCUKkNCZ9CgLEwgISa3yw94muG i2fSIASDGyzYUXaCxWADS4Q5H35kNzlaaNubzy2QDPDLk8Uu7XcNCgmJza7cw15k vn4rWQXWFFXiPr3WGXQ+GFswRxZ5qnaDuW+lLzmFpNp7gSguTPdovzzBTvPZ+Aex 0Ch2RH94Ns8lDbQWKq6iVNazWJM1Blhuvkv1zgOJSncqo025Xhd2dUbSolXIiOVH Lhrne9VbwD3L9o9Q0niyaQ7fKCyQIVhgbg+8E5QX1CeWR6GNVuxlCJSgcoBu6omq TQjVPXESigKLC2SFQgh6MmFYHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCcxByQ dp6qDRDYQ5EZZG2Ck6eOMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6+g/EbzZruyv9d9KIkC3SlDHfP06+wPeDPbByqE58Rmn2GWyWJU6 k9sXdgld1r9IMocp+phRWiuBSIJv7N0XAOH2uYpH/+4yy8qRz7gCJQXX7FKUfFYM sCotFHRi6qki+h7+f2WEaYCS2phdHIe9x8WF+6YvG3Z0mE9cStowsN7YU8VtF0GM ML6g5hn68ktM1eVhQjhDsjZsAZJ94H1Hqg1OjWjy5QLU1jJT8UkTw7CxJ7jbsqWY TSpro8/xINSPdUHnvClHUJqnvG60K2qPTTtDmLzodXt3LI3B/LJ4IZw+zXLwiHG7 Huc3DpXLK0+ZUkHjrz6Jc2aoEou/cKP3 -----END CERTIFICATE-----Generated at Sun May 18 01:09:56 2025 by rpki-client