$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json) Hash identifier: NDMlY/rCQn1Sz0uAX0vl5FOH4xthW2WYTqZ3nyNaW7c= Subject key identifier: DD:E3:E2:7B:6F:6F:76:F6:CF:66:C7:A0:86:17:0A:24:97:84:30:DA Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 187C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft Manifest number: 1860 Signing time: Fri 16 May 2025 16:43:21 +0000 Manifest this update: Fri 16 May 2025 16:43:21 +0000 Manifest next update: Fri 23 May 2025 16:43:21 +0000 Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: Saoa/lOjYat3uaD8J6DYswlR7Std96F7PhuKSSWo2ic=) 2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=) 3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=) 4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=) 5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6268 (0x187c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: May 16 16:43:21 2025 GMT Not After : May 23 16:43:21 2025 GMT Subject: CN=68276b29-3103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:74:19:c4:ae:63:34:74:bd:b4:cb:44:0e: 64:22:0a:50:fe:58:58:50:38:da:c5:ef:18:31:2d: 38:e9:b8:3d:6f:6b:2a:02:2d:13:6f:38:48:fe:71: 84:91:e6:17:58:c4:79:3e:1e:8a:ea:3c:53:87:95: 43:b7:fd:6c:eb:d8:9c:46:4e:cd:53:a0:9e:d9:13: 58:f8:3b:4a:0a:74:55:01:86:bc:30:d8:ac:1a:a1: fc:54:b9:c6:e1:ef:c6:9f:a9:6f:e9:4d:2e:a8:4b: 2b:9b:c2:7a:b6:54:e5:c6:94:5a:55:95:78:c2:56: 03:62:fa:bb:0b:f6:6e:13:5b:89:73:ef:42:30:62: f8:76:ff:b0:60:bd:c9:0a:1f:81:3a:60:39:e7:c6: d7:79:69:38:87:9e:fe:12:7d:11:93:ba:5b:3e:5b: 2f:09:14:26:70:7c:14:ad:3f:5a:f1:5f:ec:55:09: d5:67:f9:0c:9e:ca:f1:17:fb:ab:4e:4a:7b:6f:79: cc:8c:a7:2f:59:e5:b9:f8:10:f0:75:01:40:c9:ce: e5:c8:8e:85:8d:cc:4b:6d:c2:4d:a0:9e:6d:e3:5c: 0a:82:1a:1e:c2:b3:44:61:1b:2b:c1:de:ee:ae:1d: 59:90:7f:85:3c:93:49:cc:83:eb:68:f8:75:e6:de: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E3:E2:7B:6F:6F:76:F6:CF:66:C7:A0:86:17:0A:24:97:84:30:DA X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:29:5a:65:89:d2:77:fd:3a:3e:29:db:97:ad:88:56:56:30: 35:aa:4d:eb:22:a9:20:ce:97:b9:64:23:cf:e6:0c:a3:5e:45: c6:d3:56:f2:8b:06:46:eb:c5:3a:d2:07:1a:8d:55:96:08:82: f7:33:e7:53:53:20:5c:68:5a:cc:d5:f2:eb:2a:a4:f4:51:ac: 76:f9:a3:dc:8f:8a:d3:29:d8:ff:04:84:2a:4a:61:c9:bd:11: 02:d4:2c:ed:bf:d1:98:74:4e:bf:89:0c:22:82:80:ea:4c:ea: 66:3a:e3:a1:8b:a6:f9:04:bc:7d:55:a7:0a:c4:25:f5:0b:80: 63:00:23:f0:21:0b:3f:d3:68:97:28:b7:31:24:aa:d7:b1:d0: 84:a9:5c:16:fb:ee:9f:4d:93:3c:7a:65:b0:3e:be:64:3a:54: 96:8c:5f:fa:c8:b8:c3:78:11:72:80:2b:55:f5:1f:75:b0:b2: 89:0a:72:28:8b:57:20:56:b1:14:7f:1d:6b:cd:da:78:57:c4: 69:a1:b1:6d:d2:13:33:4c:21:9d:ab:5f:9b:31:41:43:15:c6: 9b:58:b3:e4:2a:19:1b:5d:1a:55:10:bc:a1:f9:25:ad:09:e5: 8a:67:09:3c:c0:27:b8:1b:5f:56:8b:e3:b8:52:e2:9c:68:3d: f9:c5:12:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUwNTE2MTY0MzIxWhcNMjUwNTIzMTY0MzIxWjAYMRYwFAYD VQQDEw02ODI3NmIyOS0zMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/h0GcSuYzR0vbTLRA5kIgpQ/lhYUDjaxe8YMS046bg9b2sqAi0TbzhI/nGE keYXWMR5Ph6K6jxTh5VDt/1s69icRk7NU6Ce2RNY+DtKCnRVAYa8MNisGqH8VLnG 4e/Gn6lv6U0uqEsrm8J6tlTlxpRaVZV4wlYDYvq7C/ZuE1uJc+9CMGL4dv+wYL3J Ch+BOmA558bXeWk4h57+En0Rk7pbPlsvCRQmcHwUrT9a8V/sVQnVZ/kMnsrxF/ur Tkp7b3nMjKcvWeW5+BDwdQFAyc7lyI6FjcxLbcJNoJ5t41wKghoewrNEYRsrwd7u rh1ZkH+FPJNJzIPraPh15t6BPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3j4ntv b3b2z2bHoIYXCiSXhDDaMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzk1My8xMjJEOEQyOEE0OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNW c3cyY3NpMWZpRTBYeFdtYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmKVplidJ3/To+KduXrYhWVjA1qk3rIqkgzpe5ZCPP5gyjXkXG01by iwZG68U60gcajVWWCIL3M+dTUyBcaFrM1fLrKqT0Uax2+aPcj4rTKdj/BIQqSmHJ vREC1Cztv9GYdE6/iQwigoDqTOpmOuOhi6b5BLx9VacKxCX1C4BjACPwIQs/02iX KLcxJKrXsdCEqVwW++6fTZM8emWwPr5kOlSWjF/6yLjDeBFygCtV9R91sLKJCnIo i1cgVrEUfx1rzdp4V8RpobFt0hMzTCGdq1+bMUFDFcabWLPkKhkbXRpVELyh+SWt CeWKZwk8wCe4G19Wi+O4UuKcaD35xRJD -----END CERTIFICATE-----Generated at Sat May 17 13:24:21 2025 by rpki-client