$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft File: HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json) Hash identifier: Wy2Jk1Z8Dt1QtAPMsxwZR9uMj3r+tU5HKwQAJmCf1yM= Subject key identifier: 9B:EB:99:C0:9B:2D:D1:0F:C6:41:80:CF:4F:A8:20:4C:4B:E3:87:A0 Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft Manifest number: 1BED Signing time: Wed 14 May 2025 16:18:12 +0000 Manifest this update: Wed 14 May 2025 16:18:12 +0000 Manifest next update: Wed 21 May 2025 16:18:12 +0000 Files and hashes: 1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: FSA8bZPzO37auRPujTO1z6kSpddwr9kHoZboWqE11cg=) 2: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: 9EcXEyYQS23lcV2U+HKPELhdNtW+6VqWRslfao0UNEU=) 3: 9933B21049D411E7AA790315C4F9AE02.roa (hash: QoTcLfEkEV4sZtEqMQTgGT13hqif8q7yBrWiFwLEqIo=) 4: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: ZGC2ZFJHwlq5Ep2j3cd1PYdlRsmipJnSDGQN5BOUcNk=) 5: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: dgOhhCgJNmqIABfmqn7RZ7HEHVhf8zRLQCOO0zkoj5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7188 (0x1c14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: May 14 16:18:12 2025 GMT Not After : May 21 16:18:12 2025 GMT Subject: CN=6824c244-518a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:cb:31:e2:da:e9:25:fb:5c:2d:19:da:e0: 20:97:f9:11:3b:3f:57:91:ce:21:30:6e:31:92:9d: 25:37:fe:e5:a6:27:13:bb:3c:f1:b7:c7:c1:64:45: 92:41:8c:88:18:8f:52:c5:23:a2:af:c0:d6:4a:c2: 48:15:ee:81:38:55:b6:2d:8f:61:ce:bf:47:b0:79: a7:f2:52:a0:1f:10:75:35:9b:ee:a1:e1:39:0d:52: 7e:30:1b:01:9f:84:26:83:1d:53:50:34:66:e4:73: 77:d9:96:e0:78:d4:af:5e:db:b1:e2:31:39:5f:e9: f0:e8:54:76:30:f1:ef:fa:7d:f1:6c:90:08:4e:33: 2a:61:77:1c:80:f2:2c:d8:f7:93:eb:27:2a:01:ec: 7a:d2:6a:2b:b6:74:fa:f5:fd:b6:28:64:88:11:83: 51:64:fa:cf:0a:5f:09:1a:91:42:7a:ad:a7:d3:0f: 82:fa:e0:12:0f:19:cb:16:54:d3:bc:4b:ac:eb:a7: 1d:71:3d:2e:0e:c2:f4:d2:26:26:49:a1:33:bd:2f: d6:24:c7:82:22:8a:d9:99:b5:d2:ae:69:83:fe:44: 9a:c0:6c:dd:8a:71:a3:f8:e3:65:7f:3b:79:6f:a8: 10:53:4e:84:a6:fc:52:aa:35:74:b2:b4:31:a7:f4: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:99:C0:9B:2D:D1:0F:C6:41:80:CF:4F:A8:20:4C:4B:E3:87:A0 X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8f:74:e2:d3:a7:c7:4c:1d:3b:b4:17:75:93:e4:76:f9:7f: e9:7c:4d:6c:8e:84:93:83:b3:44:1c:e7:c6:c3:45:a6:d0:c6: 74:2f:91:3a:c4:43:5a:40:ed:4c:c0:01:25:96:1a:fd:2e:fd: 05:0d:f2:90:9f:a0:18:80:5e:54:1a:13:d2:6d:ea:4d:5a:98: 12:6d:34:2c:2b:e9:8f:f4:79:bf:3f:18:68:54:02:89:1a:35: 2b:d3:9a:e2:dc:0e:f1:cb:ca:ac:32:07:8b:be:d3:c5:fc:d8: c4:f5:41:05:28:00:36:81:63:09:37:52:e2:8d:e3:b5:13:c3: f2:91:8b:67:ab:68:59:c7:e5:bb:1d:db:c6:b3:40:91:08:61: 0a:18:99:56:13:fc:9e:e3:ff:f9:9b:55:a0:27:22:be:75:db: a8:1f:85:55:cc:f4:a4:b3:6c:66:f1:0b:e8:92:18:04:d8:e9: 03:7e:b8:e4:c3:96:3d:47:90:1e:51:6d:0e:80:ee:43:15:c3: 7f:83:26:07:34:84:b3:1d:f2:f5:6d:0a:f7:32:4e:5a:72:a9: 58:12:60:ed:d8:0a:2b:2a:36:be:a1:59:c1:77:f9:d6:41:18: 9d:90:a9:39:9f:4a:48:36:70:da:ff:fd:d7:74:ed:a5:92:19: e0:b9:69:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjUwNTE0MTYxODEyWhcNMjUwNTIxMTYxODEyWjAYMRYwFAYD VQQDEw02ODI0YzI0NC01MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssvLMeLa6SX7XC0Z2uAgl/kROz9Xkc4hMG4xkp0lN/7lpicTuzzxt8fBZEWS QYyIGI9SxSOir8DWSsJIFe6BOFW2LY9hzr9HsHmn8lKgHxB1NZvuoeE5DVJ+MBsB n4Qmgx1TUDRm5HN32ZbgeNSvXtux4jE5X+nw6FR2MPHv+n3xbJAITjMqYXccgPIs 2PeT6ycqAex60mortnT69f22KGSIEYNRZPrPCl8JGpFCeq2n0w+C+uASDxnLFlTT vEus66cdcT0uDsL00iYmSaEzvS/WJMeCIorZmbXSrmmD/kSawGzdinGj+ONlfzt5 b6gQU06EpvxSqjV0srQxp/S2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvrmcCb LdEPxkGAz0+oIExL44egMB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FFOS8wOERBNjBDNkYxQjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlH Yi1scUtYOTNMdWdMVVlwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlj3Ti06fHTB07tBd1k+R2+X/pfE1sjoSTg7NEHOfGw0Wm0MZ0L5E6 xENaQO1MwAEllhr9Lv0FDfKQn6AYgF5UGhPSbepNWpgSbTQsK+mP9Hm/PxhoVAKJ GjUr05ri3A7xy8qsMgeLvtPF/NjE9UEFKAA2gWMJN1LijeO1E8PykYtnq2hZx+W7 HdvGs0CRCGEKGJlWE/ye4//5m1WgJyK+dduoH4VVzPSks2xm8QvokhgE2OkDfrjk w5Y9R5AeUW0OgO5DFcN/gyYHNISzHfL1bQr3Mk5acqlYEmDt2AorKja+oVnBd/nW QRidkKk5n0pINnDa//3XdO2lkhnguWn2 -----END CERTIFICATE-----Generated at Thu May 15 09:11:20 2025 by rpki-client