$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json) Hash identifier: Wn3BQb8t4AOGYq/6D+bxq6ufUdlDv0L9wBdZzMlfPOM= Subject key identifier: B7:BF:76:BC:DF:70:1A:6A:AC:7B:91:4D:49:16:8E:AF:C2:6F:A0:45 Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft Manifest number: 89 Signing time: Sun 11 May 2025 05:17:27 +0000 Manifest this update: Sun 11 May 2025 05:17:27 +0000 Manifest next update: Sun 18 May 2025 05:17:27 +0000 Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: 5AtVPAarxfJQebpTOA9KBj9mWbH1zq96jQYQnxsEF/8=) 2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: yDqC4T9k/RQEkfG5fQ7+DRcSfQmuJV8SSd24ypWwq18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Validity Not Before: May 11 05:17:27 2025 GMT Not After : May 18 05:17:27 2025 GMT Subject: CN=682032e7-939c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:ff:06:4d:be:1a:fc:22:61:4a:f8:00:22: 1e:70:26:03:71:98:99:7f:4a:c5:1c:8f:f9:94:82: 48:e4:74:84:b4:16:ae:37:75:cc:43:e4:c6:c8:d5: a1:16:50:38:7e:35:59:a3:78:0d:5e:f4:ec:ba:5e: ae:97:e1:76:80:57:21:ad:0e:90:82:a2:ab:c4:46: a0:a4:70:06:8c:2d:1b:cf:0e:ef:96:6d:d1:41:21: e4:e8:77:6e:f5:da:07:51:00:7b:78:ad:ef:1f:07: 91:7f:2d:c3:50:a7:ea:8d:45:09:4f:a3:55:0b:7b: fd:57:8b:ab:f2:84:9d:df:f7:0e:8a:11:7c:ff:54: 6e:87:90:b6:7f:7b:f4:ef:11:b1:de:93:5b:bc:c0: 8e:c0:3b:96:22:62:bd:e1:93:33:56:13:fe:57:93: 85:33:5e:dc:bd:a7:9b:0e:80:cc:aa:b7:5f:2d:aa: 40:b4:6e:ae:e0:44:77:a1:f2:82:66:e4:fa:02:53: 9e:da:c7:f3:6c:69:27:a0:8f:02:8e:79:18:3c:da: b3:56:82:42:db:d1:3a:9d:19:1a:2f:4b:9c:8c:08: 1c:97:90:d4:ac:05:f6:ef:79:a1:ff:dd:7a:e5:80: 3f:d1:0f:76:a4:33:8d:39:bc:cf:59:b1:68:15:c2: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BF:76:BC:DF:70:1A:6A:AC:7B:91:4D:49:16:8E:AF:C2:6F:A0:45 X509v3 Authority Key Identifier: keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3b:0a:27:d6:41:25:c0:49:25:76:5c:ed:6b:2d:a4:8a:06: 01:d3:a6:64:0e:9f:f4:5d:55:df:ce:7e:f6:fd:44:36:05:14: 9d:58:11:aa:11:96:f4:39:b1:a8:be:de:1c:f7:9b:c2:04:61: 9b:05:de:a5:fd:3f:39:3a:ac:06:c8:27:3b:29:cf:eb:21:dc: a3:ce:2e:c1:d9:eb:1b:49:e4:59:7b:6c:f1:96:bb:1b:8a:f4: 09:0a:53:35:af:c0:39:63:b8:cb:bd:77:73:b5:dd:15:d5:72: 18:ab:8f:29:15:87:3b:17:a6:28:2c:21:ef:80:a5:c7:2f:cb: 17:9f:1f:f7:0d:e4:09:c4:2c:af:2f:e4:d0:e3:72:0f:42:b8: 0e:77:9c:a8:87:b7:66:e7:36:4d:6f:3e:37:a6:30:88:8e:96: c7:a9:a5:67:50:a6:8a:e1:bc:8e:ef:eb:e0:c1:c5:89:21:b5: 25:01:62:45:6b:53:f8:30:05:74:71:a2:59:c3:db:67:cb:7f: 22:aa:3d:dd:26:5f:51:86:5c:2f:d1:0e:66:68:bc:8a:60:41: 13:27:db:ca:e5:16:8b:7d:29:77:54:cc:97:db:95:b1:b9:5b: a6:83:0d:be:1a:0f:08:e0:6a:7d:8d:af:44:5f:90:14:17:35: d8:3d:a4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBQzYxMTAvBgNVBAUTKEZDNzkyRjFENjJGMjk1REY0NDFGQTIxRThGM0JDRjI3 Q0E2MTA2MzAwHhcNMjUwNTExMDUxNzI3WhcNMjUwNTE4MDUxNzI3WjAYMRYwFAYD VQQDEw02ODIwMzJlNy05MzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkH/Bk2+GvwiYUr4ACIecCYDcZiZf0rFHI/5lIJI5HSEtBauN3XMQ+TGyNWh FlA4fjVZo3gNXvTsul6ul+F2gFchrQ6QgqKrxEagpHAGjC0bzw7vlm3RQSHk6Hdu 9doHUQB7eK3vHweRfy3DUKfqjUUJT6NVC3v9V4ur8oSd3/cOihF8/1Ruh5C2f3v0 7xGx3pNbvMCOwDuWImK94ZMzVhP+V5OFM17cvaebDoDMqrdfLapAtG6u4ER3ofKC ZuT6AlOe2sfzbGknoI8CjnkYPNqzVoJC29E6nRkaL0ucjAgcl5DUrAX273mh/916 5YA/0Q92pDONObzPWbFoFcJIvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe/drzf cBpqrHuRTUkWjq/Cb6BFMB8GA1UdIwQYMBaAFPx5Lx1i8pXfRB+iHo87zyfKYQYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREFDNi81OUVCRTJBRTVF QzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxkOUVINkllanp2UEo4cGhC akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxk OUVINkllanp2UEo4cGhCakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVOwon1kElwEkldlztay2kigYB06ZkDp/0XVXfzn72/UQ2BRSdWBGq EZb0ObGovt4c95vCBGGbBd6l/T85OqwGyCc7Kc/rIdyjzi7B2esbSeRZe2zxlrsb ivQJClM1r8A5Y7jLvXdztd0V1XIYq48pFYc7F6YoLCHvgKXHL8sXnx/3DeQJxCyv L+TQ43IPQrgOd5yoh7dm5zZNbz43pjCIjpbHqaVnUKaK4byO7+vgwcWJIbUlAWJF a1P4MAV0caJZw9tny38iqj3dJl9Rhlwv0Q5maLyKYEETJ9vK5RaLfSl3VMyX25Wx uVumgw2+Gg8I4Gp9ja9EX5AUFzXYPaQa -----END CERTIFICATE-----Generated at Mon May 12 19:56:43 2025 by rpki-client