$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: yteDkjych2Jzr/dJEJ+MTmQY0XjCky6DStjOjWNrHkU= Subject key identifier: 0C:A9:52:17:23:38:C5:2A:73:54:DB:8F:48:27:37:06:6F:12:ED:85 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 018E Signing time: Fri 09 May 2025 02:46:52 +0000 Manifest this update: Fri 09 May 2025 02:46:51 +0000 Manifest next update: Fri 16 May 2025 02:46:51 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: lPDCuJBqZ1vP4rG6Z0nWHaW2R8TwinQo0B8sHPSdLQc=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: May 9 02:46:51 2025 GMT Not After : May 16 02:46:51 2025 GMT Subject: CN=681d6c9b-8119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:69:7d:89:a8:5a:b0:e0:1f:3d:4f:14:c9: 1f:39:de:31:16:5d:90:7a:61:a6:22:66:08:66:6b: 7d:0f:8b:2a:d5:41:24:40:1b:ec:ec:b9:04:db:54: a7:6d:33:79:52:a6:db:38:c5:4c:80:f6:3b:b2:4e: 54:66:7e:a1:fa:f1:fb:dd:be:ad:dd:b4:f8:e1:11: a3:3d:25:14:b0:9e:6f:0d:18:0e:71:37:f6:ff:03: a5:33:ca:76:63:cd:10:2e:3f:ca:2a:e5:70:2f:9e: 15:37:62:45:c5:87:dd:6a:00:82:f4:93:92:d0:04: cd:11:42:8e:b7:f8:bc:db:36:87:ed:4a:97:0b:33: 11:50:47:45:de:cd:65:c7:d2:8f:ad:a3:b3:49:ee: c4:a3:0d:c0:76:3e:4a:b1:3b:6c:a7:99:54:09:c0: 0b:de:7a:8d:dd:50:06:4d:29:45:d3:9a:55:78:c9: e5:39:03:4c:60:34:89:35:74:50:01:62:53:8e:3a: 3c:d1:87:07:cb:11:c1:6b:12:be:f2:9e:c4:91:63: d3:2c:6e:1c:44:e8:a6:d7:6f:f1:f6:1f:99:d5:c5: 3a:91:b6:fd:ad:de:17:e1:d7:b8:b2:34:a5:17:94: 99:fa:b8:71:17:dc:47:03:d0:1a:ce:9d:7c:f4:19: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:52:17:23:38:C5:2A:73:54:DB:8F:48:27:37:06:6F:12:ED:85 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:56:15:ae:67:7e:e1:7a:75:ce:a9:02:be:9b:fd:ff:36:f3: df:df:30:e5:44:6e:aa:1f:82:12:77:96:e7:7b:df:3a:84:00: e1:5f:60:07:b2:13:a2:da:17:7c:f9:1c:52:12:04:25:72:bb: e3:4e:27:c8:73:67:84:3c:d0:1d:ad:59:19:f1:4e:b6:27:a7: 6b:d2:ab:2f:41:15:50:92:84:b0:91:c8:66:16:eb:4d:7c:59: 12:ea:74:ea:67:67:e1:a6:e5:b5:6e:3b:ee:78:72:9d:1f:b6: 9e:3a:70:a9:d2:a6:92:14:cb:e9:c4:a3:28:e9:e6:22:61:93: 3c:4f:30:cb:99:28:16:c5:c8:3e:c0:bb:17:06:18:e6:b2:ad: ad:f9:f9:48:59:b9:80:a8:0d:50:61:69:cf:ab:d3:19:6f:4b: 33:dc:f7:9d:0b:c4:cd:db:aa:f5:08:fe:48:db:7a:db:50:9f: 56:76:50:29:c9:6a:c2:94:82:a0:0f:f4:b3:f3:27:40:72:9e: 46:74:4d:89:71:09:55:ad:04:f0:9b:82:12:40:83:06:8a:16: 34:a2:ff:9c:93:96:c3:15:b5:09:2c:c5:f2:1b:6d:ac:bf:8b: 90:96:a7:83:83:44:a2:ee:ec:6f:59:89:2b:fe:ae:c8:ed:a5: dc:98:08:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjUwNTA5MDI0NjUxWhcNMjUwNTE2MDI0NjUxWjAYMRYwFAYD VQQDEw02ODFkNmM5Yi04MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFJpfYmoWrDgHz1PFMkfOd4xFl2QemGmImYIZmt9D4sq1UEkQBvs7LkE21Sn bTN5UqbbOMVMgPY7sk5UZn6h+vH73b6t3bT44RGjPSUUsJ5vDRgOcTf2/wOlM8p2 Y80QLj/KKuVwL54VN2JFxYfdagCC9JOS0ATNEUKOt/i82zaH7UqXCzMRUEdF3s1l x9KPraOzSe7Eow3Adj5KsTtsp5lUCcAL3nqN3VAGTSlF05pVeMnlOQNMYDSJNXRQ AWJTjjo80YcHyxHBaxK+8p7EkWPTLG4cROim12/x9h+Z1cU6kbb9rd4X4de4sjSl F5SZ+rhxF9xHA9Aazp189BlvxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAypUhcj OMUqc1Tbj0gnNwZvEu2FMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2VhWuZ37henXOqQK+m/3/NvPf3zDlRG6qH4ISd5bne986hADhX2AH shOi2hd8+RxSEgQlcrvjTifIc2eEPNAdrVkZ8U62J6dr0qsvQRVQkoSwkchmFutN fFkS6nTqZ2fhpuW1bjvueHKdH7aeOnCp0qaSFMvpxKMo6eYiYZM8TzDLmSgWxcg+ wLsXBhjmsq2t+flIWbmAqA1QYWnPq9MZb0sz3PedC8TN26r1CP5I23rbUJ9WdlAp yWrClIKgD/Sz8ydAcp5GdE2JcQlVrQTwm4ISQIMGihY0ov+ck5bDFbUJLMXyG22s v4uQlqeDg0Si7uxvWYkr/q7I7aXcmAgX -----END CERTIFICATE-----Generated at Sat May 10 05:22:50 2025 by rpki-client