$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: r9NJqkk2QXmllPOD67rtO3+58naEYJsadUn7RU13udc= Subject key identifier: E9:FB:64:6D:B8:3D:39:91:F1:28:DB:01:8F:18:08:6E:EB:A5:7C:01 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A12 Signing time: Wed 14 May 2025 16:26:57 +0000 Manifest this update: Wed 14 May 2025 16:26:57 +0000 Manifest next update: Wed 21 May 2025 16:26:57 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: PD8UdPqMsaM6WqubuhTbym1Tf0IHWxk9oKYc1hAfhlI=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: YOnwHdL+VM4WZZwYTJ66mt2t+UeBiT+rfThROtawpHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6682 (0x1a1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: May 14 16:26:57 2025 GMT Not After : May 21 16:26:57 2025 GMT Subject: CN=6824c451-cc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bf:4c:b5:82:53:0e:00:01:ab:3a:e2:60:5e: 0d:b0:bd:be:f8:9f:dc:71:29:9b:1b:15:38:d0:90: 9b:c9:ba:20:66:a1:5d:98:fc:c4:aa:21:1a:cf:b3: b4:38:76:6c:57:2d:28:ef:bd:72:c2:fc:ae:1d:87: 62:1d:21:1b:9e:aa:2c:9e:ea:56:ff:51:31:25:b3: 98:ad:4e:b7:9c:21:7d:77:3d:14:22:72:42:b3:d6: 8c:19:80:a3:76:16:85:27:f7:b4:1b:4e:65:e9:1e: 0d:0f:38:6a:95:2d:e9:cb:d2:72:f3:10:d7:12:5a: 1c:4d:a6:d4:9e:92:f8:d7:1d:59:d3:1a:26:6a:4f: 68:9e:c5:33:89:53:0a:7a:bf:ae:28:a3:8c:f6:c6: 61:1f:3d:64:b5:5b:b7:01:5f:68:67:fe:53:f8:70: b3:b4:d0:c0:07:c8:32:70:8e:1e:7e:b3:c8:af:4c: 34:6d:97:0e:ad:fc:a9:6d:03:30:ea:78:94:14:a1: 8f:3b:1e:4e:4c:c2:92:34:45:ac:f7:e7:0a:18:ea: 5b:ee:61:94:98:49:b1:d0:8e:58:6b:42:8d:83:92: 50:be:36:46:b3:f3:5c:f4:27:32:4b:c0:6a:f3:94: 8b:d2:12:42:fd:e5:46:80:48:e6:72:2d:8d:ae:c3: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:64:6D:B8:3D:39:91:F1:28:DB:01:8F:18:08:6E:EB:A5:7C:01 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:08:5a:07:b1:48:b9:80:11:0a:84:3e:44:3d:e7:11:0d:f4: 56:f9:7c:98:8d:53:cc:b0:9b:91:cc:e0:58:aa:93:e8:06:68: d3:33:20:3e:6e:ae:b2:c9:43:dd:d0:69:c8:86:05:13:bf:bf: 88:3f:88:a0:f5:ae:57:84:f8:44:9d:d4:bd:4b:78:44:71:ac: c5:5c:79:73:4b:2e:92:69:cc:c5:80:7f:ff:66:20:07:68:85: 08:fc:cd:be:db:f7:2a:4c:8b:99:77:5d:8f:27:be:be:51:54: 34:75:c8:0f:f5:d5:12:e6:ed:6f:ee:33:f8:57:f0:9d:e2:71: 6e:5b:0c:5f:38:f4:49:d2:cf:a4:25:31:42:37:95:91:26:57: 16:a4:e3:1d:68:a0:d6:20:6c:6b:36:05:4d:de:d2:91:c6:ec: c0:76:f9:c4:85:e4:be:19:28:9d:d9:76:96:d1:f1:2f:28:60: 71:e9:1a:ae:ba:b7:e6:60:a9:ed:45:a5:42:8f:d4:c4:b4:9d: 62:33:fd:1b:6a:2e:97:38:76:84:78:2e:d2:70:dc:53:da:49: 3b:bb:4f:17:b0:8d:07:dc:24:0e:ef:fd:97:e5:99:93:76:ad: cb:85:07:1f:18:dd:08:49:26:6c:0d:90:b4:ad:53:5a:cb:58: b1:93:f8:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwNTE0MTYyNjU3WhcNMjUwNTIxMTYyNjU3WjAYMRYwFAYD VQQDEw02ODI0YzQ1MS1jYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6b9MtYJTDgABqzriYF4NsL2++J/ccSmbGxU40JCbybogZqFdmPzEqiEaz7O0 OHZsVy0o771ywvyuHYdiHSEbnqosnupW/1ExJbOYrU63nCF9dz0UInJCs9aMGYCj dhaFJ/e0G05l6R4NDzhqlS3py9Jy8xDXElocTabUnpL41x1Z0xomak9onsUziVMK er+uKKOM9sZhHz1ktVu3AV9oZ/5T+HCztNDAB8gycI4efrPIr0w0bZcOrfypbQMw 6niUFKGPOx5OTMKSNEWs9+cKGOpb7mGUmEmx0I5Ya0KNg5JQvjZGs/Nc9CcyS8Bq 85SL0hJC/eVGgEjmci2NrsM1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn7ZG24 PTmR8SjbAY8YCG7rpXwBMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPCFoHsUi5gBEKhD5EPecRDfRW+XyYjVPMsJuRzOBYqpPoBmjTMyA+ bq6yyUPd0GnIhgUTv7+IP4ig9a5XhPhEndS9S3hEcazFXHlzSy6SaczFgH//ZiAH aIUI/M2+2/cqTIuZd12PJ76+UVQ0dcgP9dUS5u1v7jP4V/Cd4nFuWwxfOPRJ0s+k JTFCN5WRJlcWpOMdaKDWIGxrNgVN3tKRxuzAdvnEheS+GSid2XaW0fEvKGBx6Rqu urfmYKntRaVCj9TEtJ1iM/0bai6XOHaEeC7ScNxT2kk7u08XsI0H3CQO7/2X5ZmT dq3LhQcfGN0ISSZsDZC0rVNay1ixk/jz -----END CERTIFICATE-----Generated at Fri May 16 10:03:41 2025 by rpki-client