$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: x9e6Ych8QywUZUAXgg1BLPjCU6gHf+u8r4QL5fkX9Lk= Subject key identifier: AB:4F:F9:23:C8:D9:91:5C:DD:85:5D:40:BE:EF:00:70:22:84:02:DA Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 026C Signing time: Tue 13 May 2025 01:31:28 +0000 Manifest this update: Tue 13 May 2025 01:31:27 +0000 Manifest next update: Tue 20 May 2025 01:31:27 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: cYKrjrGux2dLMrM6dwGfY0rXO2Ap5kMzdWKD318oj0s=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: mDNZv224II9doQ1iNCGuKTRk+eFwgECKzo+AWal5Fq0=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: AgK/4KQKRm1k0cfVPX0Zdc5eL/A0KNuVFO4G4wksfbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: May 13 01:31:27 2025 GMT Not After : May 20 01:31:27 2025 GMT Subject: CN=6822a0ef-082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:02:a0:cd:b1:c6:ce:7e:49:10:4e:19:de: 2a:99:b3:e0:09:81:23:57:89:25:83:8f:96:76:b0: 12:cd:eb:59:f1:57:29:52:56:fa:b7:c5:5d:03:97: f2:8f:77:6c:6e:21:d4:71:31:e6:bb:bc:58:32:c6: b6:b7:a5:a6:af:70:32:63:b5:93:9a:bb:15:1a:1d: 51:9e:d0:f9:dc:9d:59:59:c2:1e:35:6a:63:5b:b6: de:59:74:fc:03:21:7f:af:56:04:28:33:e1:92:bc: 52:6b:01:4c:e1:ce:b0:2a:0b:48:70:5b:50:6d:60: b2:48:3b:e5:7c:25:30:4a:28:a1:93:d7:b4:de:80: 1c:8a:0c:b9:5b:b1:76:1e:89:cd:34:42:54:f1:5a: 63:82:5a:2c:e1:e8:db:a3:c6:f6:ec:51:88:20:68: 25:e8:30:f2:e5:a5:e5:2c:e6:fc:9b:3a:53:ed:97: 40:a7:1a:86:7d:c9:f0:e8:25:c5:d9:8a:48:ec:29: b3:b6:c6:02:55:8f:53:68:05:46:76:8e:b5:a5:d5: 49:ee:72:f5:01:e1:98:00:7c:6e:cf:32:21:4c:ba: 69:27:90:5d:68:05:ca:09:84:1c:80:b2:5e:a1:da: 00:f3:fd:19:75:fd:a4:e0:bf:a5:bc:46:a9:d5:64: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4F:F9:23:C8:D9:91:5C:DD:85:5D:40:BE:EF:00:70:22:84:02:DA X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:0a:4d:a5:92:36:84:c4:fb:f4:d1:d0:4c:3f:d4:2b:dc: ef:f1:1e:09:84:8d:84:51:4a:3a:27:14:0e:ca:cf:e4:5d:63: 65:74:f6:18:32:bd:7a:00:2d:f4:27:fa:52:40:74:34:7e:05: bb:16:43:e4:cd:b2:38:f5:f9:f9:3f:46:cb:f1:58:89:e8:d9: e3:ca:ea:8f:9a:1f:eb:16:0c:5f:bb:e4:8e:7f:ac:e7:cf:dd: 01:ec:67:34:0f:99:36:4a:59:ef:bd:2a:8b:cc:62:9a:97:b2: 82:9a:a9:e8:30:e4:d5:f8:ff:01:b1:96:63:1f:d1:a7:ce:12: ab:93:db:84:0c:ec:a5:09:4f:c3:32:5b:7e:0a:74:ef:90:3f: af:82:37:eb:ef:9b:b5:c3:66:9d:f9:1f:b3:cc:23:dd:a9:75: 36:30:21:e4:ea:a7:75:69:0c:bf:8f:18:39:f1:0a:8f:39:28: 02:cb:09:ac:78:0b:32:7d:8f:7e:4c:95:e1:b2:02:28:53:fe: 2c:b4:95:0c:7f:67:c2:30:ef:46:f6:9a:34:7b:17:a0:b4:34: 71:98:72:a3:2b:b0:2e:0d:28:f9:6a:65:60:b3:f0:a0:a3:09: 3e:16:61:b8:71:b8:c5:ce:f4:3d:67:64:15:2a:11:b6:67:b0: 94:09:6f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwNTEzMDEzMTI3WhcNMjUwNTIwMDEzMTI3WjAYMRYwFAYD VQQDEw02ODIyYTBlZi0wODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt74CoM2xxs5+SRBOGd4qmbPgCYEjV4klg4+WdrASzetZ8VcpUlb6t8VdA5fy j3dsbiHUcTHmu7xYMsa2t6Wmr3AyY7WTmrsVGh1RntD53J1ZWcIeNWpjW7beWXT8 AyF/r1YEKDPhkrxSawFM4c6wKgtIcFtQbWCySDvlfCUwSiihk9e03oAcigy5W7F2 HonNNEJU8Vpjglos4ejbo8b27FGIIGgl6DDy5aXlLOb8mzpT7ZdApxqGfcnw6CXF 2YpI7CmztsYCVY9TaAVGdo61pdVJ7nL1AeGYAHxuzzIhTLppJ5BdaAXKCYQcgLJe odoA8/0Zdf2k4L+lvEap1WTi6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtP+SPI 2ZFc3YVdQL7vAHAihALaMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJegpNpZI2hMT79NHQTD/UK9zv8R4JhI2EUUo6JxQOys/kXWNldPYY Mr16AC30J/pSQHQ0fgW7FkPkzbI49fn5P0bL8ViJ6NnjyuqPmh/rFgxfu+SOf6zn z90B7Gc0D5k2SlnvvSqLzGKal7KCmqnoMOTV+P8BsZZjH9GnzhKrk9uEDOylCU/D Mlt+CnTvkD+vgjfr75u1w2ad+R+zzCPdqXU2MCHk6qd1aQy/jxg58QqPOSgCywms eAsyfY9+TJXhsgIoU/4stJUMf2fCMO9G9po0exegtDRxmHKjK7AuDSj5amVgs/Cg owk+FmG4cbjFzvQ9Z2QVKhG2Z7CUCW/y -----END CERTIFICATE-----Generated at Wed May 14 08:13:24 2025 by rpki-client