$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: 3pUYlBL1X0u66id4kGh71bUN0Q6Qb7SIHDY1VIAw4wI= Subject key identifier: E1:F1:A3:7E:C5:42:F0:54:66:29:19:99:2E:4D:CC:69:1A:45:29:E5 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 0145 Signing time: Sun 11 May 2025 03:17:17 +0000 Manifest this update: Sun 11 May 2025 03:17:16 +0000 Manifest next update: Sun 18 May 2025 03:17:16 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: z6hHPSssb/zPaAkOXmiTeA+4kdyE5unUJHL6zPAA7+A=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: kdsA/bny2SyuYzwYvWjWWNRHht/7GqZqRAtQE/oZ56I=) 3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=) 4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: May 11 03:17:16 2025 GMT Not After : May 18 03:17:16 2025 GMT Subject: CN=682016bc-7ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:2c:a7:73:6c:4a:04:54:83:6b:86:5d:b1: 72:c4:b2:de:3e:16:1e:56:c5:9f:35:45:68:60:d5: 4d:25:0e:35:d6:21:6c:1e:d1:5e:dd:6f:3a:e2:d1: e6:82:6a:3e:22:8c:e4:eb:71:2c:c9:31:18:03:98: fc:0e:32:1b:a8:32:1c:bd:57:f3:0b:9b:a0:63:cf: c2:03:65:b5:ee:f3:48:17:59:f8:91:68:99:b8:c9: 29:9c:21:7e:d0:70:86:aa:a1:65:24:ac:8a:db:0d: c6:75:41:3c:d3:f7:b6:69:dc:5d:50:04:a7:22:c9: d8:ac:d3:e6:e2:08:2d:42:09:c3:3e:80:91:d3:4a: 40:e7:5a:b1:e6:a3:54:7f:42:88:bc:f4:33:ca:da: 3f:ec:79:ff:d0:e7:ff:c8:39:f3:f5:54:cb:20:d2: 3a:16:72:e4:ce:2e:4e:66:ea:05:40:69:bb:e6:13: a7:6b:a9:91:8a:d9:52:fb:a9:1e:03:10:76:8f:34: b0:e8:07:dc:0a:02:c8:06:db:5a:59:a1:66:d8:41: 5a:75:c7:e6:f8:77:78:01:90:86:52:ca:62:7e:6e: bf:ba:6c:65:e3:e7:e4:b1:45:0a:ec:51:7f:a8:0a: 4e:f7:44:1a:c4:9f:b4:c2:65:98:a7:10:71:cd:45: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:A3:7E:C5:42:F0:54:66:29:19:99:2E:4D:CC:69:1A:45:29:E5 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:53:ce:ad:49:fa:97:0e:26:f0:b9:f8:21:4f:c3:1c:fa:7d: a0:c1:30:44:6b:eb:ad:f4:fe:84:8e:50:4f:a3:e8:d3:4e:d5: e5:c3:3c:1f:79:fd:fb:e6:dd:9b:4d:31:65:4d:68:88:34:f2: d2:25:0c:d7:ff:58:02:6a:5f:f0:2d:da:20:eb:bc:f0:67:28: 69:8b:f7:43:d2:75:57:0b:0e:c8:49:b5:24:ea:c4:a9:b4:77: 86:2f:c7:49:71:6f:f3:57:ad:ad:35:4d:00:07:aa:0b:65:83: 59:56:84:31:07:54:a6:1b:a6:6f:93:36:1a:c1:9c:13:fd:09: 2f:da:8c:2b:de:52:1a:cd:ae:7d:c7:47:2d:bb:66:d6:c0:01: a3:88:00:ff:a2:eb:f8:c7:48:98:cf:0d:8e:fa:31:48:bb:22: 6e:0f:f2:7d:5b:cd:72:90:df:e3:d0:b7:ee:aa:b3:4a:d6:c9: 05:4c:7b:7e:47:1f:d9:7e:8d:a7:1a:c8:c0:ec:91:fb:0a:e4: cd:2e:2c:12:d2:20:c5:35:53:d6:a4:da:8d:5b:0a:b3:8a:2a: bc:1b:04:4d:55:ee:4e:5a:6d:62:81:6a:b4:c8:0e:33:94:c2: 4c:1f:1e:ba:89:44:c3:59:50:03:36:de:02:71:81:70:ce:45: 3b:6e:ba:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwNTExMDMxNzE2WhcNMjUwNTE4MDMxNzE2WjAYMRYwFAYD VQQDEw02ODIwMTZiYy03ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhMsp3NsSgRUg2uGXbFyxLLePhYeVsWfNUVoYNVNJQ411iFsHtFe3W864tHm gmo+Iozk63EsyTEYA5j8DjIbqDIcvVfzC5ugY8/CA2W17vNIF1n4kWiZuMkpnCF+ 0HCGqqFlJKyK2w3GdUE80/e2adxdUASnIsnYrNPm4ggtQgnDPoCR00pA51qx5qNU f0KIvPQzyto/7Hn/0Of/yDnz9VTLINI6FnLkzi5OZuoFQGm75hOna6mRitlS+6ke AxB2jzSw6AfcCgLIBttaWaFm2EFadcfm+Hd4AZCGUspifm6/umxl4+fksUUK7FF/ qApO90QaxJ+0wmWYpxBxzUUTcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHxo37F QvBUZikZmS5NzGkaRSnlMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbU86tSfqXDibwufghT8Mc+n2gwTBEa+ut9P6EjlBPo+jTTtXlwzwf ef375t2bTTFlTWiINPLSJQzX/1gCal/wLdog67zwZyhpi/dD0nVXCw7ISbUk6sSp tHeGL8dJcW/zV62tNU0AB6oLZYNZVoQxB1SmG6ZvkzYawZwT/Qkv2owr3lIaza59 x0ctu2bWwAGjiAD/ouv4x0iYzw2O+jFIuyJuD/J9W81ykN/j0LfuqrNK1skFTHt+ Rx/Zfo2nGsjA7JH7CuTNLiwS0iDFNVPWpNqNWwqziiq8GwRNVe5OWm1igWq0yA4z lMJMHx66iUTDWVADNt4CcYFwzkU7brq5 -----END CERTIFICATE-----Generated at Sun May 11 14:56:23 2025 by rpki-client