$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: 1RJUnycAS0IJzCMgC5Bm0uqS/YSdU2/sn0Kk1oXKXJU= Subject key identifier: 8D:D1:FA:DD:09:1C:11:EC:70:47:42:D5:4E:74:21:6B:D5:79:5A:8D Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 192A Signing time: Sun 04 May 2025 16:20:29 +0000 Manifest this update: Sun 04 May 2025 16:20:29 +0000 Manifest next update: Sun 11 May 2025 16:20:29 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: NMc2ERvUsZB9l9kFtuAKglLU3U/SmDkVtrE0FCuEVew=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: May 4 16:20:29 2025 GMT Not After : May 11 16:20:29 2025 GMT Subject: CN=681793cd-1662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:fa:1b:15:a0:b0:bd:64:72:d9:58:4c:80: a6:e8:de:36:44:8a:52:51:f1:38:8c:30:11:66:97: fc:2d:dc:85:cd:32:39:7a:99:bf:3b:b7:ff:fc:85: 78:51:f5:36:b3:b9:07:ef:9e:a5:04:b7:48:33:73: 2a:c0:4c:6f:84:14:5b:02:2f:7b:07:f0:5a:87:ba: 66:f1:1b:14:b9:ac:58:31:6c:88:25:b2:25:ed:8d: 5e:04:42:91:e5:93:c2:00:5c:b4:b5:89:e5:12:13: ed:b9:2f:c4:29:fa:a3:20:b3:d9:1b:9d:f9:19:cf: e3:16:7d:ae:de:25:49:37:3d:19:70:06:ab:db:ea: f4:ae:da:b7:90:f0:8c:4d:15:9d:f5:c8:a5:61:76: ea:66:2f:2e:0c:9a:cd:a4:93:18:43:b8:cc:7c:6a: c8:8b:21:95:b9:05:58:04:95:5a:63:7e:94:69:ab: f6:3f:63:21:5d:10:8e:09:e3:ec:6c:33:53:d7:36: d1:d5:28:1b:32:42:91:c8:1c:75:b3:ca:cd:1d:75: 47:39:44:ec:71:71:ad:88:df:f0:2e:73:66:bc:4f: 64:25:3b:f6:f5:0f:69:cd:96:c1:3d:54:3b:09:af: 9e:12:7c:87:1f:05:67:e9:1f:a3:90:bf:8a:d4:ad: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:FA:DD:09:1C:11:EC:70:47:42:D5:4E:74:21:6B:D5:79:5A:8D X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9b:96:c7:72:a0:ad:bf:5d:7d:a2:dc:de:db:86:02:63:e9: 77:d6:8c:d3:1e:48:57:b4:11:60:27:19:44:37:a1:e3:68:00: 72:fd:94:c4:f9:b4:35:46:39:1f:3a:1a:88:43:53:17:85:41: a6:4c:c5:57:91:18:d9:54:68:5a:7b:d9:31:b0:9a:7d:f0:b4: d8:0e:03:c7:bf:2a:98:e5:c5:95:0d:bd:f9:47:f7:3f:97:16: 26:88:25:e4:da:6f:ab:58:5f:4f:ba:98:33:d1:c9:b1:2f:2f: d4:1f:d7:8c:0b:ae:cb:e0:70:17:00:ba:fd:4f:76:01:0a:32: f5:bf:7b:87:4c:23:0e:d3:04:5e:f4:c7:3f:24:1c:36:1c:df: e3:60:d3:a8:44:a5:cc:7c:2f:71:19:59:63:db:9d:97:40:e0: 53:d7:4b:2e:d0:78:cd:77:98:07:f1:e8:3d:44:16:5e:92:8f: 10:2b:2d:2b:1d:56:4d:e6:16:e4:f8:36:50:41:09:40:19:dd: f9:b8:24:ef:5f:a1:4c:9e:7b:71:58:82:a6:67:ac:a2:8e:96: c4:f8:a6:59:4c:fe:82:82:54:d1:ef:6a:eb:72:e8:23:43:db: 6a:10:d2:24:fc:93:ee:44:72:50:22:51:ed:97:da:e9:df:87: c8:fd:04:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUwNTA0MTYyMDI5WhcNMjUwNTExMTYyMDI5WjAYMRYwFAYD VQQDEw02ODE3OTNjZC0xNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWX6GxWgsL1kctlYTICm6N42RIpSUfE4jDARZpf8LdyFzTI5epm/O7f//IV4 UfU2s7kH756lBLdIM3MqwExvhBRbAi97B/Bah7pm8RsUuaxYMWyIJbIl7Y1eBEKR 5ZPCAFy0tYnlEhPtuS/EKfqjILPZG535Gc/jFn2u3iVJNz0ZcAar2+r0rtq3kPCM TRWd9cilYXbqZi8uDJrNpJMYQ7jMfGrIiyGVuQVYBJVaY36Uaav2P2MhXRCOCePs bDNT1zbR1SgbMkKRyBx1s8rNHXVHOUTscXGtiN/wLnNmvE9kJTv29Q9pzZbBPVQ7 Ca+eEnyHHwVn6R+jkL+K1K2zlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3R+t0J HBHscEdC1U50IWvVeVqNMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0m5bHcqCtv119otze24YCY+l31ozTHkhXtBFgJxlEN6HjaABy/ZTE +bQ1RjkfOhqIQ1MXhUGmTMVXkRjZVGhae9kxsJp98LTYDgPHvyqY5cWVDb35R/c/ lxYmiCXk2m+rWF9Pupgz0cmxLy/UH9eMC67L4HAXALr9T3YBCjL1v3uHTCMO0wRe 9Mc/JBw2HN/jYNOoRKXMfC9xGVlj252XQOBT10su0HjNd5gH8eg9RBZeko8QKy0r HVZN5hbk+DZQQQlAGd35uCTvX6FMnntxWIKmZ6yijpbE+KZZTP6CglTR72rrcugj Q9tqENIk/JPuRHJQIlHtl9rp34fI/QSM -----END CERTIFICATE-----Generated at Mon May 5 12:25:45 2025 by rpki-client