$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: Iw8/CN+W4NMz/iJzHDOqsFNmO+BXJGYpOOHuY0GHIzY= Subject key identifier: 39:0F:A5:27:A5:C8:DB:63:13:96:F5:29:AC:5C:2C:06:6A:B2:B2:CB Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: F1 Signing time: Sun 11 May 2025 04:10:59 +0000 Manifest this update: Sun 11 May 2025 04:10:59 +0000 Manifest next update: Sun 18 May 2025 04:10:59 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: Iey8BYZbEj/Ejj8d3XN3NXnV4tBtWcjGY27bHMatxlE=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: May 11 04:10:59 2025 GMT Not After : May 18 04:10:59 2025 GMT Subject: CN=68202353-b1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:b4:1c:dc:e9:ea:94:f3:e5:a6:42:ec:36: 4e:7d:e3:d8:5c:c8:db:b9:5e:9a:d4:9f:19:f7:67: 43:04:02:e0:57:59:e0:34:41:75:28:d9:43:e8:d0: df:f4:3b:32:ca:13:80:6c:81:8f:d6:12:60:6e:9a: 1a:5f:af:c8:41:47:78:5a:68:61:df:41:63:18:c0: 56:7c:f9:1c:b3:e7:f0:6e:76:40:f3:77:b5:38:ec: a2:31:de:8e:44:65:b6:77:c7:b5:bc:a2:16:40:24: e3:31:a3:71:49:80:f3:94:87:08:84:c0:b8:0a:a9: 67:10:b5:9b:62:26:10:59:cc:55:16:9c:1b:98:e7: d9:9d:23:f8:0c:4b:e8:35:6c:94:38:09:38:fc:55: 4b:95:19:8e:15:0b:bb:c0:27:39:50:d4:df:de:28: 66:c9:87:48:a3:12:9d:12:0d:00:f5:d3:a1:79:3c: 5e:70:eb:a5:83:da:35:ab:06:9b:4e:39:14:03:b7: f5:14:86:2b:79:08:96:f9:bd:77:55:f7:99:8e:8d: 13:4c:b3:7c:bb:05:79:d9:36:92:99:9b:18:e0:43: 00:23:a9:e2:9b:16:18:d9:4f:7c:cf:f6:3c:0c:7d: da:75:bd:d6:35:6b:77:5f:4a:e5:bf:70:a3:bd:2d: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:A5:27:A5:C8:DB:63:13:96:F5:29:AC:5C:2C:06:6A:B2:B2:CB X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9d:f3:1c:65:4e:a3:7c:5d:15:4b:4f:6f:3b:b0:58:dc:21: bb:b3:3d:38:91:c3:55:8e:62:a0:82:ed:43:fd:12:03:a9:9b: 55:b6:a4:bf:9b:86:dd:ea:30:cb:5a:84:64:77:97:bc:13:98: 16:e2:13:93:87:1b:cd:b3:26:c0:3c:8d:95:5f:de:b9:aa:e0: e0:2e:9f:10:44:67:21:d7:39:3d:12:cc:0e:82:1a:3e:c4:89: 41:f4:14:7b:40:01:89:e8:10:62:36:30:9e:46:48:e2:a4:f0: eb:95:66:8b:4f:ac:27:3d:7c:49:cc:04:16:60:9c:4b:f9:46: 91:ba:0f:c6:82:7c:b6:cd:52:d0:24:dc:6c:66:46:f7:a5:b0: 41:16:44:ac:56:e3:49:51:f0:e5:97:ad:7c:8c:91:f9:cc:6d: 8b:37:ca:31:3a:ea:4d:f9:1b:86:35:b7:f4:b3:c1:19:f4:8f: d7:60:62:fc:7d:9f:21:43:55:2f:d1:c4:52:37:54:71:ba:4b: 4b:73:2f:3a:81:35:69:b2:f6:7f:49:19:5d:a8:4a:a9:83:0a: b6:05:ba:89:2a:9e:3b:b0:94:ea:bf:ac:00:0f:fa:f1:38:d4: d7:8e:59:a8:b2:d5:dc:c6:2c:f6:f2:6e:5e:66:e5:c0:09:88: ab:23:7d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUwNTExMDQxMDU5WhcNMjUwNTE4MDQxMDU5WjAYMRYwFAYD VQQDEw02ODIwMjM1My1iMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSS0HNzp6pTz5aZC7DZOfePYXMjbuV6a1J8Z92dDBALgV1ngNEF1KNlD6NDf 9DsyyhOAbIGP1hJgbpoaX6/IQUd4Wmhh30FjGMBWfPkcs+fwbnZA83e1OOyiMd6O RGW2d8e1vKIWQCTjMaNxSYDzlIcIhMC4CqlnELWbYiYQWcxVFpwbmOfZnSP4DEvo NWyUOAk4/FVLlRmOFQu7wCc5UNTf3ihmyYdIoxKdEg0A9dOheTxecOulg9o1qwab TjkUA7f1FIYreQiW+b13VfeZjo0TTLN8uwV52TaSmZsY4EMAI6nimxYY2U98z/Y8 DH3adb3WNWt3X0rlv3CjvS0OhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkPpSel yNtjE5b1KaxcLAZqsrLLMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMnfMcZU6jfF0VS09vO7BY3CG7sz04kcNVjmKggu1D/RIDqZtVtqS/ m4bd6jDLWoRkd5e8E5gW4hOThxvNsybAPI2VX965quDgLp8QRGch1zk9EswOgho+ xIlB9BR7QAGJ6BBiNjCeRkjipPDrlWaLT6wnPXxJzAQWYJxL+UaRug/Ggny2zVLQ JNxsZkb3pbBBFkSsVuNJUfDll618jJH5zG2LN8oxOupN+RuGNbf0s8EZ9I/XYGL8 fZ8hQ1Uv0cRSN1RxuktLcy86gTVpsvZ/SRldqEqpgwq2BbqJKp47sJTqv6wAD/rx ONTXjlmostXcxiz28m5eZuXACYirI30h -----END CERTIFICATE-----Generated at Sun May 11 09:06:22 2025 by rpki-client