$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: SMXpcS5wnIDldvVYPM7eQ9z4Rhv9vJjS6NtVZb4/xng= Subject key identifier: 22:6D:EF:41:81:D1:27:02:11:3E:D0:2D:8B:04:FD:7E:44:57:F3:D2 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 01D0 Signing time: Sun 11 May 2025 01:58:50 +0000 Manifest this update: Sun 11 May 2025 01:58:49 +0000 Manifest next update: Sun 18 May 2025 01:58:49 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: gp8rm+Ulk30KFedtfOsYt2FTmD3tbxR4Pna1QuFEhK0=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: May 11 01:58:49 2025 GMT Not After : May 18 01:58:49 2025 GMT Subject: CN=68200459-8b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:01:9d:63:72:cd:d7:1a:02:ba:b8:b7:9f: 4d:c4:f1:47:68:91:b7:97:13:92:93:14:8f:87:81: 2e:77:e2:02:ca:c8:d7:0f:89:7b:fc:30:f6:b5:c8: f6:f3:b5:28:8c:9a:68:1f:ad:d9:6f:27:86:a4:23: 51:9d:e5:a3:95:16:d3:bd:bd:a8:54:6c:ae:b0:90: 61:82:ae:86:38:ee:d3:a2:09:3a:97:b3:19:98:55: 42:33:56:6a:97:6c:c0:7e:65:cf:ed:f7:cd:04:bf: 5d:0f:9a:65:da:1a:63:a2:b9:16:20:f2:d2:04:9c: 20:b4:a9:ef:65:9e:22:1a:57:78:61:07:d5:77:5c: 75:d4:b9:e0:b7:b0:85:cc:88:92:de:3c:2f:d6:c1: e1:8a:b8:49:63:72:12:fc:43:f0:9a:7f:ff:8d:08: 1d:12:90:27:75:dc:cc:b6:80:34:4e:f3:5b:e9:86: 98:dd:b8:e8:99:fd:ab:e9:fe:51:ed:8c:09:c0:23: 42:79:2f:b1:a1:2b:0f:2f:00:94:b7:79:ef:a0:19: a0:d2:f0:72:68:a9:b3:67:08:ad:ae:18:87:3c:53: fb:34:fd:a1:2b:c8:0d:f4:f8:ed:0c:3a:79:b4:35: a3:2c:1b:0c:1e:88:ff:33:3e:8c:17:0d:1c:b8:05: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6D:EF:41:81:D1:27:02:11:3E:D0:2D:8B:04:FD:7E:44:57:F3:D2 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:cf:39:70:c3:3f:0c:00:90:46:47:2a:ea:fb:93:20:ea:fe: 03:f1:1c:43:7e:e2:9c:68:a7:9c:d8:27:82:fe:9a:0f:6e:0d: 39:08:f5:4d:91:7c:2a:bc:aa:fc:b2:05:4a:cf:ef:0f:1f:4c: 4e:f0:43:2f:1a:de:31:1d:0a:cb:7c:37:a6:0f:9c:f1:ec:a2: c0:30:65:a9:a5:a2:7b:7d:9a:36:f5:ae:e3:ac:56:64:d5:8f: a9:56:87:1a:9a:22:03:ae:b6:88:38:c3:0d:0f:5e:2a:1a:a8: 74:f1:3b:a6:a3:3c:66:a5:e0:b7:26:9c:fb:82:49:0e:79:e3: fc:48:43:70:47:f2:f7:3b:6b:12:86:9f:5b:ad:c5:6b:b9:15: 0e:88:08:6b:69:b9:0b:91:00:01:0d:1f:e1:8f:f1:35:3a:85: f3:77:3a:d7:8c:0a:17:56:9a:16:26:49:36:8c:b3:6c:b9:b2: 66:8c:1c:14:b4:dc:95:c5:41:a0:ae:ac:0a:94:70:cb:9a:83: 78:c6:4a:f9:0e:c1:0c:fc:0f:7d:0a:12:ab:54:ba:c9:07:80: a5:2d:e8:04:3c:7d:a8:bc:8a:72:72:22:5b:39:45:49:6a:62: 4f:00:37:81:55:ed:72:fe:f5:0c:e9:ad:46:1c:38:39:5c:5e: 39:5a:bf:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwNTExMDE1ODQ5WhcNMjUwNTE4MDE1ODQ5WjAYMRYwFAYD VQQDEw02ODIwMDQ1OS04YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfoBnWNyzdcaArq4t59NxPFHaJG3lxOSkxSPh4Eud+ICysjXD4l7/DD2tcj2 87UojJpoH63ZbyeGpCNRneWjlRbTvb2oVGyusJBhgq6GOO7Togk6l7MZmFVCM1Zq l2zAfmXP7ffNBL9dD5pl2hpjorkWIPLSBJwgtKnvZZ4iGld4YQfVd1x11Lngt7CF zIiS3jwv1sHhirhJY3IS/EPwmn//jQgdEpAnddzMtoA0TvNb6YaY3bjomf2r6f5R 7YwJwCNCeS+xoSsPLwCUt3nvoBmg0vByaKmzZwitrhiHPFP7NP2hK8gN9PjtDDp5 tDWjLBsMHoj/Mz6MFw0cuAU6lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJt70GB 0ScCET7QLYsE/X5EV/PSMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJzzlwwz8MAJBGRyrq+5Mg6v4D8RxDfuKcaKec2CeC/poPbg05CPVN kXwqvKr8sgVKz+8PH0xO8EMvGt4xHQrLfDemD5zx7KLAMGWppaJ7fZo29a7jrFZk 1Y+pVocamiIDrraIOMMND14qGqh08TumozxmpeC3Jpz7gkkOeeP8SENwR/L3O2sS hp9brcVruRUOiAhrabkLkQABDR/hj/E1OoXzdzrXjAoXVpoWJkk2jLNsubJmjBwU tNyVxUGgrqwKlHDLmoN4xkr5DsEM/A99ChKrVLrJB4ClLegEPH2ovIpyciJbOUVJ amJPADeBVe1y/vUM6a1GHDg5XF45Wr87 -----END CERTIFICATE-----Generated at Mon May 12 10:43:07 2025 by rpki-client