$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: mNWYqArsisPDpsT9ycJM27wiCrqCpT+q9gK/rLiuYB0= Subject key identifier: A4:BD:F1:B1:9B:BA:B2:FA:64:00:D8:C9:95:4F:9A:34:3E:40:7F:76 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A16 Signing time: Mon 12 May 2025 19:50:52 +0000 Manifest this update: Mon 12 May 2025 19:50:52 +0000 Manifest next update: Mon 19 May 2025 19:50:52 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: T9BMK4c52a/8RyJMc4uupbx7WFVaqsKaQnYby24q2V0=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: May 12 19:50:52 2025 GMT Not After : May 19 19:50:52 2025 GMT Subject: CN=6822511c-03a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:ef:a3:05:19:23:ff:5f:f7:b8:f0:68:3a: 29:e0:0e:07:df:24:c4:cf:15:69:a8:0e:d4:42:7c: 05:db:2f:7b:61:ba:82:79:b3:1f:56:7c:1d:07:fb: 57:73:c8:ad:e4:6c:34:7e:14:83:13:1d:15:17:7d: 36:c8:0d:5f:e3:a1:f4:34:0d:49:ee:41:48:14:5e: 8c:e7:b0:20:91:22:1b:c7:f4:1b:41:b2:8a:f2:d7: 0c:f0:b2:6b:1e:d2:f5:3d:09:31:00:d6:ba:27:4f: 50:cf:0b:28:5e:16:ab:04:ab:b2:33:16:1e:32:8f: 29:ea:94:75:a9:bd:d6:eb:e9:7f:a1:1f:f5:01:51: 90:66:54:24:c0:28:1b:50:16:a7:30:27:6d:2f:2e: 68:fd:99:6c:cd:d3:c3:c6:96:2c:ce:2e:96:dc:bd: 92:52:50:8d:e8:39:d7:d0:60:4b:ac:af:ab:7f:dd: 84:92:1e:30:d0:22:2c:d3:2a:ba:52:f2:0a:4a:f0: 30:08:f1:6d:27:0b:c3:7b:c0:c6:b1:87:d9:17:a5: 01:dc:05:48:7a:83:d7:33:26:05:32:a0:9a:d0:11: 3d:db:01:74:84:fe:40:26:e1:dd:7f:0b:a6:90:a8: 3f:5d:df:c1:68:aa:17:37:62:86:05:5a:62:31:74: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BD:F1:B1:9B:BA:B2:FA:64:00:D8:C9:95:4F:9A:34:3E:40:7F:76 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:fa:c8:b4:c5:06:42:cf:20:a9:34:62:06:d5:6c:21:ca: a6:ee:92:30:4b:ab:3e:da:27:dd:dc:87:93:36:bf:57:e9:28: c7:55:94:e3:61:4f:e0:eb:db:a6:27:b2:81:80:a6:9a:f3:47: bb:06:f0:73:4f:91:00:81:dd:c2:f4:92:68:f1:0a:36:57:51: 8a:80:be:46:b5:15:5e:26:08:0d:75:e5:39:a2:fc:c2:34:76: fd:79:e9:89:8d:84:50:92:47:d8:32:32:01:04:43:bf:2b:84: d5:25:a1:9e:dc:88:63:e4:6f:b5:bf:f4:57:a0:46:5d:39:5f: 38:fd:7b:3c:d4:39:73:3c:89:2e:0c:ed:5a:78:60:85:4a:26: 18:f8:83:fe:23:9d:4f:96:1d:43:45:b5:f7:eb:34:81:a7:ca: dc:dc:f6:c1:8c:55:67:67:3f:b2:b3:a0:b0:30:9e:a3:95:d4: e9:5b:c5:f6:e1:8c:81:e6:20:6c:28:f5:84:0a:1d:91:8a:29: d0:f3:2b:8d:ae:58:a7:b0:3b:c4:43:79:2e:6d:5c:1f:89:24: 83:ed:fe:9b:aa:8a:c8:58:aa:64:08:c6:be:3d:45:9a:25:85: f9:17:19:6a:80:0f:f9:8f:32:f1:32:1b:b2:ec:f9:6b:c7:8e: 2b:44:09:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUwNTEyMTk1MDUyWhcNMjUwNTE5MTk1MDUyWjAYMRYwFAYD VQQDEw02ODIyNTExYy0wM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1TvowUZI/9f97jwaDop4A4H3yTEzxVpqA7UQnwF2y97YbqCebMfVnwdB/tX c8it5Gw0fhSDEx0VF302yA1f46H0NA1J7kFIFF6M57AgkSIbx/QbQbKK8tcM8LJr HtL1PQkxANa6J09QzwsoXharBKuyMxYeMo8p6pR1qb3W6+l/oR/1AVGQZlQkwCgb UBanMCdtLy5o/ZlszdPDxpYszi6W3L2SUlCN6DnX0GBLrK+rf92Ekh4w0CIs0yq6 UvIKSvAwCPFtJwvDe8DGsYfZF6UB3AVIeoPXMyYFMqCa0BE92wF0hP5AJuHdfwum kKg/Xd/BaKoXN2KGBVpiMXQ9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKS98bGb urL6ZADYyZVPmjQ+QH92MB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgzPrItMUGQs8gqTRiBtVsIcqm7pIwS6s+2ifd3IeTNr9X6SjHVZTj YU/g69umJ7KBgKaa80e7BvBzT5EAgd3C9JJo8Qo2V1GKgL5GtRVeJggNdeU5ovzC NHb9eemJjYRQkkfYMjIBBEO/K4TVJaGe3Ihj5G+1v/RXoEZdOV84/Xs81DlzPIku DO1aeGCFSiYY+IP+I51Plh1DRbX36zSBp8rc3PbBjFVnZz+ys6CwMJ6jldTpW8X2 4YyB5iBsKPWECh2RiinQ8yuNrlinsDvEQ3kubVwfiSSD7f6bqorIWKpkCMa+PUWa JYX5FxlqgA/5jzLxMhuy7Plrx44rRAnr -----END CERTIFICATE-----Generated at Wed May 14 04:35:13 2025 by rpki-client