$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: ZojTL7A5AeJ684B9q+bUJDFk2E2ad9povkYrcQunqes= Subject key identifier: 06:B6:66:59:C2:7A:FC:EE:38:51:86:CA:F8:A7:2E:E6:9F:DB:0D:2E Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 0106 Signing time: Thu 03 Jul 2025 05:19:46 +0000 Manifest this update: Thu 03 Jul 2025 05:19:45 +0000 Manifest next update: Thu 10 Jul 2025 05:19:45 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: YuhBZSuSSAltlVnfbONjTQ6S4kmRui1bQIPA2p5FmHk=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: Gi1fjcJYFrnx1YgdQysI3ht+gEJR9oM+PSXe3rgp9Wc=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Jul 3 05:19:45 2025 GMT Not After : Jul 10 05:19:45 2025 GMT Subject: CN=686612f1-ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:23:71:a3:ed:79:81:4c:6d:92:e2:ba:6b: 0a:a8:90:d0:27:4d:81:20:a4:e5:a9:84:10:5a:fe: 92:39:17:b8:0b:d3:00:43:78:5c:13:d7:3a:ba:d1: 04:0d:50:4c:ce:76:f4:1c:b4:e4:49:c8:05:d6:77: 31:f1:64:32:2c:71:7c:22:1d:df:25:bc:71:1b:ea: 56:50:f7:3d:56:c5:fe:4c:c2:5e:3a:57:46:be:7e: 49:b2:d1:f9:0c:32:b5:8b:04:76:e2:1c:27:8a:8e: 01:fd:e4:ce:2c:12:6b:86:e4:e4:86:1f:24:ad:3c: a8:68:4c:52:4a:b9:87:f7:01:bd:5a:6c:c9:64:6e: a5:71:60:85:79:a8:74:8e:d2:9e:e7:e8:e6:4f:f1: 86:b8:16:8e:b5:59:9d:8e:b5:c3:00:68:65:96:6b: 1d:0f:ea:cf:91:a4:e6:27:b9:90:29:5d:f1:6b:fe: d2:ac:46:80:22:bc:ea:33:5c:3e:f3:41:31:40:52: 24:29:84:3e:84:2e:57:0b:ac:c5:6a:20:8b:2c:5d: bc:ea:dd:1a:1c:2d:47:98:6d:69:45:d2:fb:1e:5d: ee:66:c8:a4:69:d2:69:8c:ad:5e:82:87:12:f2:0e: 74:68:f3:56:06:de:0f:4f:f7:15:63:90:b7:72:32: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B6:66:59:C2:7A:FC:EE:38:51:86:CA:F8:A7:2E:E6:9F:DB:0D:2E X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a0:0e:c2:d2:fd:26:13:30:57:89:8b:4e:39:df:15:cb:eb: 26:f8:92:32:51:20:84:a1:66:93:a6:d0:4e:52:d3:38:28:04: 14:57:63:b2:1f:22:b6:a9:97:5e:66:0f:da:2f:b3:c6:aa:f6: 61:68:c3:b9:c4:f0:c5:71:96:c5:60:c8:ef:a2:ad:e0:90:48: 5b:ac:5c:1e:de:2f:e0:1a:e0:f4:1a:c3:16:a7:44:9a:db:3d: 10:6b:f3:39:c9:cf:98:79:09:e9:e5:03:ad:a4:0f:90:91:3a: 50:50:63:27:27:a7:8b:80:ae:6f:04:c5:8f:d3:a7:63:0f:dc: 34:53:f2:c0:84:ba:ef:16:0f:83:9b:c9:f0:f4:c4:98:a7:30: ac:5a:00:fc:65:c3:d3:fe:e3:59:54:94:71:e6:66:f4:84:6d: f2:38:bd:32:15:b2:9a:95:ae:54:ea:6a:88:21:43:59:85:5a: 7d:0f:b6:cd:6b:39:ea:9b:c1:e7:a2:e0:0d:d2:29:1a:85:fe: 67:80:8e:0c:a3:78:62:f4:4f:3e:de:b4:9e:77:9f:ad:87:d2: 1d:f8:35:74:28:e3:b0:e6:09:79:b3:6c:28:1a:2c:69:e3:9c: 16:54:bf:91:ec:8d:1c:80:61:4d:8c:12:77:40:de:f5:ca:16: bb:6c:f6:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwNzAzMDUxOTQ1WhcNMjUwNzEwMDUxOTQ1WjAYMRYwFAYD VQQDEw02ODY2MTJmMS1kZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u4jcaPteYFMbZLiumsKqJDQJ02BIKTlqYQQWv6SORe4C9MAQ3hcE9c6utEE DVBMznb0HLTkScgF1ncx8WQyLHF8Ih3fJbxxG+pWUPc9VsX+TMJeOldGvn5JstH5 DDK1iwR24hwnio4B/eTOLBJrhuTkhh8krTyoaExSSrmH9wG9WmzJZG6lcWCFeah0 jtKe5+jmT/GGuBaOtVmdjrXDAGhllmsdD+rPkaTmJ7mQKV3xa/7SrEaAIrzqM1w+ 80ExQFIkKYQ+hC5XC6zFaiCLLF286t0aHC1HmG1pRdL7Hl3uZsikadJpjK1egocS 8g50aPNWBt4PT/cVY5C3cjK1eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa2ZlnC evzuOFGGyvinLuaf2w0uMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChoA7C0v0mEzBXiYtOOd8Vy+sm+JIyUSCEoWaTptBOUtM4KAQUV2Oy HyK2qZdeZg/aL7PGqvZhaMO5xPDFcZbFYMjvoq3gkEhbrFwe3i/gGuD0GsMWp0Sa 2z0Qa/M5yc+YeQnp5QOtpA+QkTpQUGMnJ6eLgK5vBMWP06djD9w0U/LAhLrvFg+D m8nw9MSYpzCsWgD8ZcPT/uNZVJRx5mb0hG3yOL0yFbKala5U6mqIIUNZhVp9D7bN aznqm8HnouAN0ikahf5ngI4Mo3hi9E8+3rSed5+th9Id+DV0KOOw5gl5s2woGixp 45wWVL+R7I0cgGFNjBJ3QN71yha7bPaa -----END CERTIFICATE-----Generated at Fri Jul 4 03:28:46 2025 by rpki-client