$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json) Hash identifier: Dq1lzrUDqQEIYYIzYnKd/s+PcjGcoMhgLUak/BCJGDk= Subject key identifier: 20:1E:F1:BB:62:91:47:AD:F6:CB:59:A3:6F:4D:39:65:CE:E2:12:98 Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Certificate serial: 095C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft Manifest number: 0943 Signing time: Sat 10 May 2025 19:58:36 +0000 Manifest this update: Sat 10 May 2025 19:58:36 +0000 Manifest next update: Sat 17 May 2025 19:58:36 +0000 Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: 8tHhM+xmQay0P/UmXUAC9FehDFOjquOJUN458o1+go0=) 2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: wci0Xfqzo59Y8jWuwf9OlzNgtFeflA2lDlymuLqWFus=) 3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: vQbCuWQwTDhbmdI3t8jm44MzJ+6k3uWJJXIQLGrnQxI=) 4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2396 (0x95c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Validity Not Before: May 10 19:58:36 2025 GMT Not After : May 17 19:58:36 2025 GMT Subject: CN=681fafec-f278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:b3:fc:0f:07:fc:9c:6b:c3:df:e0:11:69: 4a:26:37:fb:5f:a5:9d:ce:27:44:29:4b:d5:8e:01: a9:fb:5e:6b:7c:ca:78:47:5f:29:95:f8:b2:88:30: 60:d0:da:41:e7:4b:30:92:df:50:a3:ca:b5:86:b7: f2:f0:af:78:a9:08:88:24:cb:16:ab:17:00:1c:45: b7:2b:1f:90:70:c3:db:c2:be:19:d3:6f:9c:8d:9c: 15:9e:a0:8c:35:b6:9e:2c:81:0b:a5:74:da:b2:b7: 99:e0:93:c0:8a:35:ba:d1:6b:3d:f8:f2:6a:58:f0: 8c:62:e7:9b:33:ca:22:a9:b4:d7:ac:c0:92:c4:70: 60:d8:7b:97:75:11:9b:0d:95:dd:e8:c8:12:a1:86: f6:d2:a1:b7:58:0e:fa:bb:73:0c:ce:fc:63:0d:9d: 67:14:a0:86:85:8f:26:5d:89:8e:df:cc:64:5c:3a: 4a:24:56:cc:07:6c:f5:49:38:d7:7a:80:1b:b0:4f: 37:02:32:52:a6:2f:db:20:bb:ba:67:da:ba:e6:75: 4e:ba:33:57:ae:51:41:22:9a:7b:11:19:1c:db:99: de:72:92:61:70:e2:3c:7a:7a:67:2b:cc:0f:d7:b2: ee:11:e6:a7:66:44:04:09:82:52:6e:6d:9f:f0:50: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:F1:BB:62:91:47:AD:F6:CB:59:A3:6F:4D:39:65:CE:E2:12:98 X509v3 Authority Key Identifier: keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:75:b3:36:04:b2:43:23:3d:26:07:ff:bd:0d:29:87:cc:bb: 9a:bc:06:28:f9:87:96:e3:10:24:a6:b7:e1:2e:e1:bf:6c:de: a5:7e:36:5a:19:19:e9:94:d8:6f:30:36:56:68:31:6f:e5:34: 0d:8c:a0:43:2d:4e:03:be:24:fd:57:a2:95:a7:e9:da:2b:18: 0a:3a:08:34:a1:a9:01:bd:b8:d8:d3:57:3b:c8:af:b6:e1:12: cb:13:9b:ef:f5:71:49:d3:54:23:e8:5f:a0:19:7f:c6:4f:24: 59:1a:0c:99:72:c8:cc:ae:56:f4:35:9a:ba:a1:96:96:e1:d2: d2:c0:1f:04:c0:5d:d6:63:8b:8e:33:71:fa:b4:f4:9a:e7:2c: a9:ec:29:94:ac:fa:da:1c:76:63:14:ca:17:04:04:98:fc:a1: 62:0c:2e:b6:d2:0c:9d:ca:98:c0:d6:0f:a5:e3:d7:c9:dc:25: 5f:6b:3a:1e:97:bb:1f:9c:c5:06:a0:c0:c3:ad:85:0a:30:39: aa:f8:dd:58:db:0c:2d:c4:c1:8c:ff:ab:3f:3a:fc:4b:66:ad: 04:ff:1d:da:d4:19:5b:43:6d:7c:aa:87:9f:ba:52:5b:fb:d2: fa:83:b8:8c:c5:d3:38:4a:ed:58:aa:f3:c3:2d:1e:82:f6:51: dc:c0:2b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODYxMTAvBgNVBAUTKDFDOUJBMkM1RkVBOEMwMzREQTU1MUZEQURDNjJBNTNB N0EwMkU1REIwHhcNMjUwNTEwMTk1ODM2WhcNMjUwNTE3MTk1ODM2WjAYMRYwFAYD VQQDEw02ODFmYWZlYy1mMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1ez/A8H/Jxrw9/gEWlKJjf7X6WdzidEKUvVjgGp+15rfMp4R18plfiyiDBg 0NpB50swkt9Qo8q1hrfy8K94qQiIJMsWqxcAHEW3Kx+QcMPbwr4Z02+cjZwVnqCM NbaeLIELpXTasreZ4JPAijW60Ws9+PJqWPCMYuebM8oiqbTXrMCSxHBg2HuXdRGb DZXd6MgSoYb20qG3WA76u3MMzvxjDZ1nFKCGhY8mXYmO38xkXDpKJFbMB2z1STjX eoAbsE83AjJSpi/bILu6Z9q65nVOujNXrlFBIpp7ERkc25necpJhcOI8enpnK8wP 17LuEeanZkQECYJSbm2f8FArBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAe8bti kUet9stZo29NOWXO4hKYMB8GA1UdIwQYMBaAFBybosX+qMA02lUf2txipTp6AuXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4Ni9DNjdEMTc2RTlB NUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dEVGFWUl9hM0dLbE9ub0M1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hKdWl4ZjZvd0RUYVZSX2EzR0tsT25vQzVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4Ni9DNjdEMTc2RTlBNUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dE VGFWUl9hM0dLbE9ub0M1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAydbM2BLJDIz0mB/+9DSmHzLuavAYo+YeW4xAkprfhLuG/bN6lfjZa GRnplNhvMDZWaDFv5TQNjKBDLU4DviT9V6KVp+naKxgKOgg0oakBvbjY01c7yK+2 4RLLE5vv9XFJ01Qj6F+gGX/GTyRZGgyZcsjMrlb0NZq6oZaW4dLSwB8EwF3WY4uO M3H6tPSa5yyp7CmUrPraHHZjFMoXBASY/KFiDC620gydypjA1g+l49fJ3CVfazoe l7sfnMUGoMDDrYUKMDmq+N1Y2wwtxMGM/6s/OvxLZq0E/x3a1BlbQ218qoefulJb +9L6g7iMxdM4Su1YqvPDLR6C9lHcwCsr -----END CERTIFICATE-----Generated at Sun May 11 15:25:44 2025 by rpki-client