$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: XwDe4YEcXluDvVOkhASV1e5dirX+HIu5Wj1lgXxgdzA= Subject key identifier: 3C:85:0C:62:20:89:EE:61:84:4A:F8:87:C3:D4:95:EF:D4:6B:BD:D2 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 0312 Signing time: Tue 13 May 2025 00:59:21 +0000 Manifest this update: Tue 13 May 2025 00:59:21 +0000 Manifest next update: Tue 20 May 2025 00:59:21 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: VUx6hqDlJhQKFQ6E87DlDKF1qBH/GFOOOheTtE9ahhA=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: May 13 00:59:21 2025 GMT Not After : May 20 00:59:21 2025 GMT Subject: CN=68229969-6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:1b:15:86:ae:15:70:07:e5:5d:e4:b0:38: cc:57:38:1a:9f:6a:15:e2:bd:e2:8b:9a:c3:40:db: af:c5:73:19:ee:80:56:42:b1:87:93:70:af:e8:00: 9a:3f:e9:a9:57:62:e2:9d:ca:9f:29:da:53:18:47: 7b:02:b8:70:7d:b9:b6:8f:f0:4c:a6:85:83:24:22: ec:60:da:fc:92:ca:a9:6d:16:fd:16:c0:e8:20:be: a0:55:6f:1e:23:24:d5:3c:ea:58:0b:67:c2:18:c9: ae:1a:cc:d5:cc:13:77:6a:7c:91:dc:b4:c1:d2:2c: 99:74:30:85:cc:d0:99:ed:53:6c:82:b5:ca:10:7d: e8:b2:0c:60:2f:30:ca:98:90:f5:4c:f3:25:cd:f9: 75:70:a6:74:a6:84:8f:a9:99:6b:d3:76:2a:1b:14: fa:a6:c6:29:08:92:eb:52:71:68:62:18:0c:c1:fe: d2:d2:04:9f:40:9e:23:ab:ac:4e:da:ef:f1:e8:56: d1:0b:11:2c:07:92:a7:bf:7b:70:f9:eb:3b:0c:27: 75:4c:a3:e9:a7:09:c5:58:6a:df:f6:8e:dc:38:f0: e1:d4:3f:bf:d4:ce:b4:c6:dc:b7:0d:4a:b5:b7:05: 2d:8d:44:0b:52:e3:45:28:64:9e:07:95:5c:5d:bb: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:85:0C:62:20:89:EE:61:84:4A:F8:87:C3:D4:95:EF:D4:6B:BD:D2 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:55:c5:36:7c:8d:8d:90:24:a5:03:27:14:69:30:8d:a7:9d: 6e:61:20:ee:be:45:4b:27:2c:6d:2c:6e:e6:45:ca:1a:90:93: 7b:f4:e9:f6:34:de:71:5d:77:d3:99:9a:47:da:c2:31:24:79: 88:3e:91:90:56:13:00:87:1d:c6:28:e8:40:7d:54:62:f4:fc: 15:55:ff:88:82:91:15:be:90:a7:02:f5:d6:3d:8a:59:39:15: 38:bd:c0:3f:07:29:f8:44:53:7d:39:33:ae:55:92:af:f3:70: 24:0e:a3:6c:7e:70:54:19:a4:03:ad:ae:04:bd:2a:21:9e:c3: 4d:fe:d6:79:5e:ea:b3:c7:e0:84:71:a7:16:ce:91:b6:a3:05: 03:7c:88:1f:bc:66:93:6a:7f:e2:0b:1e:78:7e:2d:60:65:13: fd:7b:c1:b2:63:bb:32:01:cf:37:ce:a1:94:6c:06:5a:72:ab: 5f:43:7b:24:20:b7:66:9e:43:1a:3b:db:df:0c:78:ab:fc:5a: ca:d6:27:84:79:25:06:ce:e8:5a:d0:b2:c9:0f:3f:a3:88:6c: 3d:34:10:3e:e7:d3:ac:97:cd:20:df:e6:2e:ce:18:95:70:5c: 52:99:f3:9d:db:8c:f1:17:ba:f2:7e:59:ed:0e:58:a9:a3:db: de:f8:c1:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwNTEzMDA1OTIxWhcNMjUwNTIwMDA1OTIxWjAYMRYwFAYD VQQDEw02ODIyOTk2OS02MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfobFYauFXAH5V3ksDjMVzgan2oV4r3ii5rDQNuvxXMZ7oBWQrGHk3Cv6ACa P+mpV2LincqfKdpTGEd7Arhwfbm2j/BMpoWDJCLsYNr8ksqpbRb9FsDoIL6gVW8e IyTVPOpYC2fCGMmuGszVzBN3anyR3LTB0iyZdDCFzNCZ7VNsgrXKEH3osgxgLzDK mJD1TPMlzfl1cKZ0poSPqZlr03YqGxT6psYpCJLrUnFoYhgMwf7S0gSfQJ4jq6xO 2u/x6FbRCxEsB5Knv3tw+es7DCd1TKPppwnFWGrf9o7cOPDh1D+/1M60xty3DUq1 twUtjUQLUuNFKGSeB5VcXbtI6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyFDGIg ie5hhEr4h8PUle/Ua73SMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjVcU2fI2NkCSlAycUaTCNp51uYSDuvkVLJyxtLG7mRcoakJN79On2 NN5xXXfTmZpH2sIxJHmIPpGQVhMAhx3GKOhAfVRi9PwVVf+IgpEVvpCnAvXWPYpZ ORU4vcA/Byn4RFN9OTOuVZKv83AkDqNsfnBUGaQDra4EvSohnsNN/tZ5Xuqzx+CE cacWzpG2owUDfIgfvGaTan/iCx54fi1gZRP9e8GyY7syAc83zqGUbAZacqtfQ3sk ILdmnkMaO9vfDHir/FrK1ieEeSUGzuha0LLJDz+jiGw9NBA+59Osl80g3+YuzhiV cFxSmfOd24zxF7ryflntDlipo9ve+MHa -----END CERTIFICATE-----Generated at Tue May 13 08:30:20 2025 by rpki-client