$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: S4qDK15ZCHy0L7WfEZ5di6RB/dXzXY1LDWKHlacHlYw= Subject key identifier: 02:95:E3:A1:A8:9F:47:10:C0:36:36:86:C9:B2:90:FC:D2:A4:29:D1 Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: 01B6 Signing time: Sun 11 May 2025 02:10:56 +0000 Manifest this update: Sun 11 May 2025 02:10:56 +0000 Manifest next update: Sun 18 May 2025 02:10:56 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: N288GMTLshNutwAcpabqIIF24jiJINsVHAPIwOjMj/4=) 2: F8582E301E6411EF99A50843C4F9AE02.roa (hash: ShXADDJpnj7w4eyyUS0fvnc0x0GGma16cf7GD5v3SiE=) 3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: May 11 02:10:56 2025 GMT Not After : May 18 02:10:56 2025 GMT Subject: CN=68200730-8385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:52:c3:af:d0:ed:85:b1:46:60:14:ef:e6: c2:02:28:32:5e:5f:02:b2:1c:c0:39:de:b0:17:77: 1d:e5:78:17:52:f0:e7:77:84:ce:48:d2:95:1c:1f: f2:d0:c5:7c:3d:9a:e0:e7:3c:cd:2d:fe:9a:7f:8e: 51:4d:82:2a:78:8d:d9:cb:93:6f:c8:da:9a:12:33: 65:d6:1b:f4:96:f5:62:4a:68:72:00:25:ec:39:57: b4:6e:a6:00:1d:0e:15:09:57:4e:89:3c:92:ad:08: d0:9a:c4:92:e0:9e:5b:dd:ca:15:f4:ef:4e:c4:a5: cf:a1:ad:9a:ca:a5:9b:16:ca:20:80:7c:e3:dd:dc: d5:48:9d:ed:46:ee:a5:bb:eb:1e:8a:c2:cf:d4:13: e1:92:b3:ed:8b:c1:82:13:d9:69:72:db:09:4f:f2: 90:9e:0e:46:a9:97:6b:d7:42:91:31:d5:21:76:5c: f6:75:5e:23:98:fb:c8:98:9b:54:a5:2a:6c:23:53: 45:1e:55:6f:49:86:5f:f2:50:dd:0e:0b:49:88:e7: 51:75:f1:d6:06:e5:11:0c:a4:f3:c8:13:00:a5:62: 4a:ce:f8:19:89:c8:3d:bf:52:56:cf:37:6a:c1:14: 7a:78:52:14:73:8a:1b:a2:b4:6c:64:de:4b:34:8a: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:95:E3:A1:A8:9F:47:10:C0:36:36:86:C9:B2:90:FC:D2:A4:29:D1 X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:01:0f:1a:71:0c:00:36:47:ed:ff:bb:b2:ca:4b:3f:e0:08: 25:9f:a4:09:87:9a:0e:b2:a0:8c:2d:67:b4:d7:49:72:dd:75: d7:67:c5:bf:9f:c1:2e:84:af:6b:9f:cf:04:41:66:21:05:17: 2e:df:67:26:75:71:f6:e8:d3:97:f9:08:59:ad:6c:06:b5:e3: 7f:4d:8e:61:18:da:db:11:cd:3a:22:cf:f3:56:a4:00:e3:eb: 3c:5b:4e:eb:af:7e:04:c4:6c:b3:65:c4:61:d1:3f:01:50:54: 74:87:1c:af:00:7a:ee:66:ec:0b:ba:ac:cb:ef:3b:39:82:28: f0:60:63:80:ce:5f:ad:f9:c5:5f:59:5f:86:2b:45:05:e4:ce: 0c:7f:8b:23:7f:a9:b4:f0:12:bf:05:eb:06:97:b1:7a:a6:cc: 8a:9e:8c:8e:8a:52:0b:12:88:16:47:2a:dd:49:fb:32:0d:ba: 65:15:93:f5:29:b2:5b:a6:df:38:05:be:f6:88:66:49:1d:45: ed:96:01:17:85:6e:7e:d4:1e:1c:d4:7b:f6:9c:14:c1:64:a1: 56:50:f4:bf:3c:d6:95:70:30:49:6a:8a:29:d8:83:f1:ec:c2: 73:41:7e:ec:2f:5b:27:f8:c0:d0:4b:72:d7:18:5d:51:45:33: 54:3c:2a:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjUwNTExMDIxMDU2WhcNMjUwNTE4MDIxMDU2WjAYMRYwFAYD VQQDEw02ODIwMDczMC04Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1NSw6/Q7YWxRmAU7+bCAigyXl8CshzAOd6wF3cd5XgXUvDnd4TOSNKVHB/y 0MV8PZrg5zzNLf6af45RTYIqeI3Zy5NvyNqaEjNl1hv0lvViSmhyACXsOVe0bqYA HQ4VCVdOiTySrQjQmsSS4J5b3coV9O9OxKXPoa2ayqWbFsoggHzj3dzVSJ3tRu6l u+seisLP1BPhkrPti8GCE9lpctsJT/KQng5GqZdr10KRMdUhdlz2dV4jmPvImJtU pSpsI1NFHlVvSYZf8lDdDgtJiOdRdfHWBuURDKTzyBMApWJKzvgZicg9v1JWzzdq wRR6eFIUc4oborRsZN5LNIo51wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKV46Go n0cQwDY2hsmykPzSpCnRMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0AQ8acQwANkft/7uyyks/4Agln6QJh5oOsqCMLWe010ly3XXXZ8W/ n8EuhK9rn88EQWYhBRcu32cmdXH26NOX+QhZrWwGteN/TY5hGNrbEc06Is/zVqQA 4+s8W07rr34ExGyzZcRh0T8BUFR0hxyvAHruZuwLuqzL7zs5gijwYGOAzl+t+cVf WV+GK0UF5M4Mf4sjf6m08BK/BesGl7F6psyKnoyOilILEogWRyrdSfsyDbplFZP1 KbJbpt84Bb72iGZJHUXtlgEXhW5+1B4c1Hv2nBTBZKFWUPS/PNaVcDBJaoop2IPx 7MJzQX7sL1sn+MDQS3LXGF1RRTNUPCq3 -----END CERTIFICATE-----Generated at Sun May 11 11:23:53 2025 by rpki-client