$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: YZ1tpmtufXbXQJWhiiOUnihpjBqMpryT51CZDazCT8Y= Subject key identifier: ED:86:98:92:EC:F6:A1:20:91:5C:61:9B:01:47:FC:5B:B4:98:A8:68 Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1D0E Signing time: Sat 10 May 2025 16:05:33 +0000 Manifest this update: Sat 10 May 2025 16:05:32 +0000 Manifest next update: Sat 17 May 2025 16:05:32 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: 43rSO99nRsm37C2vCx68Pv8KdiiyFbj9wbpgh162sP0=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: hUo9fC/hzy17W76vlbeXm/dftwyddFbiGAwqbp53ZVY=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: PqWYELxwluX51eG9Uh24A8xMydgivpkrMXOxcA+zOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7461 (0x1d25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: May 10 16:05:32 2025 GMT Not After : May 17 16:05:32 2025 GMT Subject: CN=681f794c-1c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:92:55:ec:46:81:a7:43:f9:e0:50:39:e0: 93:0c:f2:f6:84:c1:9c:c5:7f:10:11:89:a0:b7:c0: f7:4f:9d:96:82:5b:f9:d9:2c:34:4e:9a:d8:20:95: b4:5c:03:3f:e3:b4:54:dc:65:8e:9e:b8:63:e1:2b: 39:13:0b:47:fc:d9:5c:98:4d:cf:95:fa:b8:7d:54: 97:36:e5:4b:40:76:6e:51:1c:d5:25:c0:23:f9:5a: 30:04:e8:24:21:8a:07:ac:fa:6b:e4:5d:ec:39:82: 85:b7:02:3b:42:f9:b7:6b:ac:ac:70:c8:e9:2f:20: b8:9c:f9:71:ae:47:48:4e:30:a5:06:df:c5:96:1e: 33:eb:fa:e3:eb:aa:46:a7:a0:a0:60:17:bc:8b:4f: 8c:e0:fa:69:54:18:ee:35:8f:4c:b5:3a:3d:21:9e: 7a:f2:9e:2e:1e:ec:6e:66:c6:f8:e2:77:1d:1f:70: fb:40:9d:99:7f:81:28:c3:7f:25:a7:1b:c1:3e:9f: 7f:87:4c:9b:ae:ec:9f:b8:ab:53:4c:bd:0f:84:03: fe:60:6d:87:58:22:1e:0d:a8:ac:25:8a:5d:f4:ec: 4d:dc:f9:b1:7a:38:8c:79:bb:14:67:48:27:3d:f4: 7b:c7:41:b2:17:7b:d5:90:a3:9e:63:ff:ee:a7:a1: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:86:98:92:EC:F6:A1:20:91:5C:61:9B:01:47:FC:5B:B4:98:A8:68 X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:70:19:92:79:a4:b0:15:25:e5:5b:4a:a1:1a:1f:0b:bf:75: 76:23:fa:be:e4:f3:b7:c0:9e:26:24:84:6c:40:ea:96:14:51: 83:eb:16:07:4f:ca:17:dd:6b:74:16:e4:a2:6c:a1:64:15:52: e8:24:ab:ed:72:5c:2c:d1:e3:5f:75:7a:50:e4:72:e4:3d:98: f6:37:7d:c0:ae:9b:17:6b:c1:a0:77:12:b0:9c:a7:28:e9:42: 40:65:e2:7a:fc:a1:47:d4:2f:71:bf:6d:6c:10:10:de:e0:c1: a0:2b:22:d1:79:e3:53:44:ca:03:0c:89:ed:37:11:8b:c1:c1: 97:08:e3:d4:c0:c2:13:37:13:cc:3a:55:3e:28:8d:c0:6b:f4: 5b:ad:f1:1c:61:c9:7b:1c:91:32:66:2b:9b:f1:ff:79:e6:f7: 6b:43:3c:fc:06:e0:f9:7d:1a:4b:b5:62:0d:72:1f:aa:99:8c: 43:c1:86:e9:a7:e5:2c:c6:52:32:f3:78:b3:d3:41:03:9d:15: ca:e1:93:20:6f:4c:83:17:6d:ac:85:4f:7b:b2:d1:fb:06:44: eb:10:5b:6d:5d:b3:fb:0b:22:17:54:d3:c1:5f:1a:69:f6:23: 42:cf:1f:85:7a:1a:eb:bb:1b:b3:7f:84:1d:64:6d:24:f2:18: 6e:9f:19:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjUwNTEwMTYwNTMyWhcNMjUwNTE3MTYwNTMyWjAYMRYwFAYD VQQDEw02ODFmNzk0Yy0xYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXGSVexGgadD+eBQOeCTDPL2hMGcxX8QEYmgt8D3T52Wglv52Sw0TprYIJW0 XAM/47RU3GWOnrhj4Ss5EwtH/NlcmE3Plfq4fVSXNuVLQHZuURzVJcAj+VowBOgk IYoHrPpr5F3sOYKFtwI7Qvm3a6yscMjpLyC4nPlxrkdITjClBt/Flh4z6/rj66pG p6CgYBe8i0+M4PppVBjuNY9MtTo9IZ568p4uHuxuZsb44ncdH3D7QJ2Zf4Eow38l pxvBPp9/h0ybruyfuKtTTL0PhAP+YG2HWCIeDaisJYpd9OxN3PmxejiMebsUZ0gn PfR7x0GyF3vVkKOeY//up6GNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2GmJLs 9qEgkVxhmwFH/Fu0mKhoMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0cBmSeaSwFSXlW0qhGh8Lv3V2I/q+5PO3wJ4mJIRsQOqWFFGD6xYH T8oX3Wt0FuSibKFkFVLoJKvtclws0eNfdXpQ5HLkPZj2N33ArpsXa8GgdxKwnKco 6UJAZeJ6/KFH1C9xv21sEBDe4MGgKyLReeNTRMoDDIntNxGLwcGXCOPUwMITNxPM OlU+KI3Aa/RbrfEcYcl7HJEyZiub8f955vdrQzz8BuD5fRpLtWINch+qmYxDwYbp p+UsxlIy83iz00EDnRXK4ZMgb0yDF22shU97stH7BkTrEFttXbP7CyIXVNPBXxpp 9iNCzx+Fehrruxuzf4QdZG0k8hhunxkf -----END CERTIFICATE-----Generated at Sun May 11 15:17:30 2025 by rpki-client