$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: 5Y2NgobItFF697UGGFomF6qeqJktxWUglMEPNSY2CXw= Subject key identifier: 00:88:5D:83:88:A8:A2:55:D5:3F:69:97:54:FD:25:DD:D8:32:DD:CF Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0422 Signing time: Tue 13 May 2025 00:11:20 +0000 Manifest this update: Tue 13 May 2025 00:11:19 +0000 Manifest next update: Tue 20 May 2025 00:11:19 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: vcB2UnhC3cBN4uD5Qpjbcd7BDhDhBS/Uv72brQuR0b8=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: amJzS7fS0qwVdajHhOHPPRxX4Ss5Ng0s6L0nYbstO78=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 76rKPM4Cl24qOxvpyPfe4PxAfRqCYHAiT0+M4zUtc90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: May 13 00:11:19 2025 GMT Not After : May 20 00:11:19 2025 GMT Subject: CN=68228e27-5183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:c7:f3:99:c9:8d:73:80:6d:f1:d9:13:db: 3f:14:02:c6:f1:e0:3c:c1:bd:ab:5a:ba:d8:ca:4b: 19:e9:82:ce:2d:51:0a:cd:ea:09:5b:11:27:26:5d: 85:03:64:6b:59:37:08:a8:18:ec:81:c5:25:df:b1: 26:60:68:ba:47:4e:43:91:9c:b9:10:e9:6d:9a:48: 7d:ec:8f:f1:2b:e6:2f:bc:b8:e9:25:9f:7b:73:dd: 05:3b:97:7f:69:4f:d8:cf:91:a6:44:fb:77:8d:ab: 1c:d9:ec:da:f9:f2:18:0c:58:1a:ce:76:95:d7:99: a4:90:41:d9:09:49:ac:47:73:a6:0e:bc:a3:64:ed: 82:11:a5:0b:68:f2:2f:d1:a7:84:bc:50:a0:94:8c: df:5a:48:37:cc:50:e0:93:3b:1d:61:80:69:81:b5: 82:04:d0:e6:b5:b2:06:7c:c3:76:6d:39:58:03:cb: 06:a5:95:62:79:8e:32:df:d1:17:db:b0:c5:13:05: ce:6b:34:31:44:af:49:73:a2:1a:64:2b:fb:8d:12: b0:15:2c:7f:3c:c4:2e:c3:96:33:df:b9:b6:47:e6: 07:41:b0:db:2b:ff:58:34:07:33:16:31:12:94:9f: f7:d1:75:ce:76:3a:44:de:47:45:96:89:96:a5:0e: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:5D:83:88:A8:A2:55:D5:3F:69:97:54:FD:25:DD:D8:32:DD:CF X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d9:13:cb:fb:bc:74:0c:90:4b:20:26:ac:39:c2:44:49:f3: 1c:b8:28:15:70:1f:07:f3:4e:af:fc:cc:0b:a8:2b:26:1c:fb: c9:00:65:3d:62:77:d1:54:86:5c:d3:88:40:a7:3a:f0:c6:d3: 3d:e0:be:33:72:c5:28:71:ab:5a:50:52:29:1e:79:77:e4:75: 85:32:64:f4:81:4d:5e:14:3d:67:40:56:a7:c5:7a:73:c2:eb: c8:52:d3:16:c6:d2:c8:8c:8a:c7:b2:06:85:dc:0e:ad:1e:6f: a7:69:af:94:b0:48:50:c7:aa:50:44:ed:15:ef:6d:07:71:cc: 69:d5:15:91:f3:45:9c:79:13:b2:c2:e7:2a:7a:a7:85:d1:31: 75:e8:bc:49:6d:0c:5e:39:e6:ad:bf:ee:0f:da:5b:39:fa:f0: d2:e6:0c:31:93:00:3e:c8:e2:cc:b5:17:9a:56:51:92:2c:da: 62:fb:5f:d7:81:9b:b8:2b:93:ad:85:ef:19:b3:ce:13:69:87: 74:f3:df:77:95:99:3f:b2:aa:be:ce:82:54:73:68:2e:3b:13: b3:1e:0b:17:cf:46:8b:70:e4:2b:6b:e9:2f:83:17:62:e5:7a: c7:66:95:dd:c8:06:b6:89:6f:73:79:25:77:57:b6:21:0c:d0: e8:5f:c0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwNTEzMDAxMTE5WhcNMjUwNTIwMDAxMTE5WjAYMRYwFAYD VQQDEw02ODIyOGUyNy01MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvLH85nJjXOAbfHZE9s/FALG8eA8wb2rWrrYyksZ6YLOLVEKzeoJWxEnJl2F A2RrWTcIqBjsgcUl37EmYGi6R05DkZy5EOltmkh97I/xK+YvvLjpJZ97c90FO5d/ aU/Yz5GmRPt3jasc2eza+fIYDFgaznaV15mkkEHZCUmsR3OmDryjZO2CEaULaPIv 0aeEvFCglIzfWkg3zFDgkzsdYYBpgbWCBNDmtbIGfMN2bTlYA8sGpZVieY4y39EX 27DFEwXOazQxRK9Jc6IaZCv7jRKwFSx/PMQuw5Yz37m2R+YHQbDbK/9YNAczFjES lJ/30XXOdjpE3kdFlomWpQ7nbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACIXYOI qKJV1T9pl1T9Jd3YMt3PMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB22RPL+7x0DJBLICasOcJESfMcuCgVcB8H806v/MwLqCsmHPvJAGU9 YnfRVIZc04hApzrwxtM94L4zcsUocataUFIpHnl35HWFMmT0gU1eFD1nQFanxXpz wuvIUtMWxtLIjIrHsgaF3A6tHm+naa+UsEhQx6pQRO0V720Hccxp1RWR80WceROy wucqeqeF0TF16LxJbQxeOeatv+4P2ls5+vDS5gwxkwA+yOLMtReaVlGSLNpi+1/X gZu4K5Othe8Zs84TaYd08993lZk/sqq+zoJUc2guOxOzHgsXz0aLcOQra+kvgxdi 5XrHZpXdyAa2iW9zeSV3V7YhDNDoX8CJ -----END CERTIFICATE-----Generated at Wed May 14 20:52:00 2025 by rpki-client