$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft File: HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json) Hash identifier: YM2VxVgXiFeXYW9+KT5+0H4g6P7hpc+DBodGBpyrxlY= Subject key identifier: B4:15:A8:BC:13:CB:3B:58:C1:1A:A3:9D:71:A8:D0:BC:4B:0E:0E:E6 Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft Manifest number: 0144 Signing time: Sun 11 May 2025 03:11:03 +0000 Manifest this update: Sun 11 May 2025 03:11:03 +0000 Manifest next update: Sun 18 May 2025 03:11:03 +0000 Files and hashes: 1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: TNEQU48acDw8ZRGwjfWtZlHFOioSY+xS/Agozh0l0Fg=) 2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: kMBmqA1/dyDv1ZADsMkGis7eLU/R9lLG3vYr3JHV36o=) 3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: yui+zHagVlKqBtz9x/Tip9C5MuNKw1xwiJ1l2T37XAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E Validity Not Before: May 11 03:11:03 2025 GMT Not After : May 18 03:11:03 2025 GMT Subject: CN=68201547-4e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:4c:b9:19:2c:d8:43:ac:a0:bc:62:b9:80: fb:85:ed:c5:84:48:6e:8a:c0:aa:41:f0:b4:39:49: ad:bb:96:a9:cc:d9:d6:b7:7a:25:79:eb:b8:10:06: b6:27:fa:a7:4c:73:2d:b1:62:dd:cf:0d:cd:48:27: 79:c0:d3:fe:48:27:f9:a4:9c:dd:10:63:f5:06:ec: 09:21:04:4e:7a:07:61:56:c7:f7:da:ad:c5:c7:97: cd:79:ed:1f:7f:7f:f7:0c:77:5c:47:d3:b8:6f:72: bf:b5:89:2c:da:f0:c8:ab:6d:98:fb:1b:48:e4:2a: 3f:7d:b2:e3:25:fd:ca:01:1a:90:13:b8:8c:0e:58: 39:0f:6c:ec:91:31:bf:25:3e:0a:17:d1:69:11:33: 96:93:05:7a:cf:ea:de:b5:3c:3a:a4:89:a0:cf:d1: 52:ea:b2:76:0c:50:0a:45:ea:32:3e:c0:2e:03:e6: ad:ab:6a:40:d4:ca:8e:49:2e:fb:91:41:34:59:58: a3:91:37:d7:48:f1:ff:63:9e:6d:fd:38:85:a2:75: 27:a2:9d:e1:2d:f7:99:e3:89:1a:c4:76:3f:93:4c: 69:0e:5e:2d:46:5b:0d:06:4d:dd:15:da:2a:68:30: 0b:56:8f:c9:22:35:65:0d:d6:7c:d8:48:47:cd:76: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:15:A8:BC:13:CB:3B:58:C1:1A:A3:9D:71:A8:D0:BC:4B:0E:0E:E6 X509v3 Authority Key Identifier: keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:43:3e:16:97:05:3d:73:3a:65:a3:d9:6b:0b:6e:52:a8:4b: fb:3b:0d:bc:ff:1e:57:15:30:4b:e6:69:74:f4:2f:40:2f:e9: b7:bc:2d:6a:6c:ef:cd:9f:0f:41:20:f8:d8:e8:a9:4b:2e:9b: 85:84:d9:f8:32:44:00:ce:43:da:0e:dc:05:82:fc:6f:ce:96: e0:d1:e3:a1:40:7f:72:b5:33:79:b3:9e:be:b9:61:ce:4e:5b: 74:bf:98:78:8a:38:ed:a8:e5:1e:05:e0:86:1c:b9:44:f3:1b: e3:25:10:a7:5d:1e:8e:04:e9:0e:8d:f7:a4:93:4c:c1:9a:e8: 14:9a:d6:ee:88:00:98:d3:13:bb:75:89:6f:b1:f8:55:2c:26: 1c:23:24:56:45:6d:b6:35:ea:bf:51:00:64:1c:a0:6b:54:d4: 1c:09:aa:b3:a1:b1:ae:e3:01:60:d4:fa:30:c2:95:09:5a:2f: 32:86:26:89:3d:e2:d4:b4:f2:e7:3c:e4:5f:27:e8:3e:f3:57: 89:26:84:e7:0a:c5:fe:91:8f:c3:61:36:01:82:4e:c7:4a:64: d9:ab:42:74:60:5a:30:9a:f2:1f:87:1a:ad:95:35:78:f6:d1: 83:88:3d:77:67:7e:60:29:f5:4f:f8:6d:15:23:d3:51:3d:1b: 48:b6:69:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyOEQxMTAvBgNVBAUTKDFFNjAxM0FGMUY4NTY0RUFBMDA5N0RCMUYyMTY4NzRD NEI3ODY3MEUwHhcNMjUwNTExMDMxMTAzWhcNMjUwNTE4MDMxMTAzWjAYMRYwFAYD VQQDEw02ODIwMTU0Ny00ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WdMuRks2EOsoLxiuYD7he3FhEhuisCqQfC0OUmtu5apzNnWt3oleeu4EAa2 J/qnTHMtsWLdzw3NSCd5wNP+SCf5pJzdEGP1BuwJIQROegdhVsf32q3Fx5fNee0f f3/3DHdcR9O4b3K/tYks2vDIq22Y+xtI5Co/fbLjJf3KARqQE7iMDlg5D2zskTG/ JT4KF9FpETOWkwV6z+retTw6pImgz9FS6rJ2DFAKReoyPsAuA+atq2pA1MqOSS77 kUE0WVijkTfXSPH/Y55t/TiFonUnop3hLfeZ44kaxHY/k0xpDl4tRlsNBk3dFdoq aDALVo/JIjVlDdZ82EhHzXb9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQVqLwT yztYwRqjnXGo0LxLDg7mMB8GA1UdIwQYMBaAFB5gE68fhWTqoAl9sfIWh0xLeGcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4RC82MUExREYyRTQw MzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpPcWdDWDJ4OGhhSFRFdDRa dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htQVRyeC1GWk9xZ0NYMng4aGFIVEV0NFp3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4RC82MUExREYyRTQwMzIxMUVFQkRBNTA5NEFDNEY5QUUwMi9IbUFUcngtRlpP cWdDWDJ4OGhhSFRFdDRadzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkQz4WlwU9czplo9lrC25SqEv7Ow28/x5XFTBL5ml09C9AL+m3vC1q bO/Nnw9BIPjY6KlLLpuFhNn4MkQAzkPaDtwFgvxvzpbg0eOhQH9ytTN5s56+uWHO Tlt0v5h4ijjtqOUeBeCGHLlE8xvjJRCnXR6OBOkOjfekk0zBmugUmtbuiACY0xO7 dYlvsfhVLCYcIyRWRW22Neq/UQBkHKBrVNQcCaqzobGu4wFg1PowwpUJWi8yhiaJ PeLUtPLnPORfJ+g+81eJJoTnCsX+kY/DYTYBgk7HSmTZq0J0YFowmvIfhxqtlTV4 9tGDiD13Z35gKfVP+G0VI9NRPRtItmmp -----END CERTIFICATE-----Generated at Tue May 13 01:46:00 2025 by rpki-client