$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: cjc+nrKfGe9qO6dxPnf4Uvyjgy1/Odmho6duZgVVNMQ= Subject key identifier: 24:4A:0F:80:B6:AA:B7:6F:BA:AE:A2:84:35:B9:B0:FB:45:01:06:A6 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0132 Signing time: Tue 13 May 2025 03:44:31 +0000 Manifest this update: Tue 13 May 2025 03:44:31 +0000 Manifest next update: Tue 20 May 2025 03:44:30 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: XI4u7HF3uRSVcEyZ7Z6X57DYA4GISDqMGbC+Yp+BNGA=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: May 13 03:44:31 2025 GMT Not After : May 20 03:44:30 2025 GMT Subject: CN=6822c01f-3249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:b4:26:33:5f:93:49:9b:ca:05:b0:73:99: 37:d6:7f:81:20:d0:7e:47:44:7e:c0:d5:5b:d8:13: 21:31:58:eb:60:8e:b0:50:34:ad:37:80:3d:96:ff: 60:b8:55:12:aa:45:11:59:e8:c6:2c:75:4b:c7:e6: 32:87:1f:c4:d6:66:3e:b8:c4:e4:f0:13:cb:4d:4d: 6b:4f:4d:fd:01:16:5d:1e:43:b3:f2:48:e0:c7:bd: c3:e1:9b:3b:a5:02:af:17:b5:f2:0b:69:16:70:63: 62:51:33:12:b3:5b:df:ee:b8:d6:57:cd:db:b7:c2: cb:f9:f3:93:f3:d8:bd:d6:b3:cf:d4:3a:ac:e1:d0: 84:cd:82:da:e3:24:4c:4e:95:1c:19:c7:41:93:55: 29:05:b8:62:e0:f1:b8:4e:fd:08:54:4a:65:f7:64: 91:36:d4:9c:2b:c3:4f:34:8b:aa:c2:48:32:12:14: f3:1d:0f:11:50:b4:30:d4:27:23:f2:1b:87:41:38: 5d:2e:9d:ec:7f:0a:bd:2d:94:05:27:bc:98:85:41: 21:a1:5c:7e:28:8d:92:7b:d4:a5:6a:fc:36:03:ee: ab:09:b9:d0:0d:53:2b:df:08:13:52:29:47:db:e5: 19:2c:94:c5:99:bd:83:f7:46:ef:b4:25:c3:5b:bb: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4A:0F:80:B6:AA:B7:6F:BA:AE:A2:84:35:B9:B0:FB:45:01:06:A6 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:86:77:06:a6:e1:7c:eb:f4:d1:79:7d:31:aa:f3:a5:e4: 1a:a2:ba:d0:22:b1:36:25:2a:a2:aa:03:29:24:14:10:08:39: cd:1d:da:47:13:32:22:7f:60:a6:c8:cd:62:b6:ea:7f:51:58: 2c:79:7e:db:18:6a:73:88:fe:cf:32:c1:bb:90:ec:d5:5a:01: bd:28:0b:43:a4:5d:1e:7d:f3:6a:4c:d4:3e:07:e2:4a:87:f7: dd:95:05:44:aa:a8:32:7a:24:b9:1a:35:38:7a:d5:af:0d:02: 77:81:b8:ee:b4:37:d6:62:82:b4:c3:8d:af:d0:d0:24:24:01: 80:4a:f8:6c:35:2a:5b:e0:25:f1:fd:80:e5:bc:28:9d:ab:d9: a2:da:e2:a9:71:05:c1:7a:77:0f:f1:11:2a:cc:00:d4:da:c7: 19:ab:21:8b:d4:e7:f5:fe:6a:f4:0c:55:f7:8b:db:80:28:11: e2:62:c1:0d:5c:9b:78:dc:b5:de:5e:14:ab:4d:f4:17:43:fd: 1b:6b:74:a7:4b:21:a3:4a:f5:b8:6e:49:7e:4c:d0:ef:97:55: ff:80:72:f6:f2:98:5b:7b:68:1b:d7:79:0a:0e:a6:4d:72:cb: fe:c9:aa:d9:07:d3:97:05:1c:99:cc:d1:7f:db:1c:f3:4b:27: 2b:3a:28:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwNTEzMDM0NDMxWhcNMjUwNTIwMDM0NDMwWjAYMRYwFAYD VQQDEw02ODIyYzAxZi0zMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43+0JjNfk0mbygWwc5k31n+BINB+R0R+wNVb2BMhMVjrYI6wUDStN4A9lv9g uFUSqkURWejGLHVLx+Yyhx/E1mY+uMTk8BPLTU1rT039ARZdHkOz8kjgx73D4Zs7 pQKvF7XyC2kWcGNiUTMSs1vf7rjWV83bt8LL+fOT89i91rPP1Dqs4dCEzYLa4yRM TpUcGcdBk1UpBbhi4PG4Tv0IVEpl92SRNtScK8NPNIuqwkgyEhTzHQ8RULQw1Ccj 8huHQThdLp3sfwq9LZQFJ7yYhUEhoVx+KI2Se9Slavw2A+6rCbnQDVMr3wgTUilH 2+UZLJTFmb2D90bvtCXDW7slzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRKD4C2 qrdvuq6ihDW5sPtFAQamMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvhIZ3BqbhfOv00Xl9MarzpeQaorrQIrE2JSqiqgMpJBQQCDnNHdpH EzIif2CmyM1itup/UVgseX7bGGpziP7PMsG7kOzVWgG9KAtDpF0effNqTNQ+B+JK h/fdlQVEqqgyeiS5GjU4etWvDQJ3gbjutDfWYoK0w42v0NAkJAGASvhsNSpb4CXx /YDlvCidq9mi2uKpcQXBencP8REqzADU2scZqyGL1Of1/mr0DFX3i9uAKBHiYsEN XJt43LXeXhSrTfQXQ/0ba3SnSyGjSvW4bkl+TNDvl1X/gHL28phbe2gb13kKDqZN csv+yarZB9OXBRyZzNF/2xzzSycrOiia -----END CERTIFICATE-----Generated at Thu May 15 03:39:44 2025 by rpki-client