$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: IiDd7noXGhSPKmVV1VtrMnkZRRKEFDzmJjjUvCv3tFM= Subject key identifier: 6B:6E:7A:6B:2B:90:AB:B5:7C:4E:1C:00:61:CA:B2:8B:3F:9E:FC:52 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 40 Signing time: Sun 11 May 2025 06:12:10 +0000 Manifest this update: Sun 11 May 2025 06:12:09 +0000 Manifest next update: Sun 18 May 2025 06:12:09 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: MXqiU6JPV3Io833c1M8p9yeCLbcLWIdAtIn3ebxeVPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Validity Not Before: May 11 06:12:09 2025 GMT Not After : May 18 06:12:09 2025 GMT Subject: CN=68203fb9-2f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:0a:2f:b2:41:2b:54:b5:bf:49:f0:20:8a:9b: b0:54:37:57:e4:1b:da:b9:de:da:8c:a1:90:9e:63: 73:a2:d4:e9:89:6f:3d:4d:af:6e:59:1f:25:49:ec: ff:62:21:dc:65:70:5b:e3:26:c8:0e:c9:f0:35:e7: 1f:c3:59:dd:6b:54:68:f6:61:b2:ad:77:16:23:32: 0e:91:13:72:f7:42:a8:ed:17:40:36:1a:f1:25:79: 0a:12:57:45:13:85:40:44:21:e5:4c:76:a2:dd:ab: 2c:da:6f:01:63:15:35:a3:74:4f:3b:38:80:5d:db: 31:e8:c3:e0:6b:d3:c7:38:29:3e:20:cd:70:1a:0c: 21:05:d5:98:21:d3:58:ac:67:9b:a4:f5:61:ec:fe: 5e:60:ab:5b:13:fd:52:b0:da:73:c3:a9:d0:34:2b: 73:e0:ea:a4:37:0c:8c:c6:77:76:ca:04:73:23:68: 8f:4f:8e:8b:1f:67:29:99:14:99:69:b4:44:11:70: 76:d1:52:10:95:4a:f7:c0:95:03:df:27:0e:cc:c6: 72:40:ca:7f:8a:6d:2c:da:40:f4:eb:42:fa:c3:e6: 45:25:56:05:49:40:5e:10:e6:01:e0:6e:01:c9:f2: d9:8f:5d:48:b8:0b:e7:9f:36:63:04:71:c7:21:33: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:7A:6B:2B:90:AB:B5:7C:4E:1C:00:61:CA:B2:8B:3F:9E:FC:52 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:02:8b:95:7f:6f:52:c2:f7:3f:07:e4:49:c9:aa:7c:8d:97: 05:87:7b:f4:8b:ac:a9:e0:d9:4d:55:3d:ba:ce:0a:92:09:8c: 07:22:16:5f:89:c4:2d:d6:f4:71:59:bb:49:e0:f9:64:ff:db: e0:cd:43:4a:7e:a1:1d:9a:6d:56:ca:5a:29:b0:a3:bd:cd:cc: 7d:27:08:73:62:03:20:a8:cd:3a:5c:04:d5:c6:88:b6:64:cb: 39:1c:c8:49:26:1f:90:2a:66:9a:e0:ab:51:9f:d5:a5:69:2f: 70:7a:2c:cd:4e:f0:c9:a5:ff:d2:23:b0:7c:09:94:f8:d2:ea: 6b:0f:0d:34:07:5c:e6:75:01:54:96:77:d2:9f:35:26:b8:58: af:44:17:35:7f:5c:65:b7:03:dc:96:ff:38:df:68:5b:7a:d7: cf:eb:1d:c4:e4:05:d0:be:8e:9f:b1:99:61:53:c5:60:c5:4f: ed:33:96:20:3a:aa:96:14:99:fb:39:2a:76:ac:f5:c5:b0:71: 74:d2:63:d4:36:02:8b:c8:d6:7c:c9:ef:4a:60:8d:e4:b4:15: 0d:97:3f:91:c3:3e:4c:df:ae:e2:1e:ba:d8:54:07:be:5f:0f: 6d:ae:af:7c:27:18:af:eb:ef:77:53:2f:06:5a:e6:01:c8:5a: 30:17:6d:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUU5QjBEMTYzQ0UwQUExMUU5MUQ1NTYwRjVBM0NDNjY5 RTMyOTFFRjAeFw0yNTA1MTEwNjEyMDlaFw0yNTA1MTgwNjEyMDlaMBgxFjAUBgNV BAMTDTY4MjAzZmI5LTJmNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD8Ci+yQStUtb9J8CCKm7BUN1fkG9q53tqMoZCeY3Oi1OmJbz1Nr25ZHyVJ7P9i IdxlcFvjJsgOyfA15x/DWd1rVGj2YbKtdxYjMg6RE3L3QqjtF0A2GvEleQoSV0UT hUBEIeVMdqLdqyzabwFjFTWjdE87OIBd2zHow+Br08c4KT4gzXAaDCEF1Zgh01is Z5uk9WHs/l5gq1sT/VKw2nPDqdA0K3Pg6qQ3DIzGd3bKBHMjaI9PjosfZymZFJlp tEQRcHbRUhCVSvfAlQPfJw7MxnJAyn+KbSzaQPTrQvrD5kUlVgVJQF4Q5gHgbgHJ 8tmPXUi4C+efNmMEccchM+vDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa256ayuQ q7V8ThwAYcqyiz+e/FIwHwYDVR0jBBgwFoAUHpsNFjzgqhHpHVVg9aPMZp4yke8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzA5NTMwQThDQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtl OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHBzTkZqemdxaEhwSFZWZzlhUE1acDR5a2U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzA5NTMwQThDQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhI cEhWVmc5YVBNWnA0eWtlOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8Ci5V/b1LC9z8H5EnJqnyNlwWHe/SLrKng2U1VPbrOCpIJjAciFl+J xC3W9HFZu0ng+WT/2+DNQ0p+oR2abVbKWimwo73NzH0nCHNiAyCozTpcBNXGiLZk yzkcyEkmH5AqZprgq1Gf1aVpL3B6LM1O8Mml/9IjsHwJlPjS6msPDTQHXOZ1AVSW d9KfNSa4WK9EFzV/XGW3A9yW/zjfaFt618/rHcTkBdC+jp+xmWFTxWDFT+0zliA6 qpYUmfs5Knas9cWwcXTSY9Q2AovI1nzJ70pgjeS0FQ2XP5HDPkzfruIeuthUB75f D22ur3wnGK/r73dTLwZa5gHIWjAXbWA= -----END CERTIFICATE-----Generated at Tue May 13 02:26:07 2025 by rpki-client