$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json) Hash identifier: ae//1dykH0ZxNWXbFibK9APrYu046IHMZnB9Jkcp+Bo= Subject key identifier: 0E:D4:82:67:7F:EE:50:F3:68:AB:52:61:7C:DE:C8:CC:9A:6A:3E:C8 Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 Certificate issuer: /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft Manifest number: 017F Signing time: Tue 13 May 2025 03:30:53 +0000 Manifest this update: Tue 13 May 2025 03:30:53 +0000 Manifest next update: Tue 20 May 2025 03:30:53 +0000 Files and hashes: 1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: EVfx/wUbLIuKw0LvWWspmb+h0+GSTbzeWhIDSbON1Bk=) 2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: 7Nat9vEjm3uLFRu4zdaHZeOvfAimC/wAZ4j55cSSDsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Validity Not Before: May 13 03:30:53 2025 GMT Not After : May 20 03:30:53 2025 GMT Subject: CN=6822bced-dfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:db:0a:c9:e5:59:1e:c4:0b:6d:4b:e9:a0: 6c:ca:24:18:e0:07:2b:48:c0:b2:70:de:b4:39:eb: cf:ef:ef:07:9e:df:4d:fd:dd:64:a8:87:10:d6:14: 8d:ab:da:ae:a0:b0:44:7c:83:37:5a:aa:d6:2f:74: 53:68:83:dc:47:4f:93:bc:74:a5:30:5b:aa:c3:61: f1:00:3b:74:b9:e1:f2:4f:ce:11:3b:6f:5c:53:37: a7:02:b5:d9:07:de:77:b0:10:98:a7:e6:86:ae:bb: a8:50:44:c9:13:84:1c:37:4e:03:0f:d1:43:6b:76: bb:f4:f0:07:61:13:e1:16:57:bf:cf:b2:af:e5:72: 14:4a:db:18:a0:fa:47:7e:4a:92:6b:82:b5:78:80: ea:21:ac:c4:f9:26:d4:cf:ae:71:5f:f8:ad:7b:f4: 01:ef:cb:a1:c8:ba:a7:87:6f:85:e4:43:75:c1:11: 59:ab:4a:28:11:23:f0:3b:1c:a7:c2:4e:8d:ad:e0: 5f:32:dc:24:0f:5f:9b:68:f9:03:71:71:02:0c:30: bd:79:cb:d7:ab:e4:26:b2:00:9c:06:75:86:57:3f: 2c:e5:18:4f:60:a8:0e:63:c0:9e:39:9b:94:f4:5a: f8:1d:b8:80:0a:0a:d7:8a:e7:18:81:dd:27:59:83: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D4:82:67:7F:EE:50:F3:68:AB:52:61:7C:DE:C8:CC:9A:6A:3E:C8 X509v3 Authority Key Identifier: keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:11:1c:a7:f4:fd:19:e8:40:72:fe:93:1a:f9:a3:3a:20:ac: 72:08:74:28:2a:49:49:13:80:30:59:c9:bb:9f:a3:f1:90:6d: 21:50:10:2c:91:ce:69:9c:73:70:6e:2e:1b:c5:73:f5:1d:f5: 15:47:af:9a:32:9b:a0:e7:b7:64:b9:b7:17:f4:a6:bd:67:6a: 28:91:27:d4:ea:e4:94:51:de:56:dd:1a:f8:6a:09:4c:56:fc: e2:2c:8a:59:4b:fd:f6:5d:95:c5:8c:8e:6b:b1:55:3d:68:a7: 55:1e:fe:a4:02:d1:28:04:98:fb:0c:81:f6:0f:e1:c3:a2:83: 6e:5e:94:0e:4b:4c:b7:58:1a:45:5a:1f:70:16:a2:0b:a4:74: 8f:e0:33:c1:5c:17:38:97:9c:83:3d:37:f2:0c:87:2d:5e:8e: c7:5c:41:fd:2a:4c:6e:ea:ca:15:b7:29:b6:0d:25:14:8d:91: 75:a5:46:a7:e1:1c:d7:93:bf:ae:85:4d:e8:97:72:ff:89:41: eb:2d:3d:5d:71:d7:7f:61:52:81:a4:c9:4b:fc:11:62:cd:b8: 97:3f:33:0e:1c:07:54:6b:23:7a:1e:13:b8:30:1a:07:c5:a9: 70:c0:f1:cd:02:e8:55:26:38:4c:01:a7:0c:f8:9d:29:07:13: 3b:06:b9:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGQUYxMTAvBgNVBAUTKDFFODVBODYwRDYyRTI2MDc5MjMzQ0I3QTAxREIwQkFD QkIwMzY5QTYwHhcNMjUwNTEzMDMzMDUzWhcNMjUwNTIwMDMzMDUzWjAYMRYwFAYD VQQDEw02ODIyYmNlZC1kZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAnbCsnlWR7EC21L6aBsyiQY4AcrSMCycN60OevP7+8Hnt9N/d1kqIcQ1hSN q9quoLBEfIM3WqrWL3RTaIPcR0+TvHSlMFuqw2HxADt0ueHyT84RO29cUzenArXZ B953sBCYp+aGrruoUETJE4QcN04DD9FDa3a79PAHYRPhFle/z7Kv5XIUStsYoPpH fkqSa4K1eIDqIazE+SbUz65xX/ite/QB78uhyLqnh2+F5EN1wRFZq0ooESPwOxyn wk6NreBfMtwkD1+baPkDcXECDDC9ecvXq+QmsgCcBnWGVz8s5RhPYKgOY8CeOZuU 9Fr4HbiACgrXiucYgd0nWYOYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7Ugmd/ 7lDzaKtSYXzeyMyaaj7IMB8GA1UdIwQYMBaAFB6FqGDWLiYHkjPLegHbC6y7A2mm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0ZBRi9BOTBEMUI5NjQx NUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpnZVNNOHQ2QWRzTHJMc0Rh YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hvV29ZTll1SmdlU004dDZBZHNMckxzRGFhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0ZBRi9BOTBEMUI5NjQxNUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpn ZVNNOHQ2QWRzTHJMc0RhYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0ERyn9P0Z6EBy/pMa+aM6IKxyCHQoKklJE4AwWcm7n6PxkG0hUBAs kc5pnHNwbi4bxXP1HfUVR6+aMpug57dkubcX9Ka9Z2ookSfU6uSUUd5W3Rr4aglM VvziLIpZS/32XZXFjI5rsVU9aKdVHv6kAtEoBJj7DIH2D+HDooNuXpQOS0y3WBpF Wh9wFqILpHSP4DPBXBc4l5yDPTfyDIctXo7HXEH9Kkxu6soVtym2DSUUjZF1pUan 4RzXk7+uhU3ol3L/iUHrLT1dcdd/YVKBpMlL/BFizbiXPzMOHAdUayN6HhO4MBoH xalwwPHNAuhVJjhMAacM+J0pBxM7BrnU -----END CERTIFICATE-----Generated at Wed May 14 15:20:33 2025 by rpki-client