$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: zh5nbWK7zfnB2vNGyjd0zrHhUJ6isSQVJFsv36mg/pc= Subject key identifier: 2B:08:7C:90:A7:B0:03:D9:07:8A:C2:A1:6D:09:73:A5:32:F4:D1:21 Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: 42 Signing time: Tue 13 May 2025 06:39:09 +0000 Manifest this update: Tue 13 May 2025 06:39:09 +0000 Manifest next update: Tue 20 May 2025 06:39:09 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: 7xByzrGEJkTm8HaOvfB6SRJKxrooXWZMxkwX4RUd5T8=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: Ih+3aaDaOz/d8dCkRSwBGnuzOxqfvTbU/QJJ8s8nf54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: May 13 06:39:09 2025 GMT Not After : May 20 06:39:09 2025 GMT Subject: CN=6822e90d-8179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:ce:63:f3:37:9c:06:e5:bc:29:84:cc:60: 81:c3:20:28:5e:e8:d7:69:1b:eb:03:10:b4:b1:88: 27:ed:ba:15:b0:c6:26:02:ac:f4:71:5b:e9:1b:d1: a3:0a:53:05:ea:20:25:7e:e7:8f:99:d9:2e:df:fb: 37:8a:c4:a1:d9:46:35:95:4d:a9:ee:f4:88:b9:d4: f6:4e:8c:49:30:aa:c5:47:f5:dd:b3:10:bc:0c:65: b4:2d:f3:37:8a:9f:3f:83:c6:63:ad:a8:79:96:a5: 7d:04:98:30:e5:43:3d:f1:9e:37:17:0d:51:15:91: 0b:9e:a1:0a:92:f7:c3:26:03:9a:5e:9b:9b:72:bb: d5:de:cd:7b:b3:3e:f2:97:87:2a:a8:b5:41:51:9b: 3c:a1:5f:95:b4:a7:a8:60:8a:b3:bc:58:55:45:1c: 68:1b:8e:6f:21:fa:f6:e3:c0:97:c0:79:6c:0e:96: e3:23:05:04:27:1b:41:82:3f:37:af:10:35:92:a9: b5:79:fb:ef:b5:60:50:49:3f:7a:5f:c3:ed:71:10: 93:c1:44:db:af:b1:cb:ce:18:cd:d4:1b:9e:42:e7: 4e:83:9e:a5:e3:1a:c5:46:01:a1:2b:3d:78:dd:9a: 05:b3:69:65:de:b2:95:90:4d:6f:88:5b:da:29:2c: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:08:7C:90:A7:B0:03:D9:07:8A:C2:A1:6D:09:73:A5:32:F4:D1:21 X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c5:ec:4c:38:93:ca:34:9d:c4:5d:33:4c:62:b9:b4:e0:c9: 8d:00:ee:3d:db:ef:a2:22:b5:e1:e0:37:44:b0:63:bd:74:5b: 2a:eb:59:e0:9e:d6:7c:b4:ef:1e:09:7c:2b:38:d9:40:6b:b6: ab:5c:24:62:b8:9f:c5:85:6f:9c:4c:5a:7c:01:f3:23:b0:55: 24:0a:af:7c:46:78:c8:c2:ee:0c:a0:9e:c7:51:be:73:52:9e: db:5d:ba:20:83:eb:89:8a:af:2d:04:fa:b9:3d:23:03:45:6a: 55:ab:38:bd:d9:49:c2:26:27:16:b1:93:31:b9:fb:36:4e:f6: 15:1b:5f:9e:d9:e2:bd:3c:57:8f:7e:d6:73:a3:34:80:27:62: 27:ab:63:99:cf:3d:4c:fa:e5:f5:89:0e:f9:0f:cc:06:ad:01: 0e:d6:01:40:80:43:64:7b:5b:7b:5e:f3:aa:dc:51:54:2d:ca: 08:70:db:c4:f8:0a:72:0a:b0:ed:7c:96:40:fa:ca:21:92:bc: 97:ab:03:07:c6:a5:55:a3:04:c0:4b:7b:75:f3:8a:e6:97:10: 06:63:29:b7:66:d9:ac:d2:d2:2c:15:37:72:f6:f5:6a:a3:d1: 53:d0:d3:60:98:83:ba:a0:d1:61:24:09:d0:d7:2e:7f:5d:df: 14:7c:85:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoMUU0OEVGRTUzRTYyRUQyMDRCQTdBNjk0Mzg0Q0JBQzky NDY3OTRBNzAeFw0yNTA1MTMwNjM5MDlaFw0yNTA1MjAwNjM5MDlaMBgxFjAUBgNV BAMTDTY4MjJlOTBkLTgxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgZM5j8zecBuW8KYTMYIHDIChe6NdpG+sDELSxiCftuhWwxiYCrPRxW+kb0aMK UwXqICV+54+Z2S7f+zeKxKHZRjWVTanu9Ii51PZOjEkwqsVH9d2zELwMZbQt8zeK nz+DxmOtqHmWpX0EmDDlQz3xnjcXDVEVkQueoQqS98MmA5pem5tyu9XezXuzPvKX hyqotUFRmzyhX5W0p6hgirO8WFVFHGgbjm8h+vbjwJfAeWwOluMjBQQnG0GCPzev EDWSqbV5+++1YFBJP3pfw+1xEJPBRNuvscvOGM3UG55C506DnqXjGsVGAaErPXjd mgWzaWXespWQTW+IW9opLHhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKwh8kKew A9kHisKhbQlzpTL00SEwHwYDVR0jBBgwFoAUHkjv5T5i7SBLp6aUOEy6ySRnlKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0I5NTg4QkFDQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGtqdjVUNWk3U0JMcDZhVU9FeTZ5U1JubEtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0I5NTg4QkFDQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NC THA2YVVPRXk2eVNSbmxLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbF7Ew4k8o0ncRdM0xiubTgyY0A7j3b76IiteHgN0SwY710WyrrWeCe 1ny07x4JfCs42UBrtqtcJGK4n8WFb5xMWnwB8yOwVSQKr3xGeMjC7gygnsdRvnNS nttduiCD64mKry0E+rk9IwNFalWrOL3ZScImJxaxkzG5+zZO9hUbX57Z4r08V49+ 1nOjNIAnYierY5nPPUz65fWJDvkPzAatAQ7WAUCAQ2R7W3te86rcUVQtyghw28T4 CnIKsO18lkD6yiGSvJerAwfGpVWjBMBLe3XziuaXEAZjKbdm2azS0iwVN3L29Wqj 0VPQ02CYg7qg0WEkCdDXLn9d3xR8haE= -----END CERTIFICATE-----Generated at Wed May 14 04:54:43 2025 by rpki-client