$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: Seg+eJqkT+WE2o9BwmcS/+1UBx2WkJIimA7y18gN84U= Subject key identifier: E5:D9:41:0F:7A:B3:1B:63:D5:25:B2:C4:8B:C8:12:58:25:EA:95:81 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 09E7 Signing time: Fri 16 May 2025 20:09:39 +0000 Manifest this update: Fri 16 May 2025 20:09:39 +0000 Manifest next update: Fri 23 May 2025 20:09:39 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: 2rGV2YqmUETiAmht7ekgtSJyVLIZVmi+eYh4TzWwnRI=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: pkQyF6/gfOZsdS2FZ7pXb1wwkEQgEQkFPici094hylM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: May 16 20:09:39 2025 GMT Not After : May 23 20:09:39 2025 GMT Subject: CN=68279b83-282a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:0b:98:94:44:f0:87:81:57:0b:9d:cc:5b: a4:59:bc:16:46:95:e0:e3:df:5d:ef:f9:68:76:06: 58:13:af:e9:62:5a:be:a6:59:11:f3:71:f8:90:6f: b9:c4:33:fa:4c:a2:01:36:bc:1b:5f:44:ce:5d:0f: d3:11:87:6d:39:e0:65:36:16:38:e7:bc:de:08:a2: 1e:8d:ea:4d:ba:df:89:23:19:89:a4:6e:5b:45:46: a4:23:0a:69:da:07:eb:bd:81:11:ad:9f:0e:2a:17: e1:d5:f3:42:df:36:28:e9:24:90:47:39:ee:c4:38: 7b:de:16:e0:d3:a7:41:5c:31:67:c3:0f:6a:61:2b: 47:e2:01:ea:4e:ef:69:8e:f0:84:71:fa:42:87:f5: 53:ca:16:0c:a7:8a:53:9f:a4:ed:a1:bb:7b:4d:00: 8e:c0:c1:4f:ea:fe:4b:12:09:23:2b:5d:4c:a8:6e: 85:85:80:31:a1:69:c3:91:a2:7c:88:55:78:a1:60: c0:a1:09:01:00:10:81:8f:c0:33:39:cf:d4:b2:2b: b9:fd:e1:58:57:a3:0f:2e:eb:1f:2f:8e:59:32:81: 3c:04:5f:37:a5:46:c3:6a:36:ad:74:7f:fa:f9:5c: 0e:4c:af:9f:6c:8b:be:4a:a5:a1:37:27:ee:5d:9c: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D9:41:0F:7A:B3:1B:63:D5:25:B2:C4:8B:C8:12:58:25:EA:95:81 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:71:77:44:5b:27:09:fe:5d:5e:0b:5c:59:e2:87:a8:4e:4e: da:af:0a:f9:99:da:fc:66:38:b6:2f:2d:00:00:bc:7a:7d:ba: ff:e7:9b:bc:48:bd:55:9b:fc:90:99:29:09:67:64:04:2c:12: 4c:47:24:26:cf:a2:61:5a:fc:4f:91:11:12:6e:2b:85:f1:89: 09:6b:cc:fa:2b:8a:b8:3e:a2:55:96:53:cb:55:47:32:f6:65: 0a:16:f7:ee:27:1b:6e:29:c0:dc:14:11:77:0d:ff:e0:a9:00: 2c:5d:1e:8c:94:79:f4:d1:87:1f:67:2a:d7:22:86:76:3d:54: 0c:57:f3:70:2a:31:b5:1c:19:b9:b1:93:4f:07:4e:3d:cc:b8: fa:29:71:2c:d2:55:39:33:20:0e:b6:cd:c9:fc:27:16:a4:1b: 8e:d3:58:63:a5:a1:a2:e5:c1:5b:ce:90:1b:3a:2a:23:bf:ca: 9d:03:98:72:09:48:b8:a0:25:69:a4:41:4c:04:26:ac:a9:59: 18:0f:83:a6:11:8f:07:44:8e:79:b1:40:7f:7f:32:bc:50:4b: 40:3f:db:1b:1d:8a:9b:aa:cb:67:95:8d:be:91:0e:35:2b:83: 4d:e2:3e:20:a2:80:d4:25:55:ac:94:b4:3d:f9:8f:d6:7e:ea: 46:6d:ad:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjUwNTE2MjAwOTM5WhcNMjUwNTIzMjAwOTM5WjAYMRYwFAYD VQQDEw02ODI3OWI4My0yODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc8LmJRE8IeBVwudzFukWbwWRpXg499d7/lodgZYE6/pYlq+plkR83H4kG+5 xDP6TKIBNrwbX0TOXQ/TEYdtOeBlNhY457zeCKIejepNut+JIxmJpG5bRUakIwpp 2gfrvYERrZ8OKhfh1fNC3zYo6SSQRznuxDh73hbg06dBXDFnww9qYStH4gHqTu9p jvCEcfpCh/VTyhYMp4pTn6Ttobt7TQCOwMFP6v5LEgkjK11MqG6FhYAxoWnDkaJ8 iFV4oWDAoQkBABCBj8AzOc/Usiu5/eFYV6MPLusfL45ZMoE8BF83pUbDajatdH/6 +VwOTK+fbIu+SqWhNyfuXZwIkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXZQQ96 sxtj1SWyxIvIElgl6pWBMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPcXdEWycJ/l1eC1xZ4oeoTk7arwr5mdr8Zji2Ly0AALx6fbr/55u8 SL1Vm/yQmSkJZ2QELBJMRyQmz6JhWvxPkRESbiuF8YkJa8z6K4q4PqJVllPLVUcy 9mUKFvfuJxtuKcDcFBF3Df/gqQAsXR6MlHn00YcfZyrXIoZ2PVQMV/NwKjG1HBm5 sZNPB049zLj6KXEs0lU5MyAOts3J/CcWpBuO01hjpaGi5cFbzpAbOiojv8qdA5hy CUi4oCVppEFMBCasqVkYD4OmEY8HRI55sUB/fzK8UEtAP9sbHYqbqstnlY2+kQ41 K4NN4j4gooDUJVWslLQ9+Y/WfupGba2u -----END CERTIFICATE-----Generated at Sat May 17 22:15:02 2025 by rpki-client