$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: kjQuvOjfc0FPc/W68yS8Y1rkqYzT73Dz8hhJzbFpFtg= Subject key identifier: F8:2D:46:E7:2B:17:38:12:D7:CB:81:B8:F1:24:7D:1A:72:A1:F2:2C Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 0FD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 0FCF Signing time: Mon 12 May 2025 17:24:49 +0000 Manifest this update: Mon 12 May 2025 17:24:48 +0000 Manifest next update: Mon 19 May 2025 17:24:48 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: bzYwsTRHYIETlAvi5TpN+mO3O0wIn4G0uUZ9guDP1S4=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: May 12 17:24:48 2025 GMT Not After : May 19 17:24:48 2025 GMT Subject: CN=68222ee1-ad90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:9e:0b:34:6f:88:39:4a:e0:fc:75:4e:e1: 44:b9:ea:e5:bc:8b:77:eb:67:d1:fa:3c:aa:08:5a: 0b:37:83:91:61:7e:0e:9d:c4:91:26:cf:8c:de:20: a4:02:77:86:b2:3e:14:9d:d4:1f:bb:e2:90:6f:9b: 55:f4:68:bd:fe:d9:fd:dd:6a:35:cc:53:a7:87:95: c7:50:ea:e9:60:2e:f9:23:41:98:39:3d:e4:5c:85: 86:8c:37:95:40:4e:81:e7:62:89:89:3a:39:a8:b2: 44:b6:5d:d5:3b:21:02:4f:59:8c:0c:89:90:3c:48: 74:42:01:49:f3:dd:39:a5:85:5c:70:83:d7:6e:74: d8:53:8c:c8:ac:d0:6c:13:6d:a8:51:2f:26:18:cd: cb:9e:a6:53:0b:eb:f5:52:8b:98:b4:62:9a:76:32: d8:02:e6:00:79:b9:97:6a:4c:5e:90:0d:ab:6e:22: 32:7e:18:77:ea:fe:2e:ec:1c:e7:7a:dc:f7:ce:56: 09:52:2c:d4:31:57:82:9e:a7:11:7b:a3:a4:1e:40: 35:e4:03:fe:d0:f9:98:a4:ab:f7:eb:69:77:f3:73: e0:d8:74:c7:15:97:93:01:74:0b:fe:af:ad:ea:9a: 40:f2:7e:ca:63:21:2e:25:98:ad:73:1f:61:2c:d3: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2D:46:E7:2B:17:38:12:D7:CB:81:B8:F1:24:7D:1A:72:A1:F2:2C X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f7:3b:b9:a7:3f:bd:0a:16:f4:21:64:c1:ff:c8:9d:38:6b: 97:e9:ea:1d:13:e8:7b:ad:2e:88:65:85:0b:5e:af:ef:02:d9: 4b:36:19:98:0f:20:b8:76:e7:f7:c4:d3:41:67:72:08:79:b5: 77:e0:6d:9c:2b:74:29:39:c2:fd:22:a7:6a:ad:c2:37:44:31: 64:31:2e:16:ab:cb:bb:34:78:9c:e3:03:a0:b9:09:5b:9a:4e: 3a:2e:93:85:e7:23:ff:8e:43:cd:90:90:0e:64:d5:7f:73:fb: 5f:24:10:6f:8e:fb:e1:a5:4c:f5:16:a7:42:e8:68:5e:ad:c9: 8c:ec:19:eb:82:69:27:b9:07:20:33:83:b3:4c:8c:d2:e3:31: 39:2f:98:b9:7c:12:2e:80:4f:14:66:fe:4d:ce:49:d8:7f:b2: 94:d8:c5:b2:92:1c:ff:c2:e5:8e:53:f4:1d:ff:2f:e9:5d:c5: ae:13:f7:ae:f5:63:26:86:72:ec:7d:d7:67:1b:f2:93:2b:1e: ce:38:58:0b:c9:a8:66:2b:e2:5a:a5:53:0e:0f:a0:32:96:0b: bd:47:5f:c9:99:ca:27:c4:a4:f7:41:5b:9a:84:91:7e:ca:e6: e5:23:18:36:dc:be:4f:38:7b:d4:61:0d:50:25:01:d1:c1:ac: 41:1d:ad:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUwNTEyMTcyNDQ4WhcNMjUwNTE5MTcyNDQ4WjAYMRYwFAYD VQQDEw02ODIyMmVlMS1hZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7+eCzRviDlK4Px1TuFEuerlvIt362fR+jyqCFoLN4ORYX4OncSRJs+M3iCk AneGsj4UndQfu+KQb5tV9Gi9/tn93Wo1zFOnh5XHUOrpYC75I0GYOT3kXIWGjDeV QE6B52KJiTo5qLJEtl3VOyECT1mMDImQPEh0QgFJ8905pYVccIPXbnTYU4zIrNBs E22oUS8mGM3LnqZTC+v1UouYtGKadjLYAuYAebmXakxekA2rbiIyfhh36v4u7Bzn etz3zlYJUizUMVeCnqcRe6OkHkA15AP+0PmYpKv362l383Pg2HTHFZeTAXQL/q+t 6ppA8n7KYyEuJZitcx9hLNOnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgtRucr FzgS18uBuPEkfRpyofIsMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt9zu5pz+9Chb0IWTB/8idOGuX6eodE+h7rS6IZYULXq/vAtlLNhmY DyC4duf3xNNBZ3IIebV34G2cK3QpOcL9IqdqrcI3RDFkMS4Wq8u7NHic4wOguQlb mk46LpOF5yP/jkPNkJAOZNV/c/tfJBBvjvvhpUz1FqdC6GhercmM7BnrgmknuQcg M4OzTIzS4zE5L5i5fBIugE8UZv5NzknYf7KU2MWykhz/wuWOU/Qd/y/pXcWuE/eu 9WMmhnLsfddnG/KTKx7OOFgLyahmK+JapVMOD6Aylgu9R1/JmconxKT3QVuahJF+ yublIxg23L5POHvUYQ1QJQHRwaxBHa3t -----END CERTIFICATE-----Generated at Tue May 13 02:32:35 2025 by rpki-client