$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: F7zTku9NBPJqcy7NQRBsmAKiH7mijZ+Du+7CA56rafI= Subject key identifier: D4:BA:2B:44:33:41:72:78:16:2A:A6:95:54:BE:F9:C7:A3:AC:70:AE Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0D55 Signing time: Fri 04 Apr 2025 18:07:20 +0000 Manifest this update: Fri 04 Apr 2025 18:07:20 +0000 Manifest next update: Fri 11 Apr 2025 18:07:20 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: Ar4wB4XQztG4QwZxsqGALNGI9QIOakPvJ1dO5FyfVfk=) 2: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: 7Q1sj7h/kM6xF990j8/QO8w1Qkfx36SwQEh39xIk1I4=) 3: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: QFGP47I0YdoniF040iEHzt2spsQy+KQ0P183ANxKYBw=) 4: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: nKPGiKm/0x5gSVPdolM9Kvr6Qyb+vWukLGBNYOdi6hU=) 5: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 5Sbcqk2T+f7133+xiA46KTuH8zKP6892tENeVV/50JM=) 6: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 4WLEo+7utrf3YQ5HW1B5C1Kpj6dVRKES3SiFL4z/3Rk=) 7: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: fwAHRlN4Uw1i6q04q/JVTmB/uglpgox90dvfugvMuyA=) 8: F2826A504FCF11EB88444467C4F9AE02.roa (hash: fD4ExFVU3zuArt3Xhftg8Dy8YqVccg0NtHG1ZHrBEJ4=) 9: D0551B50046411F09760073DC4F9AE02.roa (hash: el3Plc+WJmYSPNAmnJ6k/gtdNZJt+5aUgVhJBKFg6BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6 Validity Not Before: Apr 4 18:07:20 2025 GMT Not After : Apr 11 18:07:20 2025 GMT Subject: CN=67f01fd8-f3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:8a:14:5e:f4:b6:84:1c:89:86:fa:43:ac: c9:81:88:fc:cd:72:9d:e7:68:75:66:a8:18:06:4b: 86:04:ef:12:6f:c0:95:9d:07:f2:be:b6:a2:90:db: ec:7f:7a:61:dd:5b:7b:77:ef:5a:a6:a1:21:09:b6: 70:af:9c:6f:6b:0e:90:40:97:7c:a7:57:04:34:84: e6:11:fc:a4:1c:1d:ef:71:d9:74:50:8a:63:34:c7: d1:67:1b:7a:b0:69:ef:d6:08:15:c8:da:58:54:d1: cc:c3:45:e8:c2:e1:c7:9b:77:b9:1a:8e:ad:09:46: 14:15:25:d9:da:d3:1a:fa:3d:0b:34:86:82:4a:f6: 4d:a9:98:f3:a7:59:08:fc:b6:5d:2a:a3:3a:e5:3d: ea:f1:91:d2:f2:4c:af:36:5d:aa:57:3c:ea:fe:6a: ab:37:17:d2:e3:98:e2:85:82:7c:e5:96:97:d1:5d: 31:f9:45:87:8d:91:29:74:01:52:02:8c:97:e6:10: ba:af:bb:bf:fc:3d:dc:c5:5d:6b:3e:68:68:19:cf: 19:dd:92:9d:a7:68:9b:9d:f6:4d:88:a5:2f:71:8d: e0:7f:13:46:d3:a0:23:4b:05:ff:29:10:f9:b5:08: 82:a6:c8:b0:c6:9e:78:52:67:dc:af:d4:54:99:8d: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BA:2B:44:33:41:72:78:16:2A:A6:95:54:BE:F9:C7:A3:AC:70:AE X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:0b:7f:dd:32:38:de:f5:bb:82:79:49:f9:59:f9:c4:63:f4: ec:7c:05:30:4b:27:a0:32:42:7e:6a:9a:a3:33:2e:a6:b0:35: 66:eb:5f:a2:e4:ee:41:59:1b:60:35:ee:69:4d:04:02:a3:0d: e3:8b:d1:4d:78:6c:89:41:43:48:0a:5c:29:ff:33:1d:21:5f: a7:ad:4e:c4:2f:da:ff:28:0f:72:5d:02:b3:31:c6:09:41:64: 8a:f9:96:b7:f1:3b:77:2e:de:28:f9:9c:36:e5:6d:73:5f:23: c0:4b:02:b1:4c:ce:0c:83:a9:f6:d3:8a:c6:47:a6:13:1b:7d: 8d:4a:bc:58:94:98:2b:07:1d:db:83:0e:e6:44:55:5f:ec:b0: e8:94:e1:db:94:06:9b:87:64:6e:c6:5f:94:55:63:60:bf:0f: 7c:93:39:31:0e:9c:38:f8:9d:84:af:12:1c:71:20:3d:94:7c: d1:4e:90:4b:75:94:43:08:fc:c1:e4:3e:25:13:58:41:2f:da: cc:f7:46:0a:96:65:f8:ad:2d:4f:2d:64:48:dd:24:61:bd:e4: 81:51:24:80:72:d9:f0:d9:f8:07:75:ce:35:0f:8e:b7:84:34: a5:1d:94:2e:79:29:76:1b:c5:72:a0:43:f5:6e:57:2f:47:ae: 7b:5a:56:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNDA0MTgwNzIwWhcNMjUwNDExMTgwNzIwWjAYMRYwFAYD VQQDEw02N2YwMWZkOC1mM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDWKFF70toQciYb6Q6zJgYj8zXKd52h1ZqgYBkuGBO8Sb8CVnQfyvraikNvs f3ph3Vt7d+9apqEhCbZwr5xvaw6QQJd8p1cENITmEfykHB3vcdl0UIpjNMfRZxt6 sGnv1ggVyNpYVNHMw0XowuHHm3e5Go6tCUYUFSXZ2tMa+j0LNIaCSvZNqZjzp1kI /LZdKqM65T3q8ZHS8kyvNl2qVzzq/mqrNxfS45jihYJ85ZaX0V0x+UWHjZEpdAFS AoyX5hC6r7u//D3cxV1rPmhoGc8Z3ZKdp2ibnfZNiKUvcY3gfxNG06AjSwX/KRD5 tQiCpsiwxp54Umfcr9RUmY3TkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS6K0Qz QXJ4FiqmlVS++cejrHCuMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+C3/dMjje9buCeUn5WfnEY/TsfAUwSyegMkJ+apqjMy6msDVm61+i 5O5BWRtgNe5pTQQCow3ji9FNeGyJQUNIClwp/zMdIV+nrU7EL9r/KA9yXQKzMcYJ QWSK+Za38Tt3Lt4o+Zw25W1zXyPASwKxTM4Mg6n204rGR6YTG32NSrxYlJgrBx3b gw7mRFVf7LDolOHblAabh2Ruxl+UVWNgvw98kzkxDpw4+J2ErxIccSA9lHzRTpBL dZRDCPzB5D4lE1hBL9rM90YKlmX4rS1PLWRI3SRhveSBUSSActnw2fgHdc41D463 hDSlHZQueSl2G8VyoEP1blcvR657WlYs -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:54 2025 by rpki-client