$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: iT+qJhnBhEVmfeQzQ2muq4Z7sKcI2gghngWKrfwn/mE= Subject key identifier: 22:E8:D0:85:96:1D:7C:F3:54:6D:7B:8C:4B:AF:B2:94:8F:77:2B:A4 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 0131 Signing time: Sat 05 Apr 2025 03:58:49 +0000 Manifest this update: Sat 05 Apr 2025 03:58:49 +0000 Manifest next update: Sat 12 Apr 2025 03:58:49 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: h/KuA69KbkzTK8TPN2z2PFDiD7wsjHJviVXX1g/1A8w=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: ZdXXk2QhrqkUIf+QRKJgnlgGO0IbkAJmbzjOlXTQvus=) 3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=) 4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31 Validity Not Before: Apr 5 03:58:49 2025 GMT Not After : Apr 12 03:58:49 2025 GMT Subject: CN=67f0aa79-2249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:18:63:8f:19:14:20:bd:9d:db:29:aa:71: c4:9e:7c:ee:d4:fc:fb:5a:1b:75:90:f1:30:6f:9f: ff:5d:8e:aa:c7:b9:40:9c:1f:26:0c:f0:d8:ec:1e: 76:f9:90:bc:d4:5e:92:9f:85:57:c5:ea:19:bb:9a: 1f:aa:03:eb:34:6a:c9:03:76:aa:e9:5f:19:72:24: 11:73:77:ca:de:4a:68:ab:e4:53:ff:dc:72:93:3b: 38:d2:f1:49:ee:57:29:0f:d6:66:61:83:67:b0:78: c1:8f:13:e4:80:a7:39:fb:cc:ab:d6:11:2a:65:7f: 15:e8:64:9c:1f:52:f0:c2:44:b3:a1:4b:26:58:64: 59:e0:bf:79:23:8a:ec:11:37:f4:7d:e5:f2:ac:b8: 4d:57:86:59:79:79:e2:4a:2b:14:f6:62:c1:46:e3: 1f:08:f5:79:a0:e0:d0:92:95:78:31:98:b7:ac:41: 7f:6a:88:41:f3:1c:6e:26:da:c1:c3:78:bf:90:07: 70:dd:d3:6f:90:d0:88:d9:0b:0b:5d:38:b2:fe:f6: 12:bf:5e:66:17:df:74:d8:66:93:46:44:8b:24:8f: f9:c7:01:91:5a:78:a3:8b:67:48:b2:14:4e:de:86: b7:66:ad:f0:b9:74:d0:36:36:2a:6c:61:92:8c:69: f6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E8:D0:85:96:1D:7C:F3:54:6D:7B:8C:4B:AF:B2:94:8F:77:2B:A4 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:42:0c:1b:18:30:9e:3f:64:15:42:67:32:19:c3:83:66:e5: 37:13:a1:b8:54:6b:07:1e:8c:b0:78:c8:51:9c:51:8d:06:b1: da:b7:3c:bc:8e:77:02:86:4d:81:3e:37:81:f1:0e:09:15:80: 2a:d6:d4:78:65:75:63:69:73:67:79:90:df:83:be:b7:d7:e3: 9a:9c:d3:5d:9c:67:04:5b:91:f8:0b:8c:80:f2:79:8f:19:3e: 48:a7:f2:eb:03:6e:75:42:7a:8e:d0:74:73:c1:25:7b:33:d8: 23:94:9d:4d:cb:d3:d5:c9:cf:2e:af:f6:d3:61:f5:b3:02:fe: c2:bc:49:94:f5:c5:79:74:d3:39:06:a5:07:bf:e3:9f:92:f4: 39:7a:d6:4e:1c:4d:95:8c:e5:07:f9:48:31:7f:cb:22:c0:4c: 22:3a:b1:c7:72:5d:32:ab:57:48:4d:01:77:2f:b1:18:cb:aa: be:e9:8d:15:18:39:58:e2:4a:b0:f3:98:c0:c3:88:af:ae:48: cd:61:f9:ec:d8:df:ef:d6:01:11:f2:89:fd:46:86:54:72:47: 44:04:e2:18:de:9b:94:da:1f:08:d1:e1:c5:78:bd:97:41:fa: e2:d3:d2:64:88:c1:1e:49:92:18:20:5f:0d:bd:cf:eb:00:8c: 7d:53:dd:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwNDA1MDM1ODQ5WhcNMjUwNDEyMDM1ODQ5WjAYMRYwFAYD VQQDEw02N2YwYWE3OS0yMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWoYY48ZFCC9ndspqnHEnnzu1Pz7Wht1kPEwb5//XY6qx7lAnB8mDPDY7B52 +ZC81F6Sn4VXxeoZu5ofqgPrNGrJA3aq6V8ZciQRc3fK3kpoq+RT/9xykzs40vFJ 7lcpD9ZmYYNnsHjBjxPkgKc5+8yr1hEqZX8V6GScH1LwwkSzoUsmWGRZ4L95I4rs ETf0feXyrLhNV4ZZeXniSisU9mLBRuMfCPV5oODQkpV4MZi3rEF/aohB8xxuJtrB w3i/kAdw3dNvkNCI2QsLXTiy/vYSv15mF9902GaTRkSLJI/5xwGRWniji2dIshRO 3oa3Zq3wuXTQNjYqbGGSjGn2cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLo0IWW HXzzVG17jEuvspSPdyukMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIQgwbGDCeP2QVQmcyGcODZuU3E6G4VGsHHoyweMhRnFGNBrHatzy8 jncChk2BPjeB8Q4JFYAq1tR4ZXVjaXNneZDfg7631+OanNNdnGcEW5H4C4yA8nmP GT5Ip/LrA251QnqO0HRzwSV7M9gjlJ1Ny9PVyc8ur/bTYfWzAv7CvEmU9cV5dNM5 BqUHv+OfkvQ5etZOHE2VjOUH+Ugxf8siwEwiOrHHcl0yq1dITQF3L7EYy6q+6Y0V GDlY4kqw85jAw4ivrkjNYfns2N/v1gER8on9RoZUckdEBOIY3puU2h8I0eHFeL2X Qfri09JkiMEeSZIYIF8Nvc/rAIx9U90W -----END CERTIFICATE-----Generated at Sun Apr 6 06:12:45 2025 by rpki-client