$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: 7N7b1qKQ24eb/wjcW1LWDbWZo1hBhiXNnYDul3jbrLo= Subject key identifier: 88:31:95:FB:26:84:99:4D:85:AB:D4:04:FB:3F:F0:E6:51:48:E8:5A Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: D5 Signing time: Thu 03 Apr 2025 04:54:34 +0000 Manifest this update: Thu 03 Apr 2025 04:54:33 +0000 Manifest next update: Thu 10 Apr 2025 04:54:33 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: CDiIcYipahKyYu2GQnSTJjs3uKPBW0ISP+VC91yRnIg=) 2: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72 Validity Not Before: Apr 3 04:54:33 2025 GMT Not After : Apr 10 04:54:33 2025 GMT Subject: CN=67ee1489-8ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:ed:80:98:b6:40:9e:01:c6:19:72:8c:8d: cd:98:50:7f:04:a8:02:a7:f3:66:be:ce:09:85:4f: d0:7f:1c:65:f3:35:77:87:57:8c:ea:58:51:bc:06: 99:a3:d6:1f:15:62:db:01:f9:af:a1:ac:f7:b8:f2: 8f:9e:c5:ed:c0:52:30:29:ee:3b:66:e4:ec:69:ef: a0:17:8c:78:e8:6c:eb:cf:34:c2:0e:33:ba:53:fa: 38:53:cc:5e:fc:59:05:7d:6f:68:87:bd:af:9b:5a: 20:79:41:84:4f:02:3b:cc:b7:86:43:d1:99:19:1c: 91:22:ec:29:59:73:ed:29:53:0f:42:56:b5:4b:c2: 6f:8c:42:42:00:1d:86:72:29:c0:ac:40:60:dc:1e: 31:99:d9:c9:bd:7b:8a:f0:fa:e6:78:35:b0:ac:28: 41:be:e4:4f:74:68:af:3f:17:59:77:e5:e0:27:4a: 70:e5:a2:67:3c:98:c4:c1:28:23:96:e6:96:dc:1f: fe:d6:cb:15:e5:d2:aa:29:ef:d7:75:4f:8a:c6:0e: 52:13:43:76:8a:1f:4e:7b:4c:e5:23:85:aa:b1:24: 42:01:cf:64:0d:fb:6d:17:ca:eb:fa:2f:fc:54:ae: fb:7e:83:3c:06:c3:61:35:36:e8:83:7b:61:fa:26: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:31:95:FB:26:84:99:4D:85:AB:D4:04:FB:3F:F0:E6:51:48:E8:5A X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6a:eb:07:15:1c:51:40:e7:06:3b:5a:df:c7:0a:a8:6d:4c: 33:b9:98:f7:66:ef:33:4c:fc:8f:32:66:94:dd:74:15:17:f6: 6f:ef:62:bd:29:a8:bf:19:96:2c:f5:72:35:cd:a2:ba:50:ab: 62:3b:ac:a3:c5:a2:40:8d:ec:40:9b:03:5d:bd:bb:4c:e0:2f: e7:44:cd:fa:5e:1f:ca:25:38:f1:a3:2d:c3:0a:fc:68:18:ba: 54:22:6c:0f:cb:76:0c:0c:b4:87:95:e6:2f:a3:c4:93:ca:13: 1c:65:0d:ad:ff:8f:fe:9d:78:ac:19:54:19:ac:91:06:b6:b3: ff:98:9f:b6:97:cd:f5:0f:c5:c0:ef:4a:2f:07:75:f8:05:1d: 34:0a:66:9b:e1:f6:1b:c5:56:1f:23:11:14:61:d0:51:31:05: 41:18:f9:8d:58:7f:81:1d:33:64:20:3a:77:b5:03:b2:0a:1c: a1:71:5c:91:8f:72:2b:0e:3f:d8:42:98:d4:11:42:8e:a0:72: bb:63:72:7c:91:0a:6b:32:8c:b0:58:71:d5:ce:e0:75:4b:d7: 5d:bb:23:56:fc:77:5a:5b:33:19:a9:75:76:e2:2d:13:ab:5d: 10:24:29:6d:8a:9b:ea:5b:13:11:d3:1c:bd:f7:89:d0:d8:42: 40:99:dc:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwNDAzMDQ1NDMzWhcNMjUwNDEwMDQ1NDMzWjAYMRYwFAYD VQQDEw02N2VlMTQ4OS04ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzrtgJi2QJ4BxhlyjI3NmFB/BKgCp/Nmvs4JhU/Qfxxl8zV3h1eM6lhRvAaZ o9YfFWLbAfmvoaz3uPKPnsXtwFIwKe47ZuTsae+gF4x46GzrzzTCDjO6U/o4U8xe /FkFfW9oh72vm1ogeUGETwI7zLeGQ9GZGRyRIuwpWXPtKVMPQla1S8JvjEJCAB2G cinArEBg3B4xmdnJvXuK8PrmeDWwrChBvuRPdGivPxdZd+XgJ0pw5aJnPJjEwSgj luaW3B/+1ssV5dKqKe/XdU+Kxg5SE0N2ih9Oe0zlI4WqsSRCAc9kDfttF8rr+i/8 VK77foM8BsNhNTbog3th+ibhVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgxlfsm hJlNhavUBPs/8OZRSOhaMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACausHFRxRQOcGO1rfxwqobUwzuZj3Zu8zTPyPMmaU3XQVF/Zv72K9 Kai/GZYs9XI1zaK6UKtiO6yjxaJAjexAmwNdvbtM4C/nRM36Xh/KJTjxoy3DCvxo GLpUImwPy3YMDLSHleYvo8STyhMcZQ2t/4/+nXisGVQZrJEGtrP/mJ+2l831D8XA 70ovB3X4BR00Cmab4fYbxVYfIxEUYdBRMQVBGPmNWH+BHTNkIDp3tQOyChyhcVyR j3IrDj/YQpjUEUKOoHK7Y3J8kQprMoywWHHVzuB1S9dduyNW/HdaWzMZqXV24i0T q10QJCltipvqWxMR0xy994nQ2EJAmdx8 -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:02 2025 by rpki-client