$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: BjPhqa1+8WqyMUSLMsiSiiJysvWmQHgTKra3blrqo8g= Subject key identifier: C1:82:2D:BE:1C:D2:B1:E4:B3:9D:17:1E:88:ED:19:B3:B9:C6:03:33 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 05DD Signing time: Fri 04 Apr 2025 23:06:08 +0000 Manifest this update: Fri 04 Apr 2025 23:06:07 +0000 Manifest next update: Fri 11 Apr 2025 23:06:07 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: diK3cA2ADXrzsFjKn55llt8MLeYH/JSfbl4V4NyGv44=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: pMCjO+dEpym8WZT6FFXX0BN+eJ9YjqXuqC09C9kAxVs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: 3RUylNRBzlhM6wNTSM7RbhRXATKVFjngYSNzKv1ez60=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: BlXgUYLAQgGHTY4XpWyfRou2YPtS9beWJgAM39FVJwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508 Validity Not Before: Apr 4 23:06:07 2025 GMT Not After : Apr 11 23:06:07 2025 GMT Subject: CN=67f065df-21b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:a0:cd:53:78:0b:a8:88:d0:23:39:b8:1f: c4:0e:ac:95:fc:26:5b:81:6b:15:2b:30:a0:05:8e: 41:8a:e7:19:db:9a:67:86:e4:02:d2:57:62:55:30: f1:c2:33:20:69:ee:e7:68:30:ed:94:43:02:5d:58: ce:08:f6:a7:f5:d0:e0:e7:31:92:97:96:3a:60:ae: 5b:d8:e9:63:ef:6e:8f:47:4b:94:53:2a:e6:99:37: 5a:bd:32:c0:93:5a:8a:1d:bc:62:01:1f:fb:18:ba: c6:e1:ad:8d:68:d1:93:b2:bb:e6:ac:53:36:bd:f6: 78:80:2b:33:70:4a:32:6b:07:15:9c:1a:4a:43:97: 85:ae:0b:05:d9:ec:e8:b2:3e:40:98:0d:a2:2a:4a: 69:2b:f8:85:01:be:0a:6a:f0:2d:c9:cd:ad:db:be: 8a:a4:f6:5f:0b:46:c7:98:71:2d:fc:5a:81:80:ed: 49:9d:4a:8f:ca:f3:3e:89:ac:3b:b2:00:a6:4f:6f: ab:54:cf:b5:68:05:c0:0a:fb:f9:29:ac:76:c5:11: f9:90:a0:a9:d1:03:9d:0d:b6:1c:ab:17:b3:9e:ba: 5c:75:9c:74:52:01:12:fb:11:e4:4a:6a:6b:ae:e6: 48:c9:30:29:99:e2:99:e5:00:d3:26:df:21:1b:ac: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:82:2D:BE:1C:D2:B1:E4:B3:9D:17:1E:88:ED:19:B3:B9:C6:03:33 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:a9:d9:39:56:be:47:3b:46:10:9f:e6:fc:92:a8:86:07: 71:f7:fb:2d:0d:54:99:9f:48:2c:09:80:0b:cc:d8:75:b4:3d: 99:6a:61:2c:92:55:46:ea:c0:e3:70:e9:3b:a7:f6:ef:30:3e: 24:d7:b9:4a:0a:96:f5:9b:e2:5a:1d:17:ac:ec:dc:74:1c:70: e4:3c:99:4c:ac:54:e0:d0:19:01:ec:95:2e:a9:28:1d:93:d4: bc:39:c4:f3:2b:60:3e:79:ac:a0:d3:3c:f0:79:b8:45:85:9f: d4:6d:74:77:c8:8d:2b:50:14:2b:40:c1:9d:9b:63:4e:91:5a: c2:ee:e0:12:ab:5b:27:ad:12:89:a2:18:15:ad:08:ab:d7:f7: ce:7d:57:53:b2:08:34:95:c6:e9:d4:6b:44:38:6e:fb:96:e0: 36:e5:e8:00:8c:ea:03:9c:36:06:53:89:1f:40:7d:68:c7:7d: a0:9b:01:1b:0a:0f:f5:23:3b:f3:9d:a0:55:b4:5e:67:1c:f8: bc:e7:23:3f:00:a9:15:28:e9:0e:ca:b3:57:f8:e8:24:e8:c4: a8:fb:db:c8:0a:84:a8:b6:20:1f:f0:08:3c:24:a6:53:d2:29: 06:da:5b:a5:6d:4a:95:85:5a:0e:b0:c7:69:61:e9:9d:c5:7a: bd:5e:3b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUwNDA0MjMwNjA3WhcNMjUwNDExMjMwNjA3WjAYMRYwFAYD VQQDEw02N2YwNjVkZi0yMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn16gzVN4C6iI0CM5uB/EDqyV/CZbgWsVKzCgBY5BiucZ25pnhuQC0ldiVTDx wjMgae7naDDtlEMCXVjOCPan9dDg5zGSl5Y6YK5b2Olj726PR0uUUyrmmTdavTLA k1qKHbxiAR/7GLrG4a2NaNGTsrvmrFM2vfZ4gCszcEoyawcVnBpKQ5eFrgsF2ezo sj5AmA2iKkppK/iFAb4KavAtyc2t276KpPZfC0bHmHEt/FqBgO1JnUqPyvM+iaw7 sgCmT2+rVM+1aAXACvv5Kax2xRH5kKCp0QOdDbYcqxeznrpcdZx0UgES+xHkSmpr ruZIyTApmeKZ5QDTJt8hG6z0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGCLb4c 0rHks50XHojtGbO5xgMzMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMf6nZOVa+RztGEJ/m/JKohgdx9/stDVSZn0gsCYALzNh1tD2ZamEs klVG6sDjcOk7p/bvMD4k17lKCpb1m+JaHRes7Nx0HHDkPJlMrFTg0BkB7JUuqSgd k9S8OcTzK2A+eayg0zzwebhFhZ/UbXR3yI0rUBQrQMGdm2NOkVrC7uASq1snrRKJ ohgVrQir1/fOfVdTsgg0lcbp1GtEOG77luA25egAjOoDnDYGU4kfQH1ox32gmwEb Cg/1IzvznaBVtF5nHPi85yM/AKkVKOkOyrNX+Ogk6MSo+9vICoSotiAf8Ag8JKZT 0ikG2lulbUqVhVoOsMdpYemdxXq9Xjup -----END CERTIFICATE-----Generated at Sat Apr 5 07:01:49 2025 by rpki-client