$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: HpTAasTf63ZWFdJiTqFpZW4GR7VbfPFW3ksfgnoyGFc= Subject key identifier: 41:01:8B:D4:35:56:A7:8B:55:48:72:F9:83:AD:C2:C8:BC:EC:C3:75 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 012C Signing time: Sat 31 May 2025 04:21:32 +0000 Manifest this update: Sat 31 May 2025 04:21:31 +0000 Manifest next update: Sat 07 Jun 2025 04:21:31 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: otHFIkl04I4H7C6JM0oeqGvnUg58U8qaH8RRWvkCD3A=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: May 31 04:21:31 2025 GMT Not After : Jun 7 04:21:31 2025 GMT Subject: CN=683a83cc-932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:d4:8f:2e:7b:49:4a:e5:bd:94:4a:08:fd: a2:0c:5a:30:59:54:6d:87:fa:5e:79:27:19:18:68: 5d:65:4f:ef:6d:7b:65:05:02:26:1a:22:52:1b:75: 03:30:ff:97:14:1d:5b:7f:48:cc:f1:78:8d:03:d9: 0a:00:b7:50:09:bf:c8:be:13:57:b8:54:64:c6:15: 1b:da:ca:2f:52:f7:37:3c:e4:9f:1b:f7:6e:f2:ad: f3:9a:e6:e8:b7:bb:03:cf:4e:3b:79:d0:70:e7:9d: 6f:94:a2:4b:58:1d:1e:f6:79:b5:95:4a:61:29:8a: 21:8f:4c:c8:5a:fc:56:03:39:0a:9a:f2:c1:ed:64: 1d:b6:9d:cc:b0:f3:13:e9:87:5f:41:2b:ff:ac:14: e6:ad:48:6b:88:60:99:df:aa:ea:92:86:22:98:22: a4:03:40:de:fc:7f:0c:00:a9:8a:73:3f:c4:8a:c9: 32:d3:72:e2:52:97:2f:92:a0:13:c7:bc:99:3e:5b: 17:42:a3:43:c7:41:a2:93:3d:a7:a9:e8:56:25:71: 75:e9:1e:c1:97:a0:36:cd:c8:78:15:bb:61:09:6a: 3a:d5:0f:11:ad:7e:60:56:14:e9:ec:96:bf:66:8f: 5c:6d:7a:d3:91:aa:f0:34:1b:7a:88:99:8f:3c:82: 7e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:8B:D4:35:56:A7:8B:55:48:72:F9:83:AD:C2:C8:BC:EC:C3:75 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d3:32:d6:5a:9b:90:0f:f6:bd:45:c5:4c:ed:48:c5:33:3a: e5:9a:b2:ae:43:21:90:40:d4:b1:fe:e3:62:04:a9:19:12:61: 32:ac:c1:d7:89:6e:6a:da:c3:50:a4:a2:73:94:7a:31:b0:99: b9:74:a4:84:7a:c0:31:c9:fb:74:90:61:33:3b:d5:0d:03:7f: 59:93:49:60:dc:15:11:47:75:2e:77:f4:f8:6b:e2:8d:e9:cc: 35:80:99:cb:88:75:82:64:89:32:dc:b5:32:7b:26:4e:b2:f3: bd:07:12:07:fe:b1:45:a6:7d:21:b1:7a:ca:cc:5d:69:5d:51: 31:c0:b1:12:b7:fb:fd:72:6c:f9:26:cf:7a:30:b8:1a:15:35: 46:3b:85:38:fd:ec:71:e1:ac:0c:09:ef:08:29:2f:37:d1:62: d8:59:b5:72:05:19:ca:9a:8e:31:a0:55:93:95:33:7a:8a:3e: 97:bd:51:37:86:38:6b:f5:9c:ac:8b:a6:15:4f:05:0c:33:74: 3d:08:a3:1c:43:e7:71:73:2c:93:0b:aa:ec:38:95:54:4f:f3: df:81:da:c2:68:b4:23:c6:5f:eb:cb:b0:f0:c0:25:b6:e4:aa: 7b:9b:e5:de:10:1e:a5:ce:51:af:f8:e0:df:11:2d:45:7d:dc: a6:5e:47:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUwNTMxMDQyMTMxWhcNMjUwNjA3MDQyMTMxWjAYMRYwFAYD VQQDEw02ODNhODNjYy05MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdbUjy57SUrlvZRKCP2iDFowWVRth/peeScZGGhdZU/vbXtlBQImGiJSG3UD MP+XFB1bf0jM8XiNA9kKALdQCb/IvhNXuFRkxhUb2sovUvc3POSfG/du8q3zmubo t7sDz047edBw551vlKJLWB0e9nm1lUphKYohj0zIWvxWAzkKmvLB7WQdtp3MsPMT 6YdfQSv/rBTmrUhriGCZ36rqkoYimCKkA0De/H8MAKmKcz/Eisky03LiUpcvkqAT x7yZPlsXQqNDx0Gikz2nqehWJXF16R7Bl6A2zch4FbthCWo61Q8RrX5gVhTp7Ja/ Zo9cbXrTkarwNBt6iJmPPIJ+ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEBi9Q1 VqeLVUhy+YOtwsi87MN1MB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM0zLWWpuQD/a9RcVM7UjFMzrlmrKuQyGQQNSx/uNiBKkZEmEyrMHX iW5q2sNQpKJzlHoxsJm5dKSEesAxyft0kGEzO9UNA39Zk0lg3BURR3Uud/T4a+KN 6cw1gJnLiHWCZIky3LUyeyZOsvO9BxIH/rFFpn0hsXrKzF1pXVExwLESt/v9cmz5 Js96MLgaFTVGO4U4/exx4awMCe8IKS830WLYWbVyBRnKmo4xoFWTlTN6ij6XvVE3 hjhr9Zysi6YVTwUMM3Q9CKMcQ+dxcyyTC6rsOJVUT/PfgdrCaLQjxl/ry7DwwCW2 5Kp7m+XeEB6lzlGv+ODfES1FfdymXke9 -----END CERTIFICATE-----Generated at Sat May 31 17:42:39 2025 by rpki-client