$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json) Hash identifier: pV29aUaYqO3LlsX8aExQaRNzkN4WTfGGSEbFcWj6twA= Subject key identifier: BF:43:7F:DB:00:30:12:B6:8F:53:DD:F9:71:33:81:93:95:91:F1:6D Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 1884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft Manifest number: 1868 Signing time: Sat 31 May 2025 16:27:32 +0000 Manifest this update: Sat 31 May 2025 16:27:32 +0000 Manifest next update: Sat 07 Jun 2025 16:27:32 +0000 Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: HHAydx9MAKzKb2zAvHIugXGO80OWax+8MiYt2hsR1iY=) 2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=) 3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=) 4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=) 5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6276 (0x1884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: May 31 16:27:32 2025 GMT Not After : Jun 7 16:27:32 2025 GMT Subject: CN=683b2df4-68b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:bb:55:a1:cf:0f:52:c2:1c:3d:ed:af:2a: ec:97:cd:69:ef:90:65:ea:94:3a:ef:c5:7d:35:1a: 14:5a:1c:8d:1c:ff:0a:27:42:aa:f9:fd:5d:23:f8: c4:c3:3f:7a:b1:d2:a5:df:d6:9f:4d:00:d5:da:50: d4:9b:9e:ec:e7:09:7b:46:ad:12:68:02:91:1f:47: 96:29:bc:c7:33:f7:6f:32:69:7c:a9:2b:83:f6:fa: 59:07:25:fc:6e:88:e7:e3:e5:78:b5:56:1d:2d:75: e0:f4:8a:bf:a9:17:90:de:46:88:30:dd:3f:cb:ba: 38:34:dc:95:b4:c9:6a:f4:25:bb:ab:6d:42:42:0c: 73:6e:a6:5c:d4:1a:5d:78:d0:fe:cc:73:72:8a:f4: 76:b3:9e:95:e9:d5:66:07:c4:ec:a4:3d:10:10:c6: 4e:98:dc:dd:56:db:8c:0d:03:bc:94:0f:88:6d:94: ff:6d:8c:8e:45:83:72:03:e1:ad:fd:4d:c7:4f:cd: 8e:72:52:fb:7c:1f:b1:f0:28:4e:24:b4:5c:a7:07: b8:47:1c:ef:77:4c:b9:4a:11:27:29:9f:ac:39:70: b2:bb:9f:95:59:57:2a:27:c4:5d:7a:19:23:6f:69: 47:bf:4d:9a:79:1b:a4:41:24:9a:ad:1a:df:94:84: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:43:7F:DB:00:30:12:B6:8F:53:DD:F9:71:33:81:93:95:91:F1:6D X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:80:5b:c4:a5:8d:90:86:f7:1d:a8:06:62:69:56:40:27:db: a4:7e:67:00:46:8b:fa:23:09:82:86:67:82:d5:fe:f2:aa:bf: 53:cf:f5:b7:35:ab:da:1f:b3:8a:1a:92:fd:ca:7b:8b:f5:1b: db:f3:6f:75:e8:d7:29:a6:c5:28:98:2d:51:1f:e6:6f:89:b0: 11:cc:1e:75:11:40:32:e8:75:01:9f:31:86:08:a9:73:41:6a: 4a:db:c7:03:15:43:2c:e2:97:81:27:62:c8:c8:28:02:61:b2: f2:61:f6:2c:ee:5c:eb:84:76:a7:d7:be:46:27:55:6b:6f:2e: 81:32:ce:69:34:f0:07:08:d8:65:cc:04:5e:37:d3:bc:a8:a3: 31:39:24:63:38:7a:ed:24:ab:ca:1e:6c:58:56:96:39:fe:db: b9:c6:70:1c:95:55:09:03:d3:34:cc:51:16:6c:2b:3b:3e:1e: d1:bf:d6:bb:eb:be:6b:10:20:42:e8:51:13:4f:dd:2c:93:a1: e0:26:8b:df:5e:02:3a:d5:83:0b:79:96:74:10:59:94:50:96: 5c:cd:00:af:8b:ae:bc:ad:e4:e3:41:ae:ad:a8:b5:40:5b:87: af:95:2e:a9:c7:cf:a9:e0:c0:9e:10:e5:0e:5d:60:b8:e2:b8: 9f:da:42:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUwNTMxMTYyNzMyWhcNMjUwNjA3MTYyNzMyWjAYMRYwFAYD VQQDEw02ODNiMmRmNC02OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KO7VaHPD1LCHD3tryrsl81p75Bl6pQ678V9NRoUWhyNHP8KJ0Kq+f1dI/jE wz96sdKl39afTQDV2lDUm57s5wl7Rq0SaAKRH0eWKbzHM/dvMml8qSuD9vpZByX8 bojn4+V4tVYdLXXg9Iq/qReQ3kaIMN0/y7o4NNyVtMlq9CW7q21CQgxzbqZc1Bpd eND+zHNyivR2s56V6dVmB8TspD0QEMZOmNzdVtuMDQO8lA+IbZT/bYyORYNyA+Gt /U3HT82OclL7fB+x8ChOJLRcpwe4Rxzvd0y5ShEnKZ+sOXCyu5+VWVcqJ8Rdehkj b2lHv02aeRukQSSarRrflISLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9Df9sA MBK2j1Pd+XEzgZOVkfFtMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzk1My8xMjJEOEQyOEE0OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNW c3cyY3NpMWZpRTBYeFdtYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHgFvEpY2QhvcdqAZiaVZAJ9ukfmcARov6IwmChmeC1f7yqr9Tz/W3 NavaH7OKGpL9ynuL9Rvb82916NcppsUomC1RH+ZvibARzB51EUAy6HUBnzGGCKlz QWpK28cDFUMs4peBJ2LIyCgCYbLyYfYs7lzrhHan175GJ1Vrby6BMs5pNPAHCNhl zAReN9O8qKMxOSRjOHrtJKvKHmxYVpY5/tu5xnAclVUJA9M0zFEWbCs7Ph7Rv9a7 675rECBC6FETT90sk6HgJovfXgI61YMLeZZ0EFmUUJZczQCvi668reTjQa6tqLVA W4evlS6px8+p4MCeEOUOXWC44rif2kKE -----END CERTIFICATE-----Generated at Sat May 31 17:53:07 2025 by rpki-client