$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json) Hash identifier: wQ8VJErQ2PGJ5VWzH3xE/k1BAfXw/TbZHL/xUriFNsI= Subject key identifier: 5C:53:12:BC:18:4B:47:05:0D:2B:46:05:1E:E4:C3:D5:89:05:19:CD Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft Manifest number: 92 Signing time: Sat 31 May 2025 05:59:13 +0000 Manifest this update: Sat 31 May 2025 05:59:13 +0000 Manifest next update: Sat 07 Jun 2025 05:59:13 +0000 Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: Ta+cDKjhrbywWU4LrYTIzjvozyi7jaA9EM9ibkyHHZs=) 2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: yDqC4T9k/RQEkfG5fQ7+DRcSfQmuJV8SSd24ypWwq18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Validity Not Before: May 31 05:59:13 2025 GMT Not After : Jun 7 05:59:13 2025 GMT Subject: CN=683a9ab1-7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:b9:00:ce:fa:34:c6:6b:89:f4:50:fe:e8: 31:59:d7:dd:53:36:01:33:3a:4e:c9:4a:c9:da:bd: a9:59:7f:f7:c5:99:95:b4:5c:7e:a3:34:7f:96:39: bd:44:e0:ce:03:dd:07:8f:80:45:fb:83:24:28:84: 89:c5:a7:44:ff:68:66:d0:53:af:8f:9e:f0:0f:fb: fe:c7:f3:7c:3d:b3:24:f6:98:61:e3:68:38:13:16: e1:b3:a4:62:97:f2:4c:98:0e:cd:ba:74:1a:2f:d8: d6:f4:1b:91:b9:b2:c5:7a:76:e9:5c:a0:3e:cc:74: 96:09:50:4a:b1:e6:b3:de:04:2e:47:a5:59:f8:b2: 63:6e:7c:1e:16:ba:94:f0:94:3d:ba:ef:5e:24:ce: e8:e4:dc:26:0d:b8:10:0a:2e:36:ea:36:ab:0c:bd: a7:00:87:13:4e:25:2b:28:a9:e7:16:95:97:04:91: 0b:ee:d0:fa:44:06:85:a5:50:c9:21:5d:bb:5c:19: cd:f0:1f:09:e0:28:73:70:79:77:a8:d9:56:77:3b: 93:1a:8a:02:15:8a:45:e2:b1:50:c8:9c:4b:b3:8a: 90:20:a8:73:af:01:10:52:13:4e:b0:00:ba:dc:9d: 3b:4a:4d:a6:d7:16:6d:4c:21:eb:85:69:c9:5a:d6: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:12:BC:18:4B:47:05:0D:2B:46:05:1E:E4:C3:D5:89:05:19:CD X509v3 Authority Key Identifier: keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:dd:1c:47:04:54:76:21:d4:f0:32:c0:28:05:56:31:21:a7: b1:30:66:c1:b9:ba:33:3f:d2:e4:82:27:a6:9c:a7:81:93:92: 33:d1:b0:21:b4:ae:36:c5:ca:87:54:a1:92:cd:ca:4e:70:88: 09:16:d3:b2:a6:21:14:75:ef:26:18:e4:c2:c8:75:dd:c4:a3: 37:71:9d:86:01:2a:9d:b2:a5:fb:bd:44:74:7f:bc:be:12:36: 8b:83:d0:de:eb:86:df:2c:7d:21:a4:9b:47:61:0e:57:95:51: 9d:79:92:b1:37:2d:aa:fa:36:a3:a3:f7:a2:a9:54:1d:d9:62: f6:af:3d:ae:c9:48:16:dd:d4:a5:8d:48:6d:4a:e5:49:5c:54: 81:3e:f6:ca:b1:2b:71:e2:24:20:cf:48:f6:85:90:66:16:24: 46:75:91:a5:dd:7f:df:17:3e:f5:36:62:82:46:e1:9f:10:33: a7:a2:39:a3:92:c5:77:25:15:05:cc:d0:05:75:5c:2a:a5:41: ba:7f:0b:5a:58:39:84:88:b8:5f:78:14:82:b1:03:11:b0:9b: 1d:95:a2:d5:a0:8e:ee:b5:14:d4:5c:69:c3:a5:69:df:55:ab: 6c:11:8e:ae:8f:30:1b:5f:c3:34:1a:a3:8d:45:05:57:c6:4d: 8d:86:47:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBQzYxMTAvBgNVBAUTKEZDNzkyRjFENjJGMjk1REY0NDFGQTIxRThGM0JDRjI3 Q0E2MTA2MzAwHhcNMjUwNTMxMDU1OTEzWhcNMjUwNjA3MDU1OTEzWjAYMRYwFAYD VQQDEw02ODNhOWFiMS03Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2L25AM76NMZrifRQ/ugxWdfdUzYBMzpOyUrJ2r2pWX/3xZmVtFx+ozR/ljm9 RODOA90Hj4BF+4MkKISJxadE/2hm0FOvj57wD/v+x/N8PbMk9phh42g4Exbhs6Ri l/JMmA7NunQaL9jW9BuRubLFenbpXKA+zHSWCVBKseaz3gQuR6VZ+LJjbnweFrqU 8JQ9uu9eJM7o5NwmDbgQCi426jarDL2nAIcTTiUrKKnnFpWXBJEL7tD6RAaFpVDJ IV27XBnN8B8J4ChzcHl3qNlWdzuTGooCFYpF4rFQyJxLs4qQIKhzrwEQUhNOsAC6 3J07Sk2m1xZtTCHrhWnJWtZwrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxTErwY S0cFDStGBR7kw9WJBRnNMB8GA1UdIwQYMBaAFPx5Lx1i8pXfRB+iHo87zyfKYQYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREFDNi81OUVCRTJBRTVF QzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxkOUVINkllanp2UEo4cGhC akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxk OUVINkllanp2UEo4cGhCakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz3RxHBFR2IdTwMsAoBVYxIaexMGbBubozP9LkgiemnKeBk5Iz0bAh tK42xcqHVKGSzcpOcIgJFtOypiEUde8mGOTCyHXdxKM3cZ2GASqdsqX7vUR0f7y+ EjaLg9De64bfLH0hpJtHYQ5XlVGdeZKxNy2q+jajo/eiqVQd2WL2rz2uyUgW3dSl jUhtSuVJXFSBPvbKsStx4iQgz0j2hZBmFiRGdZGl3X/fFz71NmKCRuGfEDOnojmj ksV3JRUFzNAFdVwqpUG6fwtaWDmEiLhfeBSCsQMRsJsdlaLVoI7utRTUXGnDpWnf VatsEY6ujzAbX8M0GqONRQVXxk2NhkfJ -----END CERTIFICATE-----Generated at Sat May 31 16:57:44 2025 by rpki-client