$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: j1azC7LFnOQh2l7C4NR+oxpHIeQXTLHYCrGDms7Qs4Q= Subject key identifier: EF:BC:0B:D2:A7:57:2E:B2:E3:1A:19:7A:82:94:C2:6D:0F:E1:87:24 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 0198 Signing time: Sat 31 May 2025 03:12:32 +0000 Manifest this update: Sat 31 May 2025 03:12:32 +0000 Manifest next update: Sat 07 Jun 2025 03:12:32 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: lO02bH+arATT/9VAngB281uyYlfrjsAQuwyFNQ4D2Jk=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: May 31 03:12:32 2025 GMT Not After : Jun 7 03:12:32 2025 GMT Subject: CN=683a73a0-1f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:b1:58:e2:db:cc:7b:96:11:66:f6:b0:c9: 76:b5:58:62:25:44:c8:94:6f:69:8f:ac:fa:62:01: 46:62:41:24:4a:3b:9f:4a:0d:9d:83:0d:2d:e1:90: c0:9a:cf:d2:c2:02:af:ee:be:83:4d:28:8f:4e:d6: 77:24:e1:e6:0f:35:5b:ad:1f:20:ba:a9:ce:a5:a6: 23:b0:9b:9b:6d:33:5d:e1:0f:0a:80:64:13:6c:70: f6:ad:6c:b1:75:db:d4:94:e1:74:00:3e:1a:65:32: 5a:82:0d:24:10:f5:37:b9:94:18:cf:51:b4:70:92: 28:be:3b:ef:eb:6b:b6:28:f7:e4:ed:5e:6c:dd:b2: 0f:0f:b4:5b:e6:b0:dd:b2:f8:09:59:79:6f:e9:c9: 0a:39:21:b0:0a:c8:75:8d:71:68:25:ed:34:d2:8c: 6c:a5:93:50:36:ab:b9:50:8a:15:89:9c:39:34:bd: 11:eb:14:06:ba:f6:de:01:05:e8:ef:96:02:56:35: ab:af:70:be:4e:29:99:ac:13:65:61:a0:c0:82:ca: d4:03:b2:5a:98:f8:b3:76:19:f7:e3:f9:fd:e1:b6: 73:35:39:51:33:08:b7:20:21:6b:28:35:e3:15:e7: 01:12:70:62:ae:97:d5:4b:18:81:16:e9:24:83:51: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BC:0B:D2:A7:57:2E:B2:E3:1A:19:7A:82:94:C2:6D:0F:E1:87:24 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:05:63:91:b6:55:1d:9a:5b:6e:ec:c9:b3:c0:bd:db:58: a0:02:53:f1:da:08:b3:f5:44:56:18:3a:ac:b8:2c:03:4b:19: 8f:84:cc:52:6d:e9:b2:3e:62:2c:43:2d:de:81:bb:3f:ab:bb: f1:91:71:e6:af:41:a6:60:b5:4d:a2:87:66:2a:3d:18:bb:36: fc:87:59:1f:d5:78:f5:76:1e:1b:aa:f9:5d:8b:e8:9f:d5:6e: 60:16:4d:89:04:ec:c3:3a:9b:fa:44:2f:c8:a5:25:c7:2c:99: 80:23:7e:38:75:c9:13:1d:e6:c6:46:d0:c3:48:8c:0f:4b:20: e0:7a:c1:53:8a:73:3a:45:af:b7:c7:db:0c:3c:79:bd:82:78: 0b:70:cd:0a:d9:9e:94:bb:2d:af:09:37:d3:05:70:7b:8c:f5: 71:5d:34:a6:2a:b5:ec:60:74:c4:4f:ab:d2:4f:f2:e8:a0:88: 4d:20:48:f5:d2:7e:e3:7a:64:67:97:92:d5:05:45:18:3b:81: ca:80:f6:b3:67:19:ba:1d:3f:be:ed:b4:7e:32:b1:3e:f3:1d: be:48:f5:e7:d2:9d:b8:96:c8:c8:13:e4:27:93:27:6e:a1:14: fc:f4:e5:df:0d:f8:c0:05:dd:dd:4d:f0:96:5e:5f:27:1a:d3: 8b:bb:99:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjUwNTMxMDMxMjMyWhcNMjUwNjA3MDMxMjMyWjAYMRYwFAYD VQQDEw02ODNhNzNhMC0xZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptuxWOLbzHuWEWb2sMl2tVhiJUTIlG9pj6z6YgFGYkEkSjufSg2dgw0t4ZDA ms/SwgKv7r6DTSiPTtZ3JOHmDzVbrR8guqnOpaYjsJubbTNd4Q8KgGQTbHD2rWyx ddvUlOF0AD4aZTJagg0kEPU3uZQYz1G0cJIovjvv62u2KPfk7V5s3bIPD7Rb5rDd svgJWXlv6ckKOSGwCsh1jXFoJe000oxspZNQNqu5UIoViZw5NL0R6xQGuvbeAQXo 75YCVjWrr3C+TimZrBNlYaDAgsrUA7JamPizdhn34/n94bZzNTlRMwi3ICFrKDXj FecBEnBirpfVSxiBFukkg1F4zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+8C9Kn Vy6y4xoZeoKUwm0P4YckMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMlAVjkbZVHZpbbuzJs8C921igAlPx2giz9URWGDqsuCwDSxmPhMxS bemyPmIsQy3egbs/q7vxkXHmr0GmYLVNoodmKj0Yuzb8h1kf1Xj1dh4bqvldi+if 1W5gFk2JBOzDOpv6RC/IpSXHLJmAI344dckTHebGRtDDSIwPSyDgesFTinM6Ra+3 x9sMPHm9gngLcM0K2Z6Uuy2vCTfTBXB7jPVxXTSmKrXsYHTET6vST/LooIhNIEj1 0n7jemRnl5LVBUUYO4HKgPazZxm6HT++7bR+MrE+8x2+SPXn0p24lsjIE+Qnkydu oRT89OXfDfjABd3dTfCWXl8nGtOLu5ky -----END CERTIFICATE-----Generated at Sat May 31 14:51:50 2025 by rpki-client