$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json) Hash identifier: k6+yeElhAgf0TeKHahtJwI2a1Ai586b49yJJ7QTpMcw= Subject key identifier: 67:8C:0E:5C:A7:C3:E6:89:77:27:BF:C1:14:38:1D:59:96:B5:20:0A Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft Manifest number: 012C Signing time: Sat 31 May 2025 04:37:08 +0000 Manifest this update: Sat 31 May 2025 04:37:08 +0000 Manifest next update: Sat 07 Jun 2025 04:37:08 +0000 Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: M800Z57expjzF4pG0Zgh8nNv+S1gDBC7670Zi92Bpew=) 2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: YC1hPH8mghnTJjDQYho998bjw91B3zrCEFjA4fVmKFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Validity Not Before: May 31 04:37:08 2025 GMT Not After : Jun 7 04:37:08 2025 GMT Subject: CN=683a8774-fb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:d7:04:e0:af:f3:88:b6:76:ab:c1:fb:e2: f1:2a:d3:ac:78:8a:0a:5a:86:6b:7a:1f:c1:d8:14: 9c:99:be:a3:71:15:73:f4:5e:eb:65:b7:5a:90:ec: d6:e7:ca:0c:ce:49:9f:3c:0d:32:76:76:c6:12:3d: b1:e3:95:d7:aa:34:35:af:c7:df:1d:cf:0e:57:4f: 22:f2:b6:32:9f:4e:a1:e5:90:02:62:e9:a3:61:1a: 8a:d5:db:0d:ed:9f:26:bc:82:6f:4c:66:27:93:1c: 63:e2:cd:32:4b:a9:56:fe:34:3d:b2:87:f1:a7:7a: 53:7a:de:f2:6a:c2:31:9e:f5:5c:a3:6b:d5:03:da: 1d:81:77:5b:95:a4:4c:9d:6e:fe:66:c2:39:a4:0e: 36:83:d2:5d:b6:00:23:cf:98:70:46:20:81:c6:80: 4a:fc:7e:2a:59:51:36:49:02:0c:41:dc:9c:db:ae: e4:db:14:78:55:33:c9:24:5a:36:a7:42:e0:42:4c: c8:54:39:1f:68:cd:39:47:be:68:11:fe:2f:21:58: 5c:76:dd:05:bb:6a:22:71:41:f4:6e:ef:fd:9e:e4: ba:09:57:50:10:48:1a:59:af:00:1c:a2:a0:f1:3a: 86:c5:fc:88:e2:94:08:8b:f1:73:b4:92:47:a1:29: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:0E:5C:A7:C3:E6:89:77:27:BF:C1:14:38:1D:59:96:B5:20:0A X509v3 Authority Key Identifier: keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ab:24:47:0e:f9:2a:ee:11:9c:ed:09:4d:c6:fa:a0:b5:ab: 32:46:18:3f:86:6e:16:c5:1c:52:c1:16:63:eb:5e:cf:4d:8f: 3c:50:e7:b6:12:9d:b0:ed:7e:a4:e1:7b:3d:fb:dc:37:33:8f: 2a:fb:11:d0:c0:c9:26:42:fc:7a:01:f1:5c:fb:50:0d:06:f6: f7:14:8a:19:fd:a9:53:65:ed:40:7c:3a:05:98:41:93:79:da: 39:07:ca:c3:b6:e8:3f:ac:a7:82:10:49:99:98:fd:2e:dc:41: 40:aa:61:8f:53:b0:93:70:11:86:f3:0c:19:0a:e2:14:60:b2: 89:62:94:23:9a:23:0b:07:16:fa:e9:db:52:b1:c9:63:4d:7b: ee:75:63:c4:84:e3:d7:aa:8f:b2:79:e0:03:06:b8:92:e7:eb: 46:dd:d6:27:0a:79:94:f8:55:b2:57:70:d8:fc:14:83:30:d1: d2:7c:aa:72:e5:e5:4e:cd:26:7f:e9:7b:8a:a2:ce:cd:f6:11: c1:ee:63:29:7e:02:3e:6b:58:e7:9f:a8:b5:cd:56:93:5c:d6: 39:6b:92:23:59:8a:1c:e9:8b:60:53:e7:ed:da:6c:3b:22:17: 90:b2:c7:37:e7:b6:99:da:4a:6a:8c:b4:ed:4d:3a:d0:e9:18: 4e:72:70:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2 QjdGMThEMTIwHhcNMjUwNTMxMDQzNzA4WhcNMjUwNjA3MDQzNzA4WjAYMRYwFAYD VQQDEw02ODNhODc3NC1mYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyILXBOCv84i2dqvB++LxKtOseIoKWoZreh/B2BScmb6jcRVz9F7rZbdakOzW 58oMzkmfPA0ydnbGEj2x45XXqjQ1r8ffHc8OV08i8rYyn06h5ZACYumjYRqK1dsN 7Z8mvIJvTGYnkxxj4s0yS6lW/jQ9sofxp3pTet7yasIxnvVco2vVA9odgXdblaRM nW7+ZsI5pA42g9JdtgAjz5hwRiCBxoBK/H4qWVE2SQIMQdyc267k2xR4VTPJJFo2 p0LgQkzIVDkfaM05R75oEf4vIVhcdt0Fu2oicUH0bu/9nuS6CVdQEEgaWa8AHKKg 8TqGxfyI4pQIi/FztJJHoSm3AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeMDlyn w+aJdye/wRQ4HVmWtSAKMB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5 RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC82MTQxNUY1OEE5RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZm cTdzNjJ2RXJBQ1ZyZnhqUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxqyRHDvkq7hGc7QlNxvqgtasyRhg/hm4WxRxSwRZj617PTY88UOe2 Ep2w7X6k4Xs9+9w3M48q+xHQwMkmQvx6AfFc+1ANBvb3FIoZ/alTZe1AfDoFmEGT edo5B8rDtug/rKeCEEmZmP0u3EFAqmGPU7CTcBGG8wwZCuIUYLKJYpQjmiMLBxb6 6dtSscljTXvudWPEhOPXqo+yeeADBriS5+tG3dYnCnmU+FWyV3DY/BSDMNHSfKpy 5eVOzSZ/6XuKos7N9hHB7mMpfgI+a1jnn6i1zVaTXNY5a5IjWYoc6YtgU+ft2mw7 IheQssc357aZ2kpqjLTtTTrQ6RhOcnAC -----END CERTIFICATE-----Generated at Sat May 31 17:08:52 2025 by rpki-client