$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json) Hash identifier: StX5S2GaxgaaR0nENEPOo8tYFFDy8r2++vzxyx5LmvQ= Subject key identifier: D1:09:E9:8F:A3:9D:5E:FD:31:07:75:7F:A8:16:4D:15:59:8C:D2:5E Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft Manifest number: 1B Signing time: Sat 31 May 2025 07:30:09 +0000 Manifest this update: Sat 31 May 2025 07:30:08 +0000 Manifest next update: Sat 07 Jun 2025 07:30:08 +0000 Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: 1RdHnkByn/zEXvS7nPaWDXFncphFFHjNWQo6ZxIoFg4=) 2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: nOUBr+CqAJHxGP5VlXuW/aGl6J+jLJf/ElMdL6qIZFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Validity Not Before: May 31 07:30:08 2025 GMT Not After : Jun 7 07:30:08 2025 GMT Subject: CN=683ab000-af64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:e4:df:df:31:60:6d:54:28:6c:7a:43:85: 58:2c:d8:14:a1:a0:2a:77:f8:93:53:0a:c8:fa:e0: 06:fa:64:f0:48:f4:69:38:3e:f9:cb:ce:c1:7d:e9: b2:fa:31:f2:b5:9f:68:e0:7f:cd:f6:bc:52:43:9b: c7:ec:b6:e0:85:85:4b:df:48:5f:4c:f0:a5:75:9a: 83:67:82:48:25:33:60:83:94:74:37:e5:16:10:5b: 90:1d:e1:b0:d0:83:c2:6a:81:61:bd:78:e7:d4:6c: f2:5a:f8:f9:98:8d:e5:6d:ae:0a:96:88:3a:2b:a4: 89:8f:9c:56:e9:22:e5:22:18:39:66:bf:cf:2e:d6: 50:1a:86:b8:62:92:17:b7:a1:bf:da:11:3a:b8:09: 2e:ef:96:93:6c:62:c6:ed:5b:56:b9:4d:f5:ec:57: 04:40:cd:f2:3b:a3:34:ce:1d:24:e4:b3:54:d3:1d: 4d:54:d7:fe:75:1d:fe:ae:46:a1:9d:de:55:53:63: e3:19:7e:b9:f8:04:d3:91:35:d3:37:24:21:b9:2d: c2:03:97:c5:a2:79:3a:16:d8:c2:97:91:04:32:47: 68:59:5a:d6:2a:a2:1b:b9:61:6a:a4:a7:72:20:a7: 09:7d:44:39:a8:30:af:a3:3d:b6:64:a1:5c:f8:cc: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:E9:8F:A3:9D:5E:FD:31:07:75:7F:A8:16:4D:15:59:8C:D2:5E X509v3 Authority Key Identifier: keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:dd:39:dc:be:ab:b9:38:e2:69:d6:af:3e:d1:5b:04:59: a6:12:55:19:9b:24:57:ef:40:61:e0:79:5b:9f:9e:30:7e:c4: 7c:bb:25:8d:10:fd:97:47:84:37:12:24:5c:a1:13:f8:3d:54: b2:2b:4a:f4:0f:aa:0d:00:17:66:8e:d6:20:fc:c5:cc:bd:ce: 7f:f3:47:db:6a:ff:6d:2d:2c:a5:bf:1c:41:d5:6e:cd:77:98: ee:b8:22:13:0a:1f:c7:ce:74:5b:f3:75:96:7e:a0:47:61:9c: 4f:d8:9b:71:86:60:2d:4d:ba:bc:39:76:05:40:58:06:ec:0e: 94:6c:f3:82:de:94:6e:b2:d5:dc:53:1e:55:d7:2f:bf:75:8e: 6d:e0:86:f5:99:06:a6:b7:03:12:c8:b6:ed:82:31:5f:75:a3: e9:cd:e2:25:19:eb:5d:1e:13:88:74:09:e1:04:3f:eb:9e:b2: 9b:f6:18:01:0c:0b:0b:08:e4:fd:4a:e0:df:e6:b1:6d:c9:46: 43:bb:3d:8f:d5:04:e4:b7:09:66:4e:4a:56:2a:89:34:a5:9b: fe:88:62:3d:f1:77:69:00:a9:b2:19:75:1e:4a:b9:df:27:4b: 67:61:9d:dc:7c:71:96:d4:6b:4b:9d:0f:21:ac:0a:a7:6a:c2: 58:62:27:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDA3RTExMC8GA1UEBRMoMUUwNzkxRUJERDBDOTRDMzU2QkEzNzNEN0UwRjAxNjEw M0Q0MEI5MjAeFw0yNTA1MzEwNzMwMDhaFw0yNTA2MDcwNzMwMDhaMBgxFjAUBgNV BAMTDTY4M2FiMDAwLWFmNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9QeTf3zFgbVQobHpDhVgs2BShoCp3+JNTCsj64Ab6ZPBI9Gk4PvnLzsF96bL6 MfK1n2jgf832vFJDm8fstuCFhUvfSF9M8KV1moNngkglM2CDlHQ35RYQW5Ad4bDQ g8JqgWG9eOfUbPJa+PmYjeVtrgqWiDorpImPnFbpIuUiGDlmv88u1lAahrhikhe3 ob/aETq4CS7vlpNsYsbtW1a5TfXsVwRAzfI7ozTOHSTks1TTHU1U1/51Hf6uRqGd 3lVTY+MZfrn4BNORNdM3JCG5LcIDl8WieToW2MKXkQQyR2hZWtYqohu5YWqkp3Ig pwl9RDmoMK+jPbZkoVz4zDNtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0Qnpj6Od Xv0xB3V/qBZNFVmM0l4wHwYDVR0jBBgwFoAUHgeR690MlMNWujc9fg8BYQPUC5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMDdFL0UwMjNGMjFFMTUw NzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGdlUjY5ME1sTU5XdWpjOWZnOEJZUVBVQzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE MDdFL0UwMjNGMjFFMTUwNzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1O V3VqYzlmZzhCWVFQVUM1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANm3Tncvqu5OOJp1q8+0VsEWaYSVRmbJFfvQGHgeVufnjB+xHy7JY0Q /ZdHhDcSJFyhE/g9VLIrSvQPqg0AF2aO1iD8xcy9zn/zR9tq/20tLKW/HEHVbs13 mO64IhMKH8fOdFvzdZZ+oEdhnE/Ym3GGYC1Nurw5dgVAWAbsDpRs84LelG6y1dxT HlXXL791jm3ghvWZBqa3AxLItu2CMV91o+nN4iUZ610eE4h0CeEEP+uespv2GAEM CwsI5P1K4N/msW3JRkO7PY/VBOS3CWZOSlYqiTSlm/6IYj3xd2kAqbIZdR5Kud8n S2dhndx8cZbUa0udDyGsCqdqwlhiJ0k= -----END CERTIFICATE-----Generated at Sat May 31 17:29:02 2025 by rpki-client