$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: YwWYzp0UERSdgd/DQCNTy8J4nk7sp0keFqbgrNVxCkY= Subject key identifier: 62:F3:D9:95:91:40:4A:6C:C1:4E:D7:BF:0A:C0:38:11:EE:50:3A:6F Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 01D9 Signing time: Sat 31 May 2025 02:37:37 +0000 Manifest this update: Sat 31 May 2025 02:37:36 +0000 Manifest next update: Sat 07 Jun 2025 02:37:36 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: Iue3u39X9+y4cRrPVwV4f3li0b0CTJhMl2D2zMM3MJ8=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: May 31 02:37:36 2025 GMT Not After : Jun 7 02:37:36 2025 GMT Subject: CN=683a6b71-ce7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:ee:d6:9c:83:31:f7:77:65:8f:53:8e:42: a6:53:5f:17:ea:8f:c9:3c:2c:da:54:e6:4c:5f:0e: 9f:4e:87:0e:d3:2e:d6:9c:07:02:5d:16:1a:c7:5f: 46:8e:e9:d6:bd:9a:19:27:2e:9f:0b:f5:79:9e:9b: 4e:a5:ee:c0:58:99:d2:39:e6:6c:17:23:32:c2:04: 8f:eb:55:d1:e3:c4:11:73:44:c7:31:ba:20:89:91: 01:9c:5e:8b:87:53:a4:69:6f:2b:81:94:eb:5b:de: 27:9a:d8:2d:d6:2d:10:06:f3:69:b2:4f:9f:82:34: 4a:12:c1:b0:87:fc:91:b7:3c:72:d8:a1:18:f8:d2: a5:f4:23:b4:ba:7e:0f:65:45:9a:2c:e8:6e:b7:f2: 76:61:fb:ba:45:c4:fc:d7:75:01:70:11:53:a8:7a: 6d:9b:79:4d:04:df:1d:4f:1d:ff:cf:49:c8:70:63: 1b:0d:e8:97:cb:dc:25:5b:f1:b2:0a:f8:02:cd:83: cb:e5:8e:17:74:c0:a7:0b:ec:06:3e:1a:aa:44:b8: b5:83:65:4e:96:64:d2:a4:fb:6f:0f:9c:ca:1f:be: 60:d0:8a:91:6f:ef:7a:3d:34:cb:77:e8:03:93:47: 31:43:46:c7:9e:79:fa:fe:9f:32:0a:2d:3e:59:35: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:D9:95:91:40:4A:6C:C1:4E:D7:BF:0A:C0:38:11:EE:50:3A:6F X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:10:74:16:5b:90:06:8f:50:29:69:61:fa:85:b7:d0:ef:04: ee:0d:a5:50:36:67:1c:81:79:c2:11:c5:f5:77:56:55:9c:ee: 4b:2a:fc:69:75:a0:ed:5e:fa:f0:f4:86:e7:e6:19:0e:64:7c: 50:d3:2f:35:32:bf:7e:9b:d2:df:25:49:3c:d5:7c:90:39:24: aa:5c:da:b8:39:22:1e:6a:7d:85:fe:03:01:a7:65:c2:d7:e1: 3d:bc:50:93:cf:c3:e1:86:88:32:8a:86:76:18:ff:62:20:22: 25:e9:dd:f1:a8:38:9b:d4:0b:22:3b:0f:b8:59:51:85:e2:eb: d3:9c:d6:25:c9:c5:3f:e8:ee:33:d7:8c:69:56:bc:bc:f4:b4: f7:3b:c9:2c:bd:5f:f3:20:f7:a0:85:07:48:f7:61:47:46:e7: a4:bf:16:68:b8:5b:6c:ed:36:9e:61:45:b3:f0:49:97:70:42: cb:6f:66:83:bc:63:ef:3a:21:5b:6d:45:82:07:bd:db:9c:93: 0f:61:c0:d3:0f:02:a9:7f:bd:f3:ab:d8:a2:f0:87:ef:15:e5: bc:02:e6:f9:86:4a:25:29:68:53:eb:c1:37:e6:25:15:c2:f7: 87:84:f6:e9:2b:83:dd:02:bd:3c:b5:25:48:73:6f:6d:8f:de: 12:52:55:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwNTMxMDIzNzM2WhcNMjUwNjA3MDIzNzM2WjAYMRYwFAYD VQQDEw02ODNhNmI3MS1jZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sfu1pyDMfd3ZY9TjkKmU18X6o/JPCzaVOZMXw6fTocO0y7WnAcCXRYax19G junWvZoZJy6fC/V5nptOpe7AWJnSOeZsFyMywgSP61XR48QRc0THMbogiZEBnF6L h1OkaW8rgZTrW94nmtgt1i0QBvNpsk+fgjRKEsGwh/yRtzxy2KEY+NKl9CO0un4P ZUWaLOhut/J2Yfu6RcT813UBcBFTqHptm3lNBN8dTx3/z0nIcGMbDeiXy9wlW/Gy CvgCzYPL5Y4XdMCnC+wGPhqqRLi1g2VOlmTSpPtvD5zKH75g0IqRb+96PTTLd+gD k0cxQ0bHnnn6/p8yCi0+WTWGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLz2ZWR QEpswU7XvwrAOBHuUDpvMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFEHQWW5AGj1ApaWH6hbfQ7wTuDaVQNmccgXnCEcX1d1ZVnO5LKvxp daDtXvrw9Ibn5hkOZHxQ0y81Mr9+m9LfJUk81XyQOSSqXNq4OSIean2F/gMBp2XC 1+E9vFCTz8PhhogyioZ2GP9iICIl6d3xqDib1AsiOw+4WVGF4uvTnNYlycU/6O4z 14xpVry89LT3O8ksvV/zIPeghQdI92FHRuekvxZouFts7TaeYUWz8EmXcELLb2aD vGPvOiFbbUWCB73bnJMPYcDTDwKpf73zq9ii8IfvFeW8Aub5hkolKWhT68E35iUV wveHhPbpK4PdAr08tSVIc29tj94SUlXf -----END CERTIFICATE-----Generated at Sat May 31 16:26:55 2025 by rpki-client