$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: 10JDPXd2HRpNQ6nYjkzfXPdIzutOtT+d+ZhAEWmHyIo= Subject key identifier: 5D:34:79:16:40:7A:61:9D:20:C4:C7:8C:9C:B3:4A:12:63:2A:AC:97 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A1E Signing time: Fri 30 May 2025 20:11:01 +0000 Manifest this update: Fri 30 May 2025 20:11:01 +0000 Manifest next update: Fri 06 Jun 2025 20:11:01 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: rc1IBs0K/56GKESsx2Dq9i+XqPTln0mwQalhEnDQci8=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2688 (0xa80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: May 30 20:11:01 2025 GMT Not After : Jun 6 20:11:01 2025 GMT Subject: CN=683a10d5-3b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:59:da:3a:38:ed:25:cb:84:a6:e3:44:6c: 14:0e:7a:a8:70:7f:9c:6f:ed:22:2d:74:99:72:ab: 2b:a6:d5:92:93:e1:00:64:03:cb:f0:d1:36:0b:0a: c9:93:c6:60:01:0e:df:9d:a0:66:ea:f5:61:20:9e: ca:87:ca:ee:3a:2f:6f:92:c9:44:36:87:dc:2d:b2: 8b:8e:d7:93:3c:5a:72:10:5c:e5:b0:0a:69:79:ef: 8e:d3:96:81:b3:09:7f:ee:70:a7:09:62:ef:6b:15: 75:6a:2d:d5:75:a0:22:8c:59:91:e5:8e:9a:de:70: db:51:1b:86:8e:0e:a3:f9:5e:0b:f1:5e:d6:57:7c: 6a:d7:14:af:cc:05:09:ad:18:87:c2:a4:6b:97:7e: 3d:37:0f:52:4c:60:d1:ba:70:a8:30:4b:e2:86:a0: cd:9c:78:3c:82:94:d3:cf:d8:54:fe:3a:ea:b0:3b: 53:e1:8e:38:6e:bc:65:da:71:fe:50:1e:c9:1e:38: c5:eb:ef:44:ee:0b:cc:4f:cf:04:3b:82:14:90:e9: 4e:a6:b3:8e:78:cb:cb:d4:09:1d:67:eb:e7:c6:dd: a6:c7:84:fd:87:6a:f6:8f:67:36:18:97:04:20:6e: 16:bf:b7:9f:38:3e:70:57:bb:f0:d5:9b:cd:5a:8c: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:79:16:40:7A:61:9D:20:C4:C7:8C:9C:B3:4A:12:63:2A:AC:97 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:bb:77:23:c3:52:11:74:5b:74:31:4d:cc:07:74:c5:72:90: d6:5f:28:d6:35:3f:1c:a4:90:3e:8b:03:5a:1e:ae:fe:db:38: 07:fd:26:bd:9e:6d:f4:30:70:9f:74:d3:84:3a:3c:3e:1b:1b: c5:2f:e6:e7:de:14:f5:38:67:58:23:f3:0b:3e:09:ce:79:be: 2c:25:4f:ee:af:65:2a:14:77:c6:57:82:b2:2f:eb:00:19:1a: d2:26:ed:1a:4e:6a:d8:2c:64:83:b2:b5:c2:20:83:f1:f9:ff: 57:c9:4e:e8:23:1c:1a:f7:a2:a5:fc:40:6d:f6:da:86:5f:60: 22:2c:3a:a3:1e:b3:9e:3f:3f:b5:39:17:f9:2c:67:df:61:22: f3:c7:89:49:45:97:51:be:73:a4:6d:c5:fd:79:fa:84:08:28: 90:e8:dd:2c:72:ff:cf:3f:a0:af:c6:30:36:c6:be:b9:f0:77: 0e:3e:36:4b:b7:48:73:a9:11:26:8c:f6:9e:f5:9b:80:79:81: 35:be:03:be:24:b7:40:8d:40:92:02:c9:f7:4f:3b:77:19:fe: 0f:89:5c:e1:48:b4:c5:33:e5:cc:e0:30:33:20:03:e4:c1:84: 29:49:9a:9b:48:8a:51:63:e7:74:3b:49:be:84:a8:f5:d6:c0: 1d:42:a2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUwNTMwMjAxMTAxWhcNMjUwNjA2MjAxMTAxWjAYMRYwFAYD VQQDEw02ODNhMTBkNS0zYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurFZ2jo47SXLhKbjRGwUDnqocH+cb+0iLXSZcqsrptWSk+EAZAPL8NE2CwrJ k8ZgAQ7fnaBm6vVhIJ7Kh8ruOi9vkslENofcLbKLjteTPFpyEFzlsAppee+O05aB swl/7nCnCWLvaxV1ai3VdaAijFmR5Y6a3nDbURuGjg6j+V4L8V7WV3xq1xSvzAUJ rRiHwqRrl349Nw9STGDRunCoMEvihqDNnHg8gpTTz9hU/jrqsDtT4Y44brxl2nH+ UB7JHjjF6+9E7gvMT88EO4IUkOlOprOOeMvL1AkdZ+vnxt2mx4T9h2r2j2c2GJcE IG4Wv7efOD5wV7vw1ZvNWoy2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF00eRZA emGdIMTHjJyzShJjKqyXMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCu3cjw1IRdFt0MU3MB3TFcpDWXyjWNT8cpJA+iwNaHq7+2zgH/Sa9 nm30MHCfdNOEOjw+GxvFL+bn3hT1OGdYI/MLPgnOeb4sJU/ur2UqFHfGV4KyL+sA GRrSJu0aTmrYLGSDsrXCIIPx+f9XyU7oIxwa96Kl/EBt9tqGX2AiLDqjHrOePz+1 ORf5LGffYSLzx4lJRZdRvnOkbcX9efqECCiQ6N0scv/PP6CvxjA2xr658HcOPjZL t0hzqREmjPae9ZuAeYE1vgO+JLdAjUCSAsn3Tzt3Gf4PiVzhSLTFM+XM4DAzIAPk wYQpSZqbSIpRY+d0O0m+hKj11sAdQqKd -----END CERTIFICATE-----Generated at Sat May 31 17:13:03 2025 by rpki-client