$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: eqgkzI0aUf5rWm2Njbodyng8sDQoPDZIUucThSJNDT8= Subject key identifier: 94:A7:89:4C:4B:15:E5:A3:CE:D3:84:80:18:80:89:B7:E8:17:54:C9 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 09FD Signing time: Mon 24 Mar 2025 20:04:30 +0000 Manifest this update: Mon 24 Mar 2025 20:04:30 +0000 Manifest next update: Mon 31 Mar 2025 20:04:30 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: njDQ1A9uqTZtb55pK62ht7vNFmnj1b3KrPGbVqGcDO8=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Mar 2025 20:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661 Validity Not Before: Mar 24 20:04:30 2025 GMT Not After : Mar 31 20:04:30 2025 GMT Subject: CN=67e1bace-1240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:97:89:50:0f:ed:39:71:69:f2:0f:8b:c0: 2d:a8:6c:2e:37:90:3d:60:00:fe:53:08:d6:c9:a1: 44:1b:af:3a:55:94:58:19:6c:f1:29:0f:e8:b6:4a: 4f:0b:8a:ae:d2:11:06:3d:1d:3c:a5:87:be:d2:e4: 6d:63:03:2f:ae:8d:b6:68:16:61:38:fc:1e:c4:e8: c6:3d:95:bd:d2:8f:52:8a:b1:be:33:66:2f:01:09: ec:ab:1b:11:00:5a:d4:10:85:70:21:38:1e:74:4c: 0f:e3:08:54:9e:a6:f2:36:f6:59:01:9c:f7:15:a9: 25:12:af:4a:3c:18:45:d9:c8:a3:f8:a8:7b:1b:a0: ff:73:89:f6:07:f8:91:2f:47:55:8c:c5:b1:df:e5: 65:bb:c3:d4:c4:e8:a2:7e:9b:7a:8b:0c:f3:ce:fc: ee:39:53:b8:3f:1d:bb:73:81:77:01:b3:06:e2:f8: d2:28:d7:95:07:28:b0:4f:3d:7a:81:ad:0f:df:8e: c0:60:5d:b4:ed:01:74:0b:e1:5a:e2:3f:e7:e2:0a: 10:5a:7d:3b:07:96:75:7d:ad:dc:b4:79:b9:a0:d0: 2a:ee:fe:08:80:89:2e:a5:38:55:79:77:1b:9c:99: bf:3c:cd:6d:32:5f:f1:15:7c:59:00:8d:a0:61:59: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:89:4C:4B:15:E5:A3:CE:D3:84:80:18:80:89:B7:E8:17:54:C9 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:26:a0:9f:60:43:f0:5f:25:22:c4:5a:91:21:d5:67:0d:7f: 15:65:b9:f5:fa:07:e8:89:20:70:ab:44:3e:44:8a:6f:ab:ab: be:14:2d:dc:e9:b7:df:57:42:e4:84:34:83:4f:a5:70:89:98: b1:71:05:9e:6b:ec:2a:ff:4b:c4:39:02:21:6d:80:3b:08:5e: b5:73:fe:77:87:52:3a:91:8d:3c:a2:82:13:f7:cc:2f:e2:23: 4c:1e:91:7e:88:5b:ea:10:cc:bd:da:32:ef:03:61:1b:d6:9b: d6:9c:ef:08:41:20:34:f8:7e:45:93:e4:16:6a:0d:91:03:0d: 30:8d:eb:83:86:1f:fc:74:d8:ee:3e:28:08:c9:43:7f:9c:20: 6b:01:d5:6d:3c:30:73:40:1d:54:b6:7c:df:d5:92:3e:50:13: 3c:41:db:23:81:fa:af:e4:36:95:21:5d:21:02:d1:8c:38:19: 47:98:3b:63:0e:90:47:a1:f5:ce:5a:20:b9:08:00:3c:e9:a6: 30:c4:83:ef:8c:13:6f:a0:66:d9:2a:9e:30:1f:e3:0a:44:35: 51:14:25:c2:af:d3:fd:e4:b4:e4:36:b8:86:33:2d:77:72:99: 90:a9:5c:f3:ad:6a:a4:e4:4e:fe:0b:2f:ae:6e:c7:0b:b1:94: 48:a0:9e:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUwMzI0MjAwNDMwWhcNMjUwMzMxMjAwNDMwWjAYMRYwFAYD VQQDEw02N2UxYmFjZS0xMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbaXiVAP7TlxafIPi8AtqGwuN5A9YAD+UwjWyaFEG686VZRYGWzxKQ/otkpP C4qu0hEGPR08pYe+0uRtYwMvro22aBZhOPwexOjGPZW90o9SirG+M2YvAQnsqxsR AFrUEIVwITgedEwP4whUnqbyNvZZAZz3FaklEq9KPBhF2cij+Kh7G6D/c4n2B/iR L0dVjMWx3+Vlu8PUxOiifpt6iwzzzvzuOVO4Px27c4F3AbMG4vjSKNeVByiwTz16 ga0P347AYF207QF0C+Fa4j/n4goQWn07B5Z1fa3ctHm5oNAq7v4IgIkupThVeXcb nJm/PM1tMl/xFXxZAI2gYVl8EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSniUxL FeWjztOEgBiAibfoF1TJMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLJqCfYEPwXyUixFqRIdVnDX8VZbn1+gfoiSBwq0Q+RIpvq6u+FC3c 6bffV0LkhDSDT6VwiZixcQWea+wq/0vEOQIhbYA7CF61c/53h1I6kY08ooIT98wv 4iNMHpF+iFvqEMy92jLvA2Eb1pvWnO8IQSA0+H5Fk+QWag2RAw0wjeuDhh/8dNju PigIyUN/nCBrAdVtPDBzQB1Utnzf1ZI+UBM8Qdsjgfqv5DaVIV0hAtGMOBlHmDtj DpBHofXOWiC5CAA86aYwxIPvjBNvoGbZKp4wH+MKRDVRFCXCr9P95LTkNriGMy13 cpmQqVzzrWqk5E7+Cy+ubscLsZRIoJ7J -----END CERTIFICATE-----Generated at Wed Mar 26 15:24:27 2025 by rpki-client