$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: arRvQ43hoYKB3jyfcBhwuaNGalgsqi8BfNW9AI4v8H0= Subject key identifier: 22:6B:E5:A1:CD:2F:12:C3:79:D7:68:95:54:AD:DB:48:8A:BD:53:57 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: F5 Signing time: Sat 31 May 2025 04:57:50 +0000 Manifest this update: Sat 31 May 2025 04:57:50 +0000 Manifest next update: Sat 07 Jun 2025 04:57:50 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: R0eaRE+GxS+x/1j++1EwjLx76UoSlo2ir4kp/9i2Jc8=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: Gi1fjcJYFrnx1YgdQysI3ht+gEJR9oM+PSXe3rgp9Wc=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: May 31 04:57:50 2025 GMT Not After : Jun 7 04:57:50 2025 GMT Subject: CN=683a8c4e-caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:80:e1:17:38:f8:cf:68:47:ca:4c:5b:d0: 0a:20:21:43:7c:77:e0:5e:97:41:29:05:f4:34:16: 33:44:a1:0a:19:04:9b:8d:66:e1:4b:11:0f:19:b9: ae:dd:fa:88:b2:fc:49:c9:a5:f3:c6:b8:ee:09:43: 38:0b:11:aa:fa:2b:12:32:ea:89:3a:04:bb:21:f1: f1:42:e5:b4:13:2c:e1:a7:a5:af:06:7e:9a:67:aa: df:4b:1a:3e:29:57:09:1f:da:35:bf:ca:55:d4:1f: f2:9f:0a:dc:ab:06:a4:84:7a:88:4f:f0:57:7e:0e: 60:69:d4:e6:8f:ed:15:5b:bf:2c:47:a2:99:34:b7: 56:6c:15:34:3e:78:c9:1f:e1:64:36:c8:39:1f:a4: 28:c7:2d:b9:b1:7c:37:b8:99:4e:e4:54:6d:d6:5e: 51:1a:d6:d0:0b:aa:ac:55:55:38:75:37:21:95:35: 36:c2:28:28:13:f6:5e:70:a0:f1:32:88:28:c2:6c: cb:2d:41:f5:2e:51:80:ce:e1:89:a7:98:25:69:41: 34:b8:7d:31:6b:c5:23:48:98:fb:a3:1c:9d:4d:c5: df:76:95:e2:e1:bb:9f:cf:ee:ec:41:13:c5:2b:8b: e4:2f:e5:ef:c8:27:50:e8:fb:8e:5e:36:56:ee:66: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:E5:A1:CD:2F:12:C3:79:D7:68:95:54:AD:DB:48:8A:BD:53:57 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6a:d9:50:00:1d:b6:ef:3b:65:ff:b5:15:db:be:af:b6:33: 58:b9:62:e5:25:a9:9b:16:c1:d7:84:0c:dd:78:18:95:b2:46: 3d:de:22:fe:f1:f2:38:5c:fb:99:dd:26:a3:26:45:89:c8:07: 11:dd:ed:af:36:1d:56:99:1b:b8:09:5a:a0:68:0e:56:1e:c9: 97:5a:aa:ec:53:66:3f:3e:5a:ce:5c:3b:2a:79:9e:0f:cb:63: 79:92:eb:73:71:9c:4a:f1:dc:e9:63:87:8b:3f:8b:10:2b:eb: 66:ef:3b:54:ba:f3:50:47:40:a5:e1:28:15:2f:97:7a:cf:24: a0:e3:6a:fa:cf:b4:45:10:e0:b2:71:3a:7d:20:da:44:a6:4b: a6:67:0f:dc:f0:3a:d2:f1:eb:c2:32:9c:73:7d:29:03:cc:3f: 5d:51:20:39:2e:97:6e:3d:6b:0c:83:d3:fc:50:32:c3:ee:b3: ae:3f:72:56:c2:3b:a9:f9:84:1c:99:90:9b:ef:c6:b4:c3:dc: 1b:75:54:d7:bf:f0:76:bd:54:d5:7b:60:54:44:ec:47:0e:ab: be:c6:01:91:c8:c3:50:d5:cb:5f:d6:a5:3f:0c:f9:29:be:58: bb:bf:e5:3d:65:58:af:2d:da:da:da:b8:87:6e:88:92:c4:36: 50:be:d8:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwNTMxMDQ1NzUwWhcNMjUwNjA3MDQ1NzUwWjAYMRYwFAYD VQQDEw02ODNhOGM0ZS1jYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzWA4Rc4+M9oR8pMW9AKICFDfHfgXpdBKQX0NBYzRKEKGQSbjWbhSxEPGbmu 3fqIsvxJyaXzxrjuCUM4CxGq+isSMuqJOgS7IfHxQuW0Eyzhp6WvBn6aZ6rfSxo+ KVcJH9o1v8pV1B/ynwrcqwakhHqIT/BXfg5gadTmj+0VW78sR6KZNLdWbBU0PnjJ H+FkNsg5H6Qoxy25sXw3uJlO5FRt1l5RGtbQC6qsVVU4dTchlTU2wigoE/ZecKDx MogowmzLLUH1LlGAzuGJp5glaUE0uH0xa8UjSJj7oxydTcXfdpXi4bufz+7sQRPF K4vkL+XvyCdQ6PuOXjZW7maG/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJr5aHN LxLDeddolVSt20iKvVNXMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAatlQAB227ztl/7UV276vtjNYuWLlJambFsHXhAzdeBiVskY93iL+ 8fI4XPuZ3SajJkWJyAcR3e2vNh1WmRu4CVqgaA5WHsmXWqrsU2Y/PlrOXDsqeZ4P y2N5kutzcZxK8dzpY4eLP4sQK+tm7ztUuvNQR0Cl4SgVL5d6zySg42r6z7RFEOCy cTp9INpEpkumZw/c8DrS8evCMpxzfSkDzD9dUSA5LpduPWsMg9P8UDLD7rOuP3JW wjup+YQcmZCb78a0w9wbdVTXv/B2vVTVe2BUROxHDqu+xgGRyMNQ1ctf1qU/DPkp vli7v+U9ZVivLdra2riHboiSxDZQvtiO -----END CERTIFICATE-----Generated at Sat May 31 17:41:00 2025 by rpki-client