$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: N3IDCDJqtKnkz2B7WVeiMXxYc4E430WFPAuJqVGCSGU= Subject key identifier: 7F:9A:F0:1B:1C:39:22:6E:31:0E:A7:F3:2B:FE:A2:B4:35:C5:24:F2 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 1492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 147B Signing time: Fri 30 May 2025 17:05:24 +0000 Manifest this update: Fri 30 May 2025 17:05:23 +0000 Manifest next update: Fri 06 Jun 2025 17:05:23 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: AbQ7B0S1bZWdGiCUDd9JsQkPRlklM10LoRj8f7Utuzk=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5266 (0x1492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: May 30 17:05:23 2025 GMT Not After : Jun 6 17:05:23 2025 GMT Subject: CN=6839e553-6607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:2b:dc:74:12:81:ee:0a:68:2e:5b:11:4b: 85:a6:75:d2:09:35:66:52:7a:82:ad:30:53:82:6f: 48:ab:80:e1:d0:55:a2:7c:49:2b:b8:63:bb:f5:ee: 29:83:29:07:03:57:a6:90:41:5e:c5:ae:1e:fb:28: 2c:3c:78:5a:c2:d0:37:78:b8:cc:fa:a1:9b:db:f4: df:0f:cf:cb:24:b6:7d:cb:82:40:06:52:19:6b:29: 9a:2e:f5:67:e8:d1:7d:05:60:b7:48:6b:7a:eb:12: f3:4a:fa:ce:ac:d1:e5:31:f8:9f:3f:1a:55:af:25: 05:d3:0f:a7:05:50:9d:03:9f:9d:35:55:fb:58:3b: 04:19:97:ee:2f:d6:5b:63:e5:6e:6c:4e:fc:eb:83: 39:26:99:36:82:b4:04:0f:5a:f1:0d:fd:c4:fe:d8: 50:d3:7e:6d:cb:c7:b4:6f:8f:12:94:9c:61:84:b5: 8d:81:c9:54:22:26:f9:93:3f:a0:f8:38:31:4a:2b: 10:1b:07:1f:60:8e:7c:b6:1d:9e:82:62:c3:78:8e: 6d:f4:a3:16:31:d5:e0:9c:28:ea:f9:ac:d0:58:eb: ea:4f:c0:eb:84:da:6c:27:07:0b:4a:a4:64:e9:e6: 60:e7:cc:a5:1d:30:34:88:b2:8c:f8:78:6e:36:1d: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9A:F0:1B:1C:39:22:6E:31:0E:A7:F3:2B:FE:A2:B4:35:C5:24:F2 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c0:84:f4:ba:ec:c2:5b:bb:ae:cb:d3:47:2d:b3:92:cf:05: df:2c:e9:b9:10:c9:df:9d:aa:0a:87:29:c0:79:83:63:6f:dc: 5b:66:9b:f5:94:51:28:94:24:99:79:52:3c:44:10:c9:04:06: 6c:5f:d1:c0:a6:72:e8:e5:24:68:f7:a0:59:c4:ac:78:0a:c2: 6c:19:18:d3:7a:cd:39:aa:c6:43:b1:62:da:de:2c:86:2b:c5: 9d:54:33:35:ed:63:81:43:6b:5f:97:fb:37:bd:13:81:2b:70: 84:b9:55:a3:6c:60:e4:c1:f6:5e:81:26:7f:48:bc:ba:65:18: 82:a6:65:6d:2a:4c:ae:4b:89:70:2d:e5:24:a1:2b:13:de:d3: 6b:be:a3:06:6e:cb:b6:66:a6:38:85:5e:89:be:b8:df:db:87: 56:a3:eb:f9:c8:cb:93:59:38:65:a0:8c:76:75:86:29:ed:1d: 0a:80:33:75:46:81:91:3c:ba:f2:48:77:cd:87:1c:0f:68:c8: bc:f9:50:19:b1:93:3b:58:1d:51:83:0b:96:06:e6:be:f3:1b: a5:0a:7e:1e:c3:55:77:37:18:d5:83:99:c8:81:5b:86:06:00: b5:d2:d5:60:9a:de:c0:c9:48:01:18:da:f5:aa:b7:bb:f6:87: 8b:0c:5d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNTMwMTcwNTIzWhcNMjUwNjA2MTcwNTIzWjAYMRYwFAYD VQQDEw02ODM5ZTU1My02NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF8r3HQSge4KaC5bEUuFpnXSCTVmUnqCrTBTgm9Iq4Dh0FWifEkruGO79e4p gykHA1emkEFexa4e+ygsPHhawtA3eLjM+qGb2/TfD8/LJLZ9y4JABlIZaymaLvVn 6NF9BWC3SGt66xLzSvrOrNHlMfifPxpVryUF0w+nBVCdA5+dNVX7WDsEGZfuL9Zb Y+VubE7864M5Jpk2grQED1rxDf3E/thQ035ty8e0b48SlJxhhLWNgclUIib5kz+g +DgxSisQGwcfYI58th2egmLDeI5t9KMWMdXgnCjq+azQWOvqT8DrhNpsJwcLSqRk 6eZg58ylHTA0iLKM+HhuNh26PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+a8Bsc OSJuMQ6n8yv+orQ1xSTyMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmwIT0uuzCW7uuy9NHLbOSzwXfLOm5EMnfnaoKhynAeYNjb9xbZpv1 lFEolCSZeVI8RBDJBAZsX9HApnLo5SRo96BZxKx4CsJsGRjTes05qsZDsWLa3iyG K8WdVDM17WOBQ2tfl/s3vROBK3CEuVWjbGDkwfZegSZ/SLy6ZRiCpmVtKkyuS4lw LeUkoSsT3tNrvqMGbsu2ZqY4hV6Jvrjf24dWo+v5yMuTWThloIx2dYYp7R0KgDN1 RoGRPLrySHfNhxwPaMi8+VAZsZM7WB1RgwuWBua+8xulCn4ew1V3NxjVg5nIgVuG BgC10tVgmt7AyUgBGNr1qre79oeLDF1R -----END CERTIFICATE-----Generated at Sat May 31 17:54:50 2025 by rpki-client