$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: I9QJzRcnT4Ob4tjaqMKSLYYZuJn+KdZbrUKVrdC4Lmo= Subject key identifier: 27:CA:E8:E9:16:BC:CB:79:A8:61:7C:9C:ED:5A:DD:54:6E:14:9E:01 Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: 011E Signing time: Sat 31 May 2025 04:23:15 +0000 Manifest this update: Sat 31 May 2025 04:23:14 +0000 Manifest next update: Sat 07 Jun 2025 04:23:14 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: oA1ruTBOuoHZoJg+zD07e8cgwRjpF4lnftuPwPblRuI=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: wXMGwG7lxViwNnrJDB749sBIiL2piUFxteIQBHCkVTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: May 31 04:23:14 2025 GMT Not After : Jun 7 04:23:14 2025 GMT Subject: CN=683a8432-ab9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:42:37:2f:67:31:ee:e4:e6:d4:b3:e6:45:53: 7a:63:a7:56:7a:3b:b1:a4:79:96:b1:5c:46:c0:a7: fc:2d:1d:05:f7:8a:ee:06:98:e1:50:dd:af:35:15: 87:ff:0c:3b:5b:a6:05:ae:2c:95:ec:9f:80:55:fb: 40:75:32:bc:60:2b:d7:cd:4f:81:cc:63:e5:f2:1c: aa:85:97:4f:c5:39:d9:dd:b0:06:44:e4:4a:e1:ab: 46:86:67:d1:f3:c1:2f:e3:63:cb:20:fc:99:e8:e2: f1:63:c3:99:2e:6b:0d:01:bb:13:bb:50:98:02:39: e4:c8:db:4f:a6:0b:c8:26:50:1f:33:43:69:ef:2c: fb:c5:d2:4d:43:61:84:4e:6e:8a:80:1b:8b:49:79: 23:7f:a4:0c:a2:09:e7:fb:bf:45:b1:ec:b7:65:62: e2:82:27:c7:7f:7a:df:73:18:25:0d:fc:e2:9b:92: ba:f0:47:5e:9f:10:4c:9a:2e:d9:24:98:38:38:62: 2c:c8:63:e8:3e:65:98:e3:67:5b:63:a2:46:9c:0a: 96:aa:1e:2e:14:8d:1f:87:81:fa:76:21:18:02:cf: 82:05:0a:e5:6e:21:73:64:cc:d8:8a:09:d6:61:41: 9b:4a:12:57:fb:ea:79:3d:9f:d2:fb:e3:1f:b2:95: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CA:E8:E9:16:BC:CB:79:A8:61:7C:9C:ED:5A:DD:54:6E:14:9E:01 X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:19:fa:8d:58:75:ca:1a:5f:65:2a:b0:73:22:30:5d:e8:0e: dd:86:f5:78:eb:0f:47:1d:84:fd:73:1a:fa:ee:79:8f:e9:d8: 39:85:19:9e:e2:05:37:b8:63:54:8b:2a:5a:5e:be:e8:cd:58: 55:ca:c4:f7:8a:fd:d7:da:c9:00:3c:6c:0c:f1:7e:2b:13:a7: fd:f2:0c:50:7f:c9:5e:81:dc:5e:c5:56:5f:92:49:49:cd:dc: dd:45:08:8a:4d:17:21:30:83:22:c5:2a:7d:81:7a:52:28:85: 9e:06:f5:5b:bd:fc:a5:01:87:4c:7c:39:ba:f5:39:76:99:9f: fa:8b:b8:23:06:f1:95:06:8f:a3:d4:8e:f9:22:3d:e7:14:e9: b0:65:f7:66:38:e2:e1:3c:43:66:7e:b9:59:b6:55:b6:02:b4: 8a:e2:7b:5f:e5:1c:62:1a:c5:f2:b5:3d:96:23:cd:4a:fd:31: 51:17:5f:a5:79:5d:d2:c8:83:12:93:96:70:c9:04:1f:d4:be: 0f:a9:eb:27:c8:60:54:d9:ee:96:ab:ff:8f:99:83:04:ec:4d: 34:f2:f7:54:8b:e7:20:27:42:5c:a1:6c:5f:98:9b:88:d4:59: 3a:8b:a9:7a:d4:4f:4f:07:12:9b:20:fd:ba:33:61:8e:5c:bf: ff:46:e7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw QjYxMzgyMEQwHhcNMjUwNTMxMDQyMzE0WhcNMjUwNjA3MDQyMzE0WjAYMRYwFAYD VQQDEw02ODNhODQzMi1hYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EI3L2cx7uTm1LPmRVN6Y6dWejuxpHmWsVxGwKf8LR0F94ruBpjhUN2vNRWH /ww7W6YFriyV7J+AVftAdTK8YCvXzU+BzGPl8hyqhZdPxTnZ3bAGRORK4atGhmfR 88Ev42PLIPyZ6OLxY8OZLmsNAbsTu1CYAjnkyNtPpgvIJlAfM0Np7yz7xdJNQ2GE Tm6KgBuLSXkjf6QMognn+79Fsey3ZWLigifHf3rfcxglDfzim5K68EdenxBMmi7Z JJg4OGIsyGPoPmWY42dbY6JGnAqWqh4uFI0fh4H6diEYAs+CBQrlbiFzZMzYignW YUGbShJX++p5PZ/S++MfspV0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfK6OkW vMt5qGF8nO1a3VRuFJ4BMB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4 NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z Y0stRUJWZV9RVm9MWVRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFGfqNWHXKGl9lKrBzIjBd6A7dhvV46w9HHYT9cxr67nmP6dg5hRme 4gU3uGNUiypaXr7ozVhVysT3iv3X2skAPGwM8X4rE6f98gxQf8legdxexVZfkklJ zdzdRQiKTRchMIMixSp9gXpSKIWeBvVbvfylAYdMfDm69Tl2mZ/6i7gjBvGVBo+j 1I75Ij3nFOmwZfdmOOLhPENmfrlZtlW2ArSK4ntf5RxiGsXytT2WI81K/TFRF1+l eV3SyIMSk5ZwyQQf1L4PqesnyGBU2e6Wq/+PmYME7E008vdUi+cgJ0JcoWxfmJuI 1Fk6i6l61E9PBxKbIP26M2GOXL//Rueb -----END CERTIFICATE-----Generated at Sat May 31 16:57:44 2025 by rpki-client