$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: Mh35vD+RY+kckt54qQ8Z7SlXiwT+3nC3dWEAEpfB3bQ= Subject key identifier: C9:D1:E5:7B:1D:95:18:BF:8C:8B:D3:B4:B9:2E:B8:8E:0B:74:9D:15 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B18 Signing time: Fri 30 May 2025 16:28:42 +0000 Manifest this update: Fri 30 May 2025 16:28:41 +0000 Manifest next update: Fri 06 Jun 2025 16:28:41 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: E48xJxgqt0ER+AVa3zCVZUfz72evKgtn6BU3nw9nAjU=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7002 (0x1b5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: May 30 16:28:41 2025 GMT Not After : Jun 6 16:28:41 2025 GMT Subject: CN=6839dcb9-d9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:c8:b8:59:9f:f3:a7:4e:16:65:7b:c1:3e: d2:73:ef:c2:94:cf:d0:af:80:5e:eb:79:39:b9:27: a1:64:42:6e:43:ca:0a:a7:4e:c2:2c:b2:1b:93:bb: cc:14:2f:2e:fe:53:48:bc:20:1e:a9:46:ae:19:58: 16:0d:4f:b9:1a:1c:12:93:d0:01:d2:37:ec:af:54: d1:9e:5b:0e:cb:54:41:92:dd:a1:d5:04:01:12:f3: bb:7d:af:55:3e:64:ad:9e:d8:c7:c5:5a:da:8f:52: 37:9b:c5:67:b2:0a:40:75:51:6a:ed:0c:c7:16:db: e5:9c:17:fb:17:e6:04:e5:b6:cf:c8:58:83:bd:c7: 15:72:b6:5b:c1:e7:a1:fc:b4:ab:b8:e2:90:eb:f3: 27:6a:8f:fe:00:5c:b4:62:66:13:01:e4:90:25:cc: 16:86:39:2e:ea:f2:5c:e3:2a:84:be:2e:75:15:4d: c7:e6:10:b5:48:2a:2a:7a:50:17:45:19:3f:5f:8e: ca:5f:d1:5e:5e:9a:cc:1a:98:85:4d:25:ba:d5:34: 41:08:48:03:31:0e:67:34:62:06:00:e7:0f:92:6d: 02:e9:aa:25:aa:00:4a:85:39:0f:ac:41:d4:d9:56: 60:b2:34:df:4d:13:f9:2c:4a:7a:34:95:e4:50:47: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:E5:7B:1D:95:18:BF:8C:8B:D3:B4:B9:2E:B8:8E:0B:74:9D:15 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:44:d2:01:1b:26:bb:27:26:07:de:36:a9:20:13:9b:5d:b8: 38:a8:61:66:8d:79:18:cd:be:90:b0:05:14:b6:bd:88:80:f7: dc:0f:bb:e9:56:17:de:a4:4e:36:dd:fa:05:8d:8d:fd:7a:70: 3b:6b:9a:8a:b6:29:82:3c:1a:d8:77:c3:85:c3:01:a0:be:95: 40:b3:1c:f7:1a:32:e8:dd:02:ca:ca:5c:75:ce:7b:9e:0c:6a: db:0e:ef:b6:4c:2d:b2:57:07:a6:db:32:62:42:ab:d6:50:19: 2a:d1:84:2d:91:22:25:68:b8:56:f9:5c:35:9b:ac:9f:f8:e2: 79:bf:a5:82:92:ec:6f:7c:30:80:d0:8f:46:a9:5c:37:cc:a5: 4a:8d:7a:39:17:89:9c:a1:d7:75:97:e6:d9:b3:cc:54:94:1f: bb:59:95:5e:c7:a4:a3:7a:bd:6f:1b:59:01:68:db:f6:2e:47: a5:db:92:2e:1d:32:01:01:f6:92:a9:0a:05:81:bd:a6:5a:c5: e5:22:9c:e2:ce:10:87:a5:5c:d4:2e:31:f5:34:d2:1a:ba:94: 85:1c:2c:fb:52:55:10:ad:0e:4a:10:4c:3d:fd:f9:24:5e:fd: 2d:38:2c:26:fc:3f:d7:67:f8:99:6c:5d:7c:8f:20:c1:91:c1: 0d:76:4a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwNTMwMTYyODQxWhcNMjUwNjA2MTYyODQxWjAYMRYwFAYD VQQDEw02ODM5ZGNiOS1kOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJjIuFmf86dOFmV7wT7Sc+/ClM/Qr4Be63k5uSehZEJuQ8oKp07CLLIbk7vM FC8u/lNIvCAeqUauGVgWDU+5GhwSk9AB0jfsr1TRnlsOy1RBkt2h1QQBEvO7fa9V PmStntjHxVraj1I3m8VnsgpAdVFq7QzHFtvlnBf7F+YE5bbPyFiDvccVcrZbweeh /LSruOKQ6/Mnao/+AFy0YmYTAeSQJcwWhjku6vJc4yqEvi51FU3H5hC1SCoqelAX RRk/X47KX9FeXprMGpiFTSW61TRBCEgDMQ5nNGIGAOcPkm0C6aolqgBKhTkPrEHU 2VZgsjTfTRP5LEp6NJXkUEc+xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnR5Xsd lRi/jIvTtLkuuI4LdJ0VMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2RNIBGya7JyYH3japIBObXbg4qGFmjXkYzb6QsAUUtr2IgPfcD7vp VhfepE423foFjY39enA7a5qKtimCPBrYd8OFwwGgvpVAsxz3GjLo3QLKylx1znue DGrbDu+2TC2yVwem2zJiQqvWUBkq0YQtkSIlaLhW+Vw1m6yf+OJ5v6WCkuxvfDCA 0I9GqVw3zKVKjXo5F4mcodd1l+bZs8xUlB+7WZVex6Sjer1vG1kBaNv2Lkel25Iu HTIBAfaSqQoFgb2mWsXlIpzizhCHpVzULjH1NNIaupSFHCz7UlUQrQ5KEEw9/fkk Xv0tOCwm/D/XZ/iZbF18jyDBkcENdkr5 -----END CERTIFICATE-----Generated at Sat May 31 17:11:28 2025 by rpki-client