$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: 8JfPiFCfLY5VSDAcozcwOXGuELznqSxYkh7P7mkYpI4= Subject key identifier: FF:E1:21:EA:16:52:A0:89:FE:B8:85:D5:A3:B0:FC:00:4A:7E:C9:0B Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0EB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0E8E Signing time: Fri 30 May 2025 17:53:21 +0000 Manifest this update: Fri 30 May 2025 17:53:20 +0000 Manifest next update: Fri 06 Jun 2025 17:53:20 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: JUk+w4dG8fWaN6HNRGn11dzyNWKFwR9U5VUDM6njhh0=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3760 (0xeb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: May 30 17:53:20 2025 GMT Not After : Jun 6 17:53:20 2025 GMT Subject: CN=6839f090-2fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:7e:7b:48:98:d3:d0:f9:6e:55:e6:7c:40: c5:73:2f:03:ec:4a:a9:97:44:33:1e:d4:82:95:91: d8:6f:67:3f:85:6f:96:d4:c0:ba:50:34:5c:a9:4d: e7:3f:65:c4:d6:4f:76:71:79:87:00:d3:b7:62:eb: 94:f8:6b:13:97:a3:15:76:da:07:ca:3b:4e:81:ac: c8:5e:dc:e2:89:0f:ac:7b:32:be:20:f4:8f:78:2d: 82:e0:a1:e0:bc:88:46:3f:73:97:e7:59:8c:06:08: 17:af:ec:4d:3b:5e:eb:73:61:e2:6f:57:d0:bd:ec: 07:ac:77:28:9f:53:52:70:0f:f1:94:8f:e3:52:a9: b0:b8:56:0a:f7:e9:fa:27:ae:8d:e5:6e:bc:d3:a7: a6:20:0d:05:c6:87:d5:91:93:ba:13:f6:ec:73:e6: a5:9f:56:52:e5:ba:d5:68:3d:5e:6d:89:78:ec:46: c6:37:96:a5:f3:d2:ec:05:87:db:0d:83:aa:4c:2e: 96:79:3c:81:c5:e9:da:37:d3:0f:01:40:b1:05:02: 83:16:42:19:8d:45:89:e5:13:3f:d7:5d:82:32:5a: 1d:00:6a:87:0e:1a:20:07:15:8c:9e:79:d8:63:9a: a2:7b:7b:9e:de:66:7c:f5:5e:b2:35:16:07:c8:7e: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:21:EA:16:52:A0:89:FE:B8:85:D5:A3:B0:FC:00:4A:7E:C9:0B X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e7:26:17:aa:87:5e:2e:a0:4f:5e:b9:f8:dc:61:99:a1:dd: 08:2a:7f:93:55:24:bf:5f:74:79:e7:99:0d:73:3c:59:58:ff: 8c:ef:e4:c3:c7:c2:82:bf:d2:5d:ac:bb:5c:fb:bf:a7:95:1c: e5:d2:46:d0:49:65:1b:a9:b0:41:58:90:f1:f5:cb:06:6e:d0: cf:d1:0e:52:49:3f:13:b4:d7:b0:2a:ed:2d:a5:52:6a:f8:59: a1:d9:f1:3a:2c:48:90:3a:e5:d7:f3:f7:41:f4:18:14:a7:e7: cb:8a:24:7a:20:5f:ab:52:ec:49:dc:2b:a2:89:c8:03:00:5b: e3:58:a9:09:88:b9:54:58:06:2d:19:66:de:62:9a:72:88:8a: 56:c6:c8:d4:81:9b:71:ab:fb:75:e5:b8:1a:5f:ac:23:44:94: 35:16:fe:7c:a9:5c:99:96:fa:b4:27:64:4e:a5:9f:da:0c:39: de:09:b7:45:88:6e:9d:74:52:56:a5:b7:36:f9:f8:6f:36:39: f5:19:2b:77:48:7b:c3:15:7d:99:d6:7f:60:25:72:9f:e1:99: 09:3b:1a:58:47:b6:bc:0d:87:fd:fb:29:9a:66:c9:24:00:27: d6:0c:79:17:72:8e:dc:a7:b5:5e:26:53:2b:76:d1:f3:fb:9a: 2a:c2:e8:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjUwNTMwMTc1MzIwWhcNMjUwNjA2MTc1MzIwWjAYMRYwFAYD VQQDEw02ODM5ZjA5MC0yZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu1+e0iY09D5blXmfEDFcy8D7Eqpl0QzHtSClZHYb2c/hW+W1MC6UDRcqU3n P2XE1k92cXmHANO3YuuU+GsTl6MVdtoHyjtOgazIXtziiQ+sezK+IPSPeC2C4KHg vIhGP3OX51mMBggXr+xNO17rc2Hib1fQvewHrHcon1NScA/xlI/jUqmwuFYK9+n6 J66N5W6806emIA0FxofVkZO6E/bsc+aln1ZS5brVaD1ebYl47EbGN5al89LsBYfb DYOqTC6WeTyBxenaN9MPAUCxBQKDFkIZjUWJ5RM/112CMlodAGqHDhogBxWMnnnY Y5qie3ue3mZ89V6yNRYHyH7DCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/hIeoW UqCJ/riF1aOw/ABKfskLMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw5yYXqodeLqBPXrn43GGZod0IKn+TVSS/X3R555kNczxZWP+M7+TD x8KCv9JdrLtc+7+nlRzl0kbQSWUbqbBBWJDx9csGbtDP0Q5SST8TtNewKu0tpVJq +Fmh2fE6LEiQOuXX8/dB9BgUp+fLiiR6IF+rUuxJ3CuiicgDAFvjWKkJiLlUWAYt GWbeYppyiIpWxsjUgZtxq/t15bgaX6wjRJQ1Fv58qVyZlvq0J2ROpZ/aDDneCbdF iG6ddFJWpbc2+fhvNjn1GSt3SHvDFX2Z1n9gJXKf4ZkJOxpYR7a8DYf9+ymaZskk ACfWDHkXco7cp7VeJlMrdtHz+5oqwugX -----END CERTIFICATE-----Generated at Sat May 31 16:43:51 2025 by rpki-client